Apache & NTLM / Windows Domain Auto-Login

[labmixz]

I really hate this...

 

Usually when I get someone asking for an auto-login using Active Direction based on the user whom is logged into that computer, I usually make sure their web-server is IIS, because I can never seem to get Apache working with this...

 

Granted, I can get Apache / PHP to do a LDAP query and check for the username / password, all that works fine, however, the user is prompted for the username/password... I tried using the old apache_ntlm mod, which is out-dated for the most recent stable build of apache, so that doesn't help much... but either way I've tried that mod a year ago and it didn't work then and doesn't work now... it allows you to prompt the user for a username / password and then authenticate, but I can do that on my own without an apache mod...

 

Does anyone know how (if possible) to get an Apache mod that will check the currently logged on user of the domain within Windows, then (ie: they are already logged on to the domain) then pass that user variable to the php $_SERVER['REMOTE_USER']; or even the $_SERVER['PHP_AUTH_USER']; -- either will work... I just can't have the user being prompted for a username/password.

 

Right now my other solution is a horrid one... to have one IIS server basically as a "gateway" which the sole purpose of it is to authenticate the logged in user, then pass the variables to the Apache server. I have to do this because they have other things setup that absolutely will not work in IIS... (mods and addons to Apache)

 

Any help would be much appreciated.

 

Thanks,

Henry

[hitman6003]

http://www.apachelounge.com/forum/viewtopic.php?p=5373

[labmixz]

hmm, I tried the sspi mod before and it didn't seem to work at all (tried it about 2 weeks ago), it's such a straight foward mod it's kind of hard to mess up, but now it seems to work fine in my test environment.