Novell Integrated Authentication - get the username of a local machine on a website
First, I know how to integrate Windows Authentication into IIS7. This is great for browsing Active Directory on a computer.
But you need to get the name of the Novell authenticated user. I don't want a password or anything more than a username.
Other restrictions:
- It is not possible to install anything on users' computers.
- Can install things on a web server
- Trust can be configured between the web server and the Novell server
- It will be on a public website with anonymous access, I can tweek to have a section that requires authentication and thus get it from the user.
- The website is in C # .Net 2.0
- If the method can provide a password as well, I can use it to fully verify the user with Novell. This part (dealing with Novell Server LDAP) has already been done.
- Should work with IE6 and IE7
(Update) On the Novell website, the only information on the single mark there shows how to register someone with Novell and concludes with the following:
A way (there are other ways) to store our credentials in variables so the user doesn't need to authenticate for every form (single sign-on).
(Update) Also from Novell they say they have an SSO solution . But the content dates back to 2000, and the other requires you to install a plugin on a Novell server and pay $ 49 per user for it. Thus, this is not a valid solution.
a source to share
You say you cannot install anything on users' computers, but you may find that there is already an ActiveX control that can be invoked as part of the Novell client on the PC.
I've done this in the past using an ActiveX control to authenticate a logged in user, pass it to a web server, and then load the complete user record using LDAP:
I used the previously mentioned NWDir1 using the following syntax (with ColdFusion as the server-side language, but I'm sure you could translate):
<cfoutput>
<object classid="CLSID:4F021AE3-9E98-11D0-A808-00C04FDCD94A"id="NWDir1" width=32 height=32></object>
<script language="VBScript">
Dim vbuser
Sub Window_OnLoad()
On Error Resume next
vbuser = NWDir1.LoginName
vbuser = StrReverse(vbuser)
initInd = InStr(vbuser, Chr(92))
if initInd <> 0 Then
vbuser = Left(vbuser, initInd-1)
vbuser = StrReverse(vbuser)
End if
// REDIRECTION
document.location.href = "index.cfm?userid=" + vbuser
Exit sub
End Sub
</script>
<cfabort>
</cfoutput>
This uses vbscript to control the activex client that the registered user provides the novels. This value (vbuser) is then passed back to index.cfm, where it can be processed.
This method is obviously susceptible to url cracking, but I don't know what has been going on for the 4 years we have been using this technique.
I'm sure I found this on the Novell site initially - try searching for NWDir1 or classid on that site.
I hope this helps
a source to share