kevincolyar-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org
2007-Dec-18 21:14 UTC
Active Directory / IE Auto Authentication
Has anyone been able to get some sort of Active Directory auto login functionality working in a rails app? Doesn''t IE make available some kind of ldap token that I could grab? Thanks, Kevin --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Ruby on Rails: Talk" group. To post to this group, send email to rubyonrails-talk-/JYPxA39Uh5TLH3MbocFFw@public.gmane.org To unsubscribe from this group, send email to rubyonrails-talk-unsubscribe-/JYPxA39Uh5TLH3MbocFFw@public.gmane.org For more options, visit this group at http://groups.google.com/group/rubyonrails-talk?hl=en -~----------~----~----~----~------~----~------~--~---
mhoroschun-Hqix5oD4n6s0n/F98K4Iww@public.gmane.org
2007-Dec-18 21:41 UTC
Re: Active Directory / IE Auto Authentication
You''re thinking about Kerberos. If you''re using Apache as a web server then you can use something like http://modauthkerb.sourceforge.net/ to authenticate the user and pass the username through to as a variable. On Dec 19, 8:14 am, "kevincol...-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org" <kevincol...-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org> wrote:> Has anyone been able to get some sort of Active Directory auto login > functionality working in a rails app? Doesn''t IE make available some > kind of ldap token that I could grab? > > Thanks, > Kevin--~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Ruby on Rails: Talk" group. To post to this group, send email to rubyonrails-talk-/JYPxA39Uh5TLH3MbocFFw@public.gmane.org To unsubscribe from this group, send email to rubyonrails-talk-unsubscribe-/JYPxA39Uh5TLH3MbocFFw@public.gmane.org For more options, visit this group at http://groups.google.com/group/rubyonrails-talk?hl=en -~----------~----~----~----~------~----~------~--~---
kevincolyar-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org
2007-Dec-18 21:54 UTC
Re: Active Directory / IE Auto Authentication
I don''t want apache handling authentication for me, my rails app is handling authentication. What I want is if the user is logged into the domain and using IE, be able to grab their active directory username. And if they aren''t using IE, my rails app will present them with a login form. Thanks, Kevin On Dec 18, 1:41 pm, "mhorosc...-Hqix5oD4n6s0n/F98K4Iww@public.gmane.org" <mhorosc...-Hqix5oD4n6s0n/F98K4Iww@public.gmane.org> wrote:> You''re thinking about Kerberos. > > If you''re using Apache as a web server then you can use something likehttp://modauthkerb.sourceforge.net/to authenticate the user and pass > the username through to as a variable. > > On Dec 19, 8:14 am, "kevincol...-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org" <kevincol...-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org> > wrote: > > > Has anyone been able to get some sort of Active Directory auto login > > functionality working in a rails app? Doesn''t IE make available some > > kind of ldap token that I could grab? > > > Thanks, > > Kevin--~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Ruby on Rails: Talk" group. To post to this group, send email to rubyonrails-talk-/JYPxA39Uh5TLH3MbocFFw@public.gmane.org To unsubscribe from this group, send email to rubyonrails-talk-unsubscribe-/JYPxA39Uh5TLH3MbocFFw@public.gmane.org For more options, visit this group at http://groups.google.com/group/rubyonrails-talk?hl=en -~----------~----~----~----~------~----~------~--~---
mhoroschun-Hqix5oD4n6s0n/F98K4Iww@public.gmane.org
2007-Dec-18 23:45 UTC
Re: Active Directory / IE Auto Authentication
Yes. What you''re talking about is Integrated Windows Authentication (i.e. SPNEGO). This is basically Internet Explorer passing Kerberos or NTLM tokens if the web server supports it or falling back to HTTP Basic auth otherwise. This means that either your rails app needs to be able to talk SPNEGO itself (which would be complicated to implement) or you have to rely on the web server for authentication. Once the web server has done the authentication you can read the username in your rails app through a HTTP environment variable. I know thats not precisely what you want, but that is what is available. Matthew On Dec 19, 8:54 am, "kevincol...-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org" <kevincol...-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org> wrote:> I don''t want apache handling authentication for me, my rails app is > handling authentication. What I want is if the user is logged into > the domain and using IE, be able to grab their active directory > username. And if they aren''t using IE, my rails app will present them > with a login form. > > Thanks, > Kevin > > On Dec 18, 1:41 pm, "mhorosc...-Hqix5oD4n6s0n/F98K4Iww@public.gmane.org"<mhorosc...-Hqix5oD4n6s0n/F98K4Iww@public.gmane.org> wrote: > > You''re thinking about Kerberos. > > > If you''re using Apache as a web server then you can use something likehttp://modauthkerb.sourceforge.net/toauthenticate the user and pass > > the username through to as a variable. > > > On Dec 19, 8:14 am, "kevincol...-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org" <kevincol...-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org> > > wrote: > > > > Has anyone been able to get some sort of Active Directory auto login > > > functionality working in a rails app? Doesn''t IE make available some > > > kind of ldap token that I could grab? > > > > Thanks, > > > Kevin--~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Ruby on Rails: Talk" group. To post to this group, send email to rubyonrails-talk-/JYPxA39Uh5TLH3MbocFFw@public.gmane.org To unsubscribe from this group, send email to rubyonrails-talk-unsubscribe-/JYPxA39Uh5TLH3MbocFFw@public.gmane.org For more options, visit this group at http://groups.google.com/group/rubyonrails-talk?hl=en -~----------~----~----~----~------~----~------~--~---