Re: Capturing and using NT login for security with Apache



"mecograph" <vibroplex@xxxxxxxxxxxxxx> wrote in message
news:1175033141.931371.74320@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

In other words, can I test for the NT login (or some other flag to
distinguish who is requesting the page) and use that information to
restrict access to the web page on the VMS host?

I think what you are asking for is called "Integrated Authentication"
in the Windows world. If you run an IIS web server you can configure
a page to verify against the credentials the client used to log
in to the workstation without prompting him to re-enter them.

As far as I know this is not possible to do on VMS. I think the
closest you could get would be to prompt the user for his
windows username/password using basic authentication
(preferably over a secure link) and write an Apache authentication
module that would use the $ACM routines to check those
credentials against the domain. I've been meaning to write such
a module for the OSU webserver for quite a while now but haven't
gotten around to it yet. Writing modules for Apache is somewhat
complex but well documented - check your local bookstore for
books on managing the Apache server.

Of course if the clients also have a VMS account you can easily
configure Apache to verify pages access against that via username,
group or other identifier the account holds - but I take it in your
case you don't want to require them to have an account on the VMS
system.


.



Relevant Pages

  • Re: You Got To Pick A Pocket Or Two Boys!
    ... And I prefer WASD over the Apache ... So none of Richard VMS license money has been used so far. ... How about "Implementing SOAP on platform X being profitably does not imply ... when there are real customers wanting it. ...
    (comp.os.vms)
  • Re: Banana Republic (was Re: OpenVMS Book Wins award)
    ... WASD then assumes a per-process model too. ... and just use INETd on the server and be done with it. ... I have never written an Apache module. ... Just the VMS 3GLs you know and love, Oracle, and RMS on ...
    (comp.os.vms)
  • You Got To Pick A Pocket Or Two Boys!
    ... And I prefer WASD over the Apache ... Are gSOAP for VMS being done by HP ?? ... So none of Richard VMS license money has been used so far. ... with no access to a hit-list of customers to harass and spam on ...
    (comp.os.vms)
  • Re: Speaking of promoting VMS
    ... Imagine trying to keep up with OpenVMS, NSK, HP-UX, Linux, ... How many times has a large account told HP "we're leaving VMS behind" and HP ... > marketing strategy is a much higher corp strategy than OpenVMS (and ...
    (comp.os.vms)
  • Re: Problems with Oracle 9i / PHP/ Apache
    ... It appears that the VMS update may have caused the problem, ... think of, I ended up removing PHP and then CSWS Apache, rebooting. ... orauser.com .vs. just defining a few logicals in the login.com. ...
    (comp.os.vms)