Skip to main content
A
Anonymous
June 20, 2012
Question

Coldfusion 10 with IIS 7 Windows authenticaiton

  • June 20, 2012
  • 4 replies
  • 24608 views

I enabled Windows authentication in IIS 7 for a site powered by coldfusion 10. After I logged in, a coldfusion page that dump all the CGI shows REMOTE_USER and AUTH_USER are empty.  The tomcatAuthentication has been set to "false" in server.xml. Does coldfuion10 support IIS Windows authentication? If yes, is there any document on how to configure it? Thanks.

    This topic has been closed for replies.

    4 replies

    M
    maruchi70
    Participant
    March 18, 2015

    Enable Windows Authentication to the virtual folder "jakarta" (created by CF10) as well.

    nak33
    nak33
    Known Participant
    March 11, 2020

    Ran into the same problem, all the configurations are as discribed buth the cgi.auth_user and cgi.remote_user are blank. 

    A
    Aegis_Kleais
    Inspiring
    April 4, 2013

    What browser are you using?  Some browsers are set to not forward credentials automatically, and instead, need to be configured to do so before the CGI-scoped variables will show up.  A while back when I used Firefox, you had to go into the about:config and search for these keys.

    Have a look here:

    http://sivel.net/2007/05/firefox-ntlm-sso/

    Now that I'm using Chrome, I don't think I had to go through a similar process with it.

    P
    Philipp Cielen
    Participating Frequently
    April 4, 2013

    MSIE, the same browser that worked with CF 9. Good thought, but this is definitely not a browser-related issue.

    P
    Philipp Cielen
    Participating Frequently
    April 5, 2013

    I think that we have tried every possible combination of authentication settings in IIS. Windows authentication was always activated on all levels and we have experimented with activating anonymous access on server, site and folder level in various combinations - including the one recommended in this thread - all to no avail.

    The MSIE browser that is used for testing is a standard browser configuration that is being used for accessing dozens of intranet applications all of which are accessed via integrated Windows authentication, many of them runing on ColdFusion 7/8/9 where cgi.remote_user is working fine but also MS Sharepoint etc. The only server where authentication is not passed through correctly is the one updated to ColdFusion 10. Experimenting with a different browser does not help because it definitely has to work with the standard browser configuration that is used throughout the enterprise.

    CF 10 is running on Windows Server 2008 R2/IIS 7.5 here. CF9 was running on the same system and Windows authentication was working fine (same browser, same IIS, same settings).


    just to confirm: I have checked the request header and yes, authorization from the browser is sent correctly

    itisdesign
    itisdesign
    Inspiring
    July 4, 2012

    hust93 wrote:

    I enabled Windows authentication in IIS 7 for a site powered by coldfusion 10. After I logged in, a coldfusion page that dump all the CGI shows REMOTE_USER and AUTH_USER are empty.  The tomcatAuthentication has been set to "false" in server.xml. Does coldfuion10 support IIS Windows authentication? If yes, is there any document on how to configure it? Thanks.

    Hi hust93,

    Please refer to Kevlar's thread (where he posted the solution) here: http://forums.adobe.com/thread/1031711

    Thanks,

    -Aaron

    A
    Anonymous
    July 6, 2012

    Hi Aaron,

    Thanks for the instruction. Following the instruction in that thread, I enabled Windows Authentication, set Anonymous Authentication to enabled at root level. Then I disabled anonymous authentication at /sec. When I accessed /sec/dumpCGI.cfm, I was prompted to login, but after I login, dumpCGI.cmf still shows empty REMOTE_USER.

    Hong

    K
    Kevlar
    Inspiring
    July 9, 2012

    You have windows authentication and anonymous authentication enabled at the server level and then on the folder you enabled windows authentication and disabled anonymous authentication and it still did not populate the CGI.remote_user variable?

    K
    Kevlar
    Inspiring
    July 2, 2012

    Did you ever figure this out?

    A
    Anonymous
    July 6, 2012

    No.

    Terms & ConditionsAccessibility statement
    Using the community Terms of use Privacy Cookie preferences Do not sell or share my personal information ad choicesAdChoices