I would suggest using LDAP.  The attribute you need is "memberOf".  If
you use CFLDAP, set the SEPARATOR attribute = "|" (vertical pipe).  It
will make it much easier to loop through the group DNs that are
retrieved.


Be careful of using LDAP if a person is a member of more than 1000
groups.  You have to do some funky stuff if any multi-valued attributes
exceed 1000 items.


If that is the case, I would write a COM object that uses ADSI to get
the group membership.


Let me know if you want to see any code for either method.


Thanks

  _____  

From: Jochem van Dieten [mailto:[EMAIL PROTECTED]
Sent: Thursday, July 22, 2004 4:18 AM
To: CF-Talk
Subject: Re: Windows groups

Simon Whittaker wrote:
>
> If I am authenticating a user with Windows Authentication in IIS - I
> know that I can get the user name with the cgi.remote_user variable
> but is there any way for me to find out what windows groups the user
> is a member of?

"net user <username>" should tell you.

Jochem
  _____
[Todays Threads] [This Message] [Subscription] [Fast Unsubscribe] [User Settings] [Donations and Support]

Reply via email to