Re: Authorization on IIS5 (PHP4; Win2k)
| From: | Johan Lundqvist | Date: | Mon, 23 Apr 2001 13:33:01 +0000 |
| Subject: | Re: Authorization on IIS5 (PHP4; Win2k) | ||
| References: | 1 | Groups: | php.windows |
| Request: | Send a blank email to php-windows+get-6986@lists.php.net to get a copy of this message | ||
> Hi,
> I'm trying to set up user-specific site settings with authentication. I need
> to be able to validate accounts to a Win2K Active Directory server, as there
> are several hundred accounts active, and they change on a regular basis. I
> have the IIS authentication working fine, but I want to be able to have a
> way of checking their group membership (in Win2K) so that PHP can determine
> whether to display certain pages depending on whether they are members of
> administrator, student or teachers groups.
You could use LDAP to query the AD for user group membership. When
logged in the variables AUTH_PASSWORD and AUTH_USER are set in PHP, use
these in LDAP query to find the user. LDAP support is built into MS-AD,
but I don't know if it's working. I do the same thing on Novell NDS, and
that's working perfect.
> I think that I can use cookies to store the user
> preferences, but am I right in thinking that if they log on from another
> computer their settings won't be loaded?
Correct.
/Johan