Need Help With Capturing EDirectory/IChain User Info
After 8 years, we were finally able to get our production ColdFusion MX7 server, working with the company's EDirectory server. EDirectory now authenticates users, based on their job title, job class, job group, etc. We provided our IS (Information Security) department with the job codes and report names, directories, etc., that each employee (job code) can access. Previously, we used "passwords" to limit access to more confidential reports to select management employees.
There are only a few CF servers in our company, so the IS (Information Security) department is not familiar with how to use ColdFusion to "capture" user information that they say is being passed "back" to the CF server, after each user's query/report request. IS says about a dozen variables are being passed in the header, back to the CF server, including EMPLOYEE NAME, LOCATION, etc.
I'm trying to figure out how to capture that info, and use it to greet the user "by name" when they connect to our CF report server. And to also maintain a log file of which locations and employees are accessing our web reports. Today, we use the SQL Server logs, which only contain the IP address and URL information "sent" (not returned), to know how often certain reports are being requested. But we don't know by who, or by which locations.
One person in IS recommended using CFHTTP, and I've tried it, but don't seem to be able to pull the variables off the header. I thought using CFLDAP might work, but doesn't. If anyone is in a similar situation, and knows how best to pull this info from the header info coming from EDirectory, I would apppreciate some advice. Just knowing if CFLDAP or CFHTTP will work, or if something else is required. Just trying to get on the right footing, at the moment. Thank you,
Gary1
