Apache gethauthuser() - Cold Fusion
This is a discussion on Apache gethauthuser() - Cold Fusion ; We are using Coldfusion 8 on Debian Linux and Apache 2.
I am able to get the server to request Active Directory credentials from a
user similar to the IIS "Require authentication" function using authnz_ldap
module. This will force the ...
-
Apache gethauthuser()
We are using Coldfusion 8 on Debian Linux and Apache 2.
I am able to get the server to request Active Directory credentials from a
user similar to the IIS "Require authentication" function using authnz_ldap
module. This will force the user to authenticate using there active directory
user name and password before they are allowed on part of the site.
The problem is that Coldfusion does not seem to capture the login information
using #getauthUser()#. However this function does work on a Windows based
server when IIS is configured to "Require user Authentication", and the client
logs into the site.
I've tried a few variants of cgi.auth_user and the like but all return with
"[empty_string]". Can anyone provide some insight on how to extract this kind
of information for our Linux based server.
-
Re: Apache gethauthuser()
So after doing some research, this does not appear possible on Linux systems,
at least not securely.
As a work around I created a form that users will see if a cookie is not set
that uses the CFLDAP function to authenticate the user to the domain. If
authentication is confirmed then a vairable is set in a cookie which is checked
each time the user trys to access a page on the secure portal.
A good tutorial on this was found at the following URL.
http://flex.sys-con.com/node/114248?page=1