RE: PHP, using System account
| From: | USA) | Date: | Tue, 20 Aug 2002 15:00:05 +0000 |
| Subject: | RE: PHP, using System account | ||
| Groups: | php.db | ||
| Request: | Send a blank email to php-db+get-21251@lists.php.net to get a copy of this message | ||
That's what I'm doing. Since we require IE 5.0 + on our workstations I can get away with
Integrated Authentication only. If you want to support Netscape you'll have to allow Basic
Authentication (which is not very secure but fine on an intranet). With that enabled the Win2k
workstation will pass its credentials to the intranet application automatically. I have several
functions written that based on the $AUTH_USER variable retrieves all kind of AD information on the
user. I cache that to keep things running quickly. I have a global.inc include file for each module
in which is configured the group membership (if any) required for access. I superimpose that on a
simple native security scheme based on $AUTH_USER and an access level integer, and voila! The native
security really only manages the special case users like administrators and such keeping the
maintenance to a minimum. The users are quite happy, no user and password screens but it's
still secure. Even when accessed through the internet (vs. intranet) it works normally except users
do have to enter their credentials first. My only challenge now is keeping our Mac users working
right. IE on the Mac didn't work for this until the versions for OSX and versions of IE for Mac
are very inconsistent & bug ridden.
<>< Ryan
-----Original Message-----
From: aiQa [mailto:akan@aiqa.com]
Sent: Monday, August 19, 2002 11:58 PM
To: Ryan Jameson (USA)
Subject: PHP, using System account
Hi,
Our company also uses active directory and domain system on
Win2000 network.
Can i use windows authentication with PHP? I think the
answer is yes. So how can i do it? Is there a documentation
you can send or can you send an url?
Thanks,
Ozgur AKAN