Re: single sign on

On 05/07/06, Martin Staiger <mstaiger@informatik.uni-siegen.de> wrote:

dear group, how can we find out, if a user has a valid session on his windows client? We would like to use this session to authenticate in our web-application. Will we need active-x controls?

You have to use an apache module: mod_auth_sspi http://www.gknw.at/development/apache/httpd-2.0/win32/modules/ I made it work, but you have to enable Internet Explorer in the client PCs to automatically send the user credentials, because that's disabled by default: Tools -> Internet Options -> Advanced options -> Security -> Enable Integrated Windows Authentication Here's a tutorial: http://moinmoin.wikiwikiweb.de/RickVanderveer/ApacheOnWin32DomainAuthentication When all goes well, you get a couple of $_SERVER variables that tell you the username who is logged in and his/her windows domain Good luck. Martin