Rails - Dec 2007 - Active Directory / IE Auto Authentication

Has anyone been able to get some sort of Active Directory auto login
functionality working in a rails app?  Doesn''t IE make available some
kind of ldap token that I could grab?

Thanks,
Kevin
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"Ruby on Rails: Talk" group.
To post to this group, send email to
rubyonrails-talk-/JYPxA39Uh5TLH3MbocFFw@public.gmane.org
To unsubscribe from this group, send email to
rubyonrails-talk-unsubscribe-/JYPxA39Uh5TLH3MbocFFw@public.gmane.org
For more options, visit this group at
http://groups.google.com/group/rubyonrails-talk?hl=en
-~----------~----~----~----~------~----~------~--~---

You''re thinking about Kerberos.

If you''re using Apache as a web server then you can use something like
http://modauthkerb.sourceforge.net/ to authenticate the user and pass
the username through to as a variable.

On Dec 19, 8:14 am,
"kevincol...-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org"
<kevincol...-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org>
wrote:
> Has anyone been able to get some sort of Active Directory auto login
> functionality working in a rails app?  Doesn''t IE make available
some
> kind of ldap token that I could grab?
>
> Thanks,
> Kevin
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"Ruby on Rails: Talk" group.
To post to this group, send email to
rubyonrails-talk-/JYPxA39Uh5TLH3MbocFFw@public.gmane.org
To unsubscribe from this group, send email to
rubyonrails-talk-unsubscribe-/JYPxA39Uh5TLH3MbocFFw@public.gmane.org
For more options, visit this group at
http://groups.google.com/group/rubyonrails-talk?hl=en
-~----------~----~----~----~------~----~------~--~---

I don''t want apache handling authentication for me, my rails app is
handling authentication.  What I want is if the user is logged into
the domain and using IE, be able to grab their active directory
username.  And if they aren''t using IE, my rails app will present them
with a login form.

Thanks,
Kevin

On Dec 18, 1:41 pm,
"mhorosc...-Hqix5oD4n6s0n/F98K4Iww@public.gmane.org"
<mhorosc...-Hqix5oD4n6s0n/F98K4Iww@public.gmane.org>
wrote:
> You''re thinking about Kerberos.
>
> If you''re using Apache as a web server then you can use something
likehttp://modauthkerb.sourceforge.net/to authenticate the user and pass
> the username through to as a variable.
>
> On Dec 19, 8:14 am,
"kevincol...-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org"
<kevincol...-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org>
> wrote:
>
> > Has anyone been able to get some sort of Active Directory auto login
> > functionality working in a rails app?  Doesn''t IE make
available some
> > kind of ldap token that I could grab?
>
> > Thanks,
> > Kevin
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"Ruby on Rails: Talk" group.
To post to this group, send email to
rubyonrails-talk-/JYPxA39Uh5TLH3MbocFFw@public.gmane.org
To unsubscribe from this group, send email to
rubyonrails-talk-unsubscribe-/JYPxA39Uh5TLH3MbocFFw@public.gmane.org
For more options, visit this group at
http://groups.google.com/group/rubyonrails-talk?hl=en
-~----------~----~----~----~------~----~------~--~---

Yes. What you''re talking about is Integrated Windows Authentication
(i.e. SPNEGO). This is basically Internet Explorer passing Kerberos or
NTLM tokens if the web server supports it or falling back to HTTP
Basic auth otherwise.

This means that either your rails app needs to be able to talk SPNEGO
itself (which would be complicated to implement) or you have to rely
on the web server for authentication. Once the web server has done the
authentication you can read the username in your rails app through a
HTTP environment variable.

I know thats not precisely what you want, but that is what is
available.

Matthew

On Dec 19, 8:54 am,
"kevincol...-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org"
<kevincol...-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org>
wrote:
> I don''t want apache handling authentication for me, my rails app
is
> handling authentication.  What I want is if the user is logged into
> the domain and using IE, be able to grab their active directory
> username.  And if they aren''t using IE, my rails app will present
them
> with a login form.
>
> Thanks,
> Kevin
>
> On Dec 18, 1:41 pm,
"mhorosc...-Hqix5oD4n6s0n/F98K4Iww@public.gmane.org"<mhorosc...-Hqix5oD4n6s0n/F98K4Iww@public.gmane.org>
wrote:
> > You''re thinking about Kerberos.
>
> > If you''re using Apache as a web server then you can use
something likehttp://modauthkerb.sourceforge.net/toauthenticate the user and
pass
> > the username through to as a variable.
>
> > On Dec 19, 8:14 am,
"kevincol...-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org"
<kevincol...-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org>
> > wrote:
>
> > > Has anyone been able to get some sort of Active Directory auto
login
> > > functionality working in a rails app?  Doesn''t IE make
available some
> > > kind of ldap token that I could grab?
>
> > > Thanks,
> > > Kevin
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"Ruby on Rails: Talk" group.
To post to this group, send email to
rubyonrails-talk-/JYPxA39Uh5TLH3MbocFFw@public.gmane.org
To unsubscribe from this group, send email to
rubyonrails-talk-unsubscribe-/JYPxA39Uh5TLH3MbocFFw@public.gmane.org
For more options, visit this group at
http://groups.google.com/group/rubyonrails-talk?hl=en
-~----------~----~----~----~------~----~------~--~---