Apache gethauthuser() - Cold Fusion

This is a discussion on Apache gethauthuser() - Cold Fusion ; We are using Coldfusion 8 on Debian Linux and Apache 2. I am able to get the server to request Active Directory credentials from a user similar to the IIS "Require authentication" function using authnz_ldap module. This will force the ...

+ Reply to Thread
Results 1 to 2 of 2

Apache gethauthuser()

  1. Default Apache gethauthuser()

    We are using Coldfusion 8 on Debian Linux and Apache 2.

    I am able to get the server to request Active Directory credentials from a
    user similar to the IIS "Require authentication" function using authnz_ldap
    module. This will force the user to authenticate using there active directory
    user name and password before they are allowed on part of the site.

    The problem is that Coldfusion does not seem to capture the login information
    using #getauthUser()#. However this function does work on a Windows based
    server when IIS is configured to "Require user Authentication", and the client
    logs into the site.

    I've tried a few variants of cgi.auth_user and the like but all return with
    "[empty_string]". Can anyone provide some insight on how to extract this kind
    of information for our Linux based server.


  2. Default Re: Apache gethauthuser()

    So after doing some research, this does not appear possible on Linux systems,
    at least not securely.

    As a work around I created a form that users will see if a cookie is not set
    that uses the CFLDAP function to authenticate the user to the domain. If
    authentication is confirmed then a vairable is set in a cookie which is checked
    each time the user trys to access a page on the secure portal.

    A good tutorial on this was found at the following URL.
    http://flex.sys-con.com/node/114248?page=1



+ Reply to Thread