isapi filter authentication

Hello, Is anyone out there successfuly using php scripts for authentication under the ISAPI interface? The reason I ask is that from looking at the current code, you would be required to have an NT user for anything you want to authenticate. Once I patched the filter to map to the anonymous user, I am able to make authentication work properly. I'm not ready to commit the patch until whoever has been working on this part of the code can explain what is going on there (in case I'm missing something obvious). Anyway, here is my patch. As an explanation, the purpose in the authentication filter is to map X number of usernames/passwords to a single NT user, so that PHP can be used for authentication (against ldap, mysql, whatever). You have to tell IIS what NT user it should use for authentication. If you blank out the username/password in the notification, IIS will use the anonymous NT user set up for that web site. Shane Caraveo Index: php4isapi.c =================================================================== RCS file: /repository/php4/sapi/isapi/php4isapi.c,v retrieving revision 1.70 diff -r1.70 php4isapi.c 631,632c631 < char *auth_user = ((HTTP_FILTER_AUTHENT *) pvNotification)->pszUser; < char *auth_password = ((HTTP_FILTER_AUTHENT *) pvNotification)->pszPassword; --- > HTTP_FILTER_AUTHENT *auth = (HTTP_FILTER_AUTHENT *) pvNotification; 634,635c633,635 < if (auth_user && auth_user[0]) { < SG(request_info).auth_user = estrdup(auth_user); --- > if (auth->pszUser && auth->pszUser[0]) { > SG(request_info).auth_user = estrdup(auth->pszUser); > memset(auth->pszUser, 0, auth->cbUserBuff); 637,638c637,639 < if (auth_password && auth_password[0]) { < SG(request_info).auth_password = estrdup(auth_password); --- > if (auth->pszPassword && auth->pszPassword[0]) { > SG(request_info).auth_password = estrdup(auth->pszPassword); > memset(auth->pszPassword, 0 , auth->cbPasswordBuff);