thanx Tim

>> GetAuthUser() will return a username that's been registered 
>> with the <cfloginuser> tag. CGI.AUTH_USER won't.

Hmmm. that's what I thought too. I've been looking into CFMX roles-based
security. 

but this is all the code I'm using. There is no <cfloginuser> tag in use.

<cfoutput>#getAuthUser()#</cfoutput>
<cfdump var = "#cgi#">

the machine with iis5 will also return the correct results for ASP code

<%= request.serverVariables("AUTH_USER") %> 

it just seems that in all cases iis5 does the "integrated windows
authentication", adds the correct value to AUTH_USER (for IE anyway) and the
3 ways (above) can display it.

so the questions now are:

* what does <cfloginuser name="xxx" password="yyy" roles=""> actually do
(what processes, is iis involved, is NTLM part of it, etc)

* how come I don't need <cfloginuser> when iis5 is using "integrated windows
authentication" ?

cheers
barry.b



-----Original Message-----
From: Tim McAuliffe [mailto:[EMAIL PROTECTED]
Sent: Friday, 13 June 2003 9:59 AM
To: CFAussie Mailing List
Subject: [cfaussie] Re: getAuthUser() quick question


> so getAuthUser() really is CGI.AUTH_USER

Not quite. GetAuthUser() will return a username that's been registered
with the <cfloginuser> tag. CGI.AUTH_USER won't.

They'll only be the same if you're using web server authentication.

HTH

Tim

---
You are currently subscribed to cfaussie as: [EMAIL PROTECTED]
To unsubscribe send a blank email to
[EMAIL PROTECTED]

MX Downunder AsiaPac DevCon - http://mxdu.com/

---
You are currently subscribed to cfaussie as: [EMAIL PROTECTED]
To unsubscribe send a blank email to [EMAIL PROTECTED]

MX Downunder AsiaPac DevCon - http://mxdu.com/

Reply via email to