Skip to main content
Participating Frequently
October 21, 2008
Question

User login info

  • October 21, 2008
  • 1 reply
  • 266 views
For our Cold Fusion 8 on Windows 2003 I am trying to get the username from the Windows 2003 domain.

I tried using #cgi.auth_user# so I can use the Windows 2003 authentication to get the user login info, but I dont get any value.

Please advise why it is not working and is there something the Server admins need to turn on the server for it to work?
Something like Anonymous Login?
    This topic has been closed for replies.

    1 reply

    Inspiring
    October 22, 2008
    Oaklander wrote:

    > Please advise why it is not working and is there something the Server admins
    > need to turn on the server for it to work?
    > Something like Anonymous Login?
    >

    Yup, something other then Anonymous Login. Specifically in IIS an admin
    needs to designate the web-site|folder|file security to use "Windows
    Integrated Security". This causes the Windows OS to ask a Windows
    Browser to get the users domain security identity from a Windows
    Operating System.

    Note: How Windows is in the chain from the top to the bottom. Just be
    aware that if some part of that chain is not Windows then it does not
    work as silently. For Example, if a user uses Firefox instead of I.E.
    the browser can not get the login from the operating system and the user
    must full in a security pop-up window.

    An important ramification of this is that some ColdFusion functionality
    can not work with integrated security. The most common gotcha's are
    scheduled tasks and web services. You will want any resource used for
    these purposes not be 'secured' with Windows Integrated Security in IIS.

    Luckily it is very easy to turn this on or off right down to the file
    level so you can be very granular on with is and is not locked down with
    Windows Integrated Security.