Retrieve logged in user name

[bloodbanker]

Can I use CF on a shared server to detect the log in name on the users local PC?

I use Windows authentication to log on to my work PC.  Staff in our department use a website to do their work, they are the only ones to use the site.  I'd like to be able to see who is accessing the site and authenticate them by their user name.

If this is not possible on a shared server, would is be possible on an intranet server located within our firewall?  We are thinking of moving our site.

We'd like to simplify the log in to the site, well actually remove it.

Thanks

[Dan_Bracuk]

cgi.auth_user might help.  I've found it to be unreliable though.

[bloodbanker]

Thanks, that returned a blank screen though.  I've read that may be an IIS setting.  This might be less of an issue if we move it to our server where I can configure IIS to work for us.

[JMF3]

cgi.auth_user will work if the user's have logged in to the web server (IIS

= Basic Auth), but won't pick up their desktop or network login.

[bloodbanker]

Thanks JMF.

Is there a different way to determine their desktop / network login?

[Reed_Powell-ttnmOb]

The browser access is something of a sandbox, so I don't there there is ever a foolproof way of determining the user's desktop/network login without the use of a plug-in (ActiveX, etc), which of course is not something you are going to want to require users to do.  Even with IIS set for basic authentication, or using CFLOGIN with Windows authentication, all you are going to get is the information on what credentials the user used to successfully get to your CF application, which would not necessarily be the same as their desktop login - although in an intranet application where you hopefully have some control over what logins users are using you should be able to make that work. But nothing would prevent User A from going to User B's desktop to help User B with something, bringing up your app in a browser, and entering his own network credentials to log into it.  Your app would see it as user A, even though the desktop is logged into user B.  Out of curiosity, is there a reason to care what user has logged into the desktop, vs the user that is logging in to your application?

-reed

[12Robots]

I believe there are ways of doing this. I have seen it done with the SVN web interface. I have never done it. I believe they used some kind of Kerberos authentication with the web server. So if you were to do something similar it would not actually involve ColdFusion. The ColdFusion application would be protected by it, but the auth would actually happen between the browser and the web server.

Note, in the implementation that i saw, it did require using IE as the web browser.