Mike
Very basic:
When you go into IIS(what we use) and make the selection to
accept/require certificates.
You will then get the CGI.Cert_subject variable filled in
([empty string] when not accepting client certs).
We broke this out into for variables we use: Cert_name,
Cert_number, Cert_type,Cert_CACType
<cfset Cert_Name = ListGetAt(CGI.Cert_subject,
ListContainsNoCase(CGI.Cert_subject, "CN="))>
<cfset Cert_Number = ListLast(Cert_Name, ".")>
<cfset Cert_Name = ListDeleteAt(ListDeleteAt(Cert_Name,
ListLen(Cert_Name,"."),"."),1,"=")>
<cfset Cert_Type =
ListDeleteAt(ListGetAt(ListDeleteAt(ListDeleteAt(CGI.Cert_subject,ListCo
ntainsNoCase(CGI.Cert_subject,"OU=")),ListContainsNoCase(CGI.Cert_subjec
t,"OU=")),ListContainsNoCase(CGI.Cert_subject, "OU=")),1,"=")>
<cfset Cert_CACType = ListGetAt(CGI.Cert_Issuer,
ListContainsNoCase(CGI.Cert_Issuer, "CN="))>
Gets something like:
Cert_name = USERLASTNAME.USERFIRSTNAME.MI (MILLER.MIKE.X)
Cert_Number = 1234567891 (10 digit number) called DOD EDI
Person Identifier.
Cert_type = CN=DOD CLASS 3 EMAIL CA-9, CN=DOD CLASS 3 CA-10
etc
Cert_CACType = USA, CONTRACTOR (USA is Govt Civ, Contractor
is just that).
Really all you need to map the CAC is the DOD EDI, the rest is
for info and cross checking.
Once we activated the certs, the user just had to log in once
with password, this mapped their CAC to their account.
For new users, they were given a temp password valid for 1 log
in, to map their CAC to their account.
Probly easier ways to get the information, but that's our way.
Does any of this help?
Rodney
-----Original Message-----
From: Mike Miller [mailto:[EMAIL PROTECTED]
Sent: Monday, July 30, 2007 2:05 PM
To: CF-Talk
Subject: DoD CAC authentication
I'm thinking of using CAC to provide a means of authenitcating users to
a role controlled application.
I've found little to cover this on the web over basic IIS "accept client
certs" and wonder if anyone in community has worked on something
similar.
Best,
Michael Miller
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
Download the latest ColdFusion 8 utilities including Report Builder,
plug-ins for Eclipse and Dreamweaver updates.
http;//www.adobe.com/cfusion/entitlement/index.cfm?e=labs%5adobecf8%5Fbeta
Archive:
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:286887
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe:
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
