Shannon,
Comments below:
Shannon Johnson wrote:
>
>
> This may be a stupid question, and please forgive me if it is, but we've
> been holding up migrating to Windows Server 2008 (from 2000 and 2003),
> hoping that the Cosign module for IIS7 would be released in a stable
> form. We tried the beta module for IIS7 several months ago, and while it
> did its primary function and did authenticate users, we couldn't use it
> because some variables were unavailable, and we never figured out how to
> get the same info from the server.
>
Shannon, the variables are available using Request.ServerVariables[], as in:
<%
bool isNullOrEmpty ( string str ) {
return (str == null || str.Length == 0);
}
string[] cosignVars = new string[] {
"COSIGN_FACTOR",
"COSIGN_SERVICE",
"REMOTE_REALM",
"REMOTE_USER"
};
foreach ( string currentVar in cosignVars ) {
string currentVal = "UNAVAILABLE";
if ( !isNullOrEmpty(Request.ServerVariables[currentVar]) ) {
currentVal = Request.ServerVariables[currentVar];
}
Response.Write("<tr>");
Response.Write("<td>" + Server.HtmlEncode( currentVar ) + "</td>");
Response.Write("<td>" + Server.HtmlEncode( currentVal ) + "</td>");
Response.Write("</tr>");
}
%>
>
>
> Since the release of Cosign 3.0, I've checked the website and wiki, and
> haven't found anything that indicates that it works with 2008. This
> leads me to believe that the ISAPI filter used in 2000 and 2003 is still
> supported, while the 2008 module is supported in name only. Is this the
> case, or is someone using the 2008 module in a production environment?
> If anyone's using it, are you utilizing the REMOTE_USER variable (or
> some others that I can't remember at the moment)?
>
>
>
> Shannon
Here at U. Penn, we're using CosignModule for IIS7 on Windows 2008,
though not widely. We've had reports of problems and have been
diagnosing the problems and submitting patches. Those patches were
included in the two most recent releases.
As noted above, we are using REMOTE_USER.
HTH,
Darian
--
________________________________________________________________________
Darian Anthony Patrick
Senior Programmer Analyst, Application Security
Office of Information Systems & Computing Voice: (215) 573-1955
Networking & Telecommunications Unit E-mail: [email protected]
University of Pennsylvania Jabber/XMPP: [email protected]
---
CFC7 DF03 337E F7F6 1829 71ED 1038 88AF 3C88 E55C
________________________________________________________________________
------------------------------------------------------------------------------
Crystal Reports - New Free Runtime and 30 Day Trial
Check out the new simplified licensing option that enables unlimited
royalty-free distribution of the report engine for externally facing
server and web deployment.
http://p.sf.net/sfu/businessobjects
_______________________________________________
Cosign-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/cosign-discuss
