How to automatically authenticate LDAP in Windows using PHP

Asked May 15 '12 at 19:49

Active May 29 '12 at 14:31

Viewed 2,213 times

In PHP (running on a Windows server under IIS), I have a login page that authenticates the entered username/password against the Windows domain controller.

The code uses ldap_connect and ldap_bind against user input (username+password).

But I want the PHP code to automatically pull the logged in user, so they don't have to enter a username and password. The user would already be logged on the computer under a domain, using Internet Explorer.

How can I have PHP code automatically authenticate (in IE) against the logger in user on the Windows machine?

$_SERVER["AUTH_USER"] and $_SERVER["REMOTE_USER"] do not work, it only returns a blank string in IE.

I found I could use this Javascript:

ActiveXObject("WScript.Network")

(and then pulling the username) But that doesn't work for me, as it requires the user to have their ActiveX trust levels set correctly first (which loosens security for the user).

edited May 29 '12 at 14:31

asked May 15 '12 at 19:49

JBurace

5,123
17
51
76

1

Take a look at [this](http://stackoverflow.com/questions/168610/can-you-get-a-windows-ad-username-in-php), as it might have some additional insight. – jeffjenx May 15 '12 at 19:54
@MrSlayer Hmm I'm trying `$_SERVER["AUTH_USER"]` but under IE it's just returning a blank string. – JBurace May 15 '12 at 20:00
Are you maintaining your own server? Have you looked into mod_auth_sspi, as suggested [here](http://stackoverflow.com/a/1958096/1028949)? – jeffjenx May 15 '12 at 20:07
@MrSlayer I saw that yeah, but isn't that for Apache only? I'm running IIS. – JBurace May 15 '12 at 20:08
My mistake, I misread the question. Is anonymous access enabled? – jeffjenx May 15 '12 at 20:09
@MrSlayer I don't believe so, I definitely don't want anonymous (non-domain users) access to this site. – JBurace May 15 '12 at 20:16
Did you try $_SERVER["REMOTE_USER"]? – Martin Wilson May 16 '12 at 15:25
@MartinWilson Yes, same thing. It returned a blank. – JBurace May 21 '12 at 18:52

How to automatically authenticate LDAP in Windows using PHP

0 Answers0