RE: [PHP] Capturing Windows Login Details

2003-07-15 Thread Hako Juraj
Hi,

I use windows built-in identification with PHP  IIS. You can capture only user-name 
this way. IMHO, it's impossible to catch windows passwords.

Juraj

 -Original Message-
 From: Curt Zirzow [mailto:[EMAIL PROTECTED] 
 Sent: Monday, July 14, 2003 11:26 PM
 To: [EMAIL PROTECTED]
 Subject: Re: [PHP] Capturing Windows Login Details
 
 
 Jonathan Wilkes [EMAIL PROTECTED] wrote:
  Why would you want to do this ?
  
  
  
  -Original Message-
  From: Gary Ogilvie [mailto:[EMAIL PROTECTED]
  Sent: 11 July 2003 13:35
  To: [EMAIL PROTECTED]
  Subject: [PHP] Capturing Windows Login Details
  
  
  Hi All,
  
  I need to capture the username and password used to login to Windows
  2000/XP with PHP. Does anybody know how to do this?
 
 I sure hope that this isn't possible.
 
  
  Many thanks
  
  Gary Ogilvie
  
  
 
 Curt
 -- 
 
 

--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



RE: [PHP] Capturing Windows Login Details

2003-07-14 Thread Jonathan Wilkes
Why would you want to do this ?



-Original Message-
From: Gary Ogilvie [mailto:[EMAIL PROTECTED]
Sent: 11 July 2003 13:35
To: [EMAIL PROTECTED]
Subject: [PHP] Capturing Windows Login Details


Hi All,

I need to capture the username and password used to login to Windows
2000/XP with PHP. Does anybody know how to do this?

Many thanks

Gary Ogilvie


-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php


Re: [PHP] Capturing Windows Login Details

2003-07-14 Thread Curt Zirzow
Jonathan Wilkes [EMAIL PROTECTED] wrote:
 Why would you want to do this ?
 
 
 
 -Original Message-
 From: Gary Ogilvie [mailto:[EMAIL PROTECTED]
 Sent: 11 July 2003 13:35
 To: [EMAIL PROTECTED]
 Subject: [PHP] Capturing Windows Login Details
 
 
 Hi All,
 
 I need to capture the username and password used to login to Windows
 2000/XP with PHP. Does anybody know how to do this?

I sure hope that this isn't possible.

 
 Many thanks
 
 Gary Ogilvie
 
 

Curt
-- 


-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



Re: [PHP] Capturing Windows Login Details

2003-07-11 Thread CPT John W. Holmes
 I need to capture the username and password used to login to Windows
 2000/XP with PHP. Does anybody know how to do this?

You can get the username, that's it.

$_SESSION['LOGON_USER']

---John Holmes...

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



RE: [PHP] Capturing Windows Login Details

2003-07-11 Thread Gary Ogilvie

OK - is there any other way of grabbing both the username and password
from somewhere else? For example the login details used to login onto
the Intranet through the firewall, or IIS?

Thanks :)

-Original Message-
From: CPT John W. Holmes [mailto:[EMAIL PROTECTED] 
Sent: 11 July 2003 14:36
To: Gary Ogilvie; [EMAIL PROTECTED]
Subject: Re: [PHP] Capturing Windows Login Details

 I need to capture the username and password used to login to Windows
 2000/XP with PHP. Does anybody know how to do this?

You can get the username, that's it.

$_SESSION['LOGON_USER']

---John Holmes...

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php


-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



Re: [PHP] Capturing Windows Login Details

2003-07-11 Thread Leif K-Brooks
CPT John W. Holmes wrote:

You can get the username, that's it.

$_SESSION['LOGON_USER']

Don't you mean $_SERVER['LOGON_USER']?

--
The above message is encrypted with double rot13 encoding.  Any unauthorized attempt 
to decrypt it will be prosecuted to the full extent of the law.


--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php


RE: [PHP] Capturing Windows Login Details

2003-07-11 Thread Gary Ogilvie
Everything I try I get undefined index what does this mean? It is
vital also that I can grab the user and the pass before somebody can
access a certain part of the website, like the authentication dialogs
that appear in Internet Explorer.

Gazza


-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



Re: [PHP] Capturing Windows Login Details

2003-07-11 Thread John Nichel
Leif K-Brooks wrote:
CPT John W. Holmes wrote:

You can get the username, that's it.

$_SESSION['LOGON_USER']

Don't you mean $_SERVER['LOGON_USER']?

I have no variable for either, and I'm authenticated thru a NT domain. 
We were doing this at the last place I worked for.  Users had to logon 
to the NT domain just to use their computer, so we wanted to make it 
easier for them to reach the intranet (linux box, running 
apache/php/etc.) without having to login to it.  Unfortunately, I didn't 
work on the project, so I'm afraid I won't be much help with the gory 
details, but I know we used LDAP in some way, shape, or form (the guy 
who did the project lurks around this mailing list from time to time). 
If I remember correctly, you had to use IE for this to work, and the 
domain (web site domain) had to be part of the NT domain.  I know...not 
much help, but maybe it'll give you a starting point.

--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php


Re: [PHP] Capturing Windows Login Details

2003-07-11 Thread Marek Kilimajer
If it is REALY needed ask the user. You might want to search for NTLM 
authentication.

Gary Ogilvie wrote:

OK - is there any other way of grabbing both the username and password
from somewhere else? For example the login details used to login onto
the Intranet through the firewall, or IIS?
Thanks :)


--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php


Re: [PHP] Capturing Windows Login Details

2003-07-11 Thread CPT John W. Holmes
 CPT John W. Holmes wrote:
 
 You can get the username, that's it.
 
 $_SESSION['LOGON_USER']
 
 Don't you mean $_SERVER['LOGON_USER']?

Yeah :) See what I get for giving up caffeine...

---John Holmes...

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



Re: [PHP] Capturing Windows Login Details

2003-07-11 Thread CPT John W. Holmes
 Everything I try I get undefined index what does this mean? It is
 vital also that I can grab the user and the pass before somebody can
 access a certain part of the website, like the authentication dialogs
 that appear in Internet Explorer.

Like Lief said, it's $_SERVER['LOGON_USER']...

That's only going to be set if you allow access by NT permissions instead of
allowing anonymous browsing, anyhow.

You're not going to be able to get the password, so give up on that. If
you're on an intranet, just use NT permissions on the directory and you can
specifically allow which individuals or groups you want and not allow anyone
else.

---John Holmes...


-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



RE: [PHP] Capturing Windows Login Details

2003-07-11 Thread Gary Ogilvie
I have found out that all I actually need is the username. That is all -
either the windows login username or the firewall username. How do I
grab either?

Gary


-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



Re: [PHP] Capturing Windows Login Details

2003-07-11 Thread John Nichel
CPT John W. Holmes wrote:
CPT John W. Holmes wrote:


You can get the username, that's it.

$_SESSION['LOGON_USER']

Don't you mean $_SERVER['LOGON_USER']?


Yeah :) See what I get for giving up caffeine...

---John Holmes...
Ughwhy torture yourself?!?!?!

--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php


RE: [PHP] Capturing Windows Login Details

2003-07-11 Thread Gary Ogilvie
Well here is some more information so you can understand what I am
trying to do:

I need to display their username in html/php document. This document has
a form which they fill out. It is to stop people changing who they are
when they fill out the form (for example joe bloggs filling out a
timesheet for Melinda messenger - hey it cud happen ;)).

So, by grabbing the username of their NT logon or Firewall access I can
control this.

Many thanks


-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



Re: [PHP] Capturing Windows Login Details

2003-07-11 Thread CPT John W. Holmes
 Well here is some more information so you can understand what I am
 trying to do:

 I need to display their username in html/php document. This document has
 a form which they fill out. It is to stop people changing who they are
 when they fill out the form (for example joe bloggs filling out a
 timesheet for Melinda messenger - hey it cud happen ;)).

 So, by grabbing the username of their NT logon or Firewall access I can
 control this.

Your web server needs to be IIS in order to get this. Is that the case?

If so, disable anonymous browsing. That may be all you have to do. Now,
access to the webroot, even though HTTP will require a valid user on your NT
domain. You can adjust the security settings of the webroot folder to allow
specific people or groups, also.

Now, $_SERVER['LOGON_USER'] will be set with the username of the person.

---John Holmes...


-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



RE: [PHP] Capturing Windows Login Details

2003-07-11 Thread Gary Ogilvie
Indeed that works thank you very much :)

-Original Message-
From: CPT John W. Holmes [mailto:[EMAIL PROTECTED] 
Sent: 11 July 2003 15:50
To: Gary Ogilvie; [EMAIL PROTECTED]
Subject: Re: [PHP] Capturing Windows Login Details

 Well here is some more information so you can understand what I am
 trying to do:

 I need to display their username in html/php document. This document
has
 a form which they fill out. It is to stop people changing who they are
 when they fill out the form (for example joe bloggs filling out a
 timesheet for Melinda messenger - hey it cud happen ;)).

 So, by grabbing the username of their NT logon or Firewall access I
can
 control this.

Your web server needs to be IIS in order to get this. Is that the case?

If so, disable anonymous browsing. That may be all you have to do. Now,
access to the webroot, even though HTTP will require a valid user on
your NT
domain. You can adjust the security settings of the webroot folder to
allow
specific people or groups, also.

Now, $_SERVER['LOGON_USER'] will be set with the username of the person.

---John Holmes...


-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php


-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php