mailing list archives
RE: Browser login with Windows domain login
From: "David Carroll" <carroll_6106 () msn com>
Date: Fri, 09 Apr 2004 00:04:47 +0000
Sure is. Look up SPNEGO and you'll see that IIS is already enabled and that
there are modules for Apache.
Is a good overview.
From: <stevenr () mastek com>
To: <webappsec () securityfocus com>
Subject: Browser login with Windows domain login
Date: Thu, 8 Apr 2004 18:51:38 +0530
I needed some pointers/links/tips from you folks on a problem.
I have a web-based application. Is it possible to sign in a user into
the browser based application transparently based on the windows NT
domain login. By this I mean that when the user opens the browser and
types in the URL, the client machine should automatically send the user
credentials to the application. FYI, the windows domain login is
authenticated against Microsoft Active Directory.
If this is possible, can anyone point me to some sites/tutorials? I have
googled but have not come up with anything useful, hence this mail.
Are there any known vulnerabilites with this kind of approach for web
Any help would be appreciated.
"Making a valuable difference"
Mastek in NASSCOM's 'India Top 20' Software Service Exporters List.
In the US, we're called MAJESCO
Opinions expressed in this e-mail are those of the individual and not that
of Mastek Limited, unless specifically indicated to that effect. Mastek
Limited does not accept any responsibility or liability for it. This e-mail
and attachments (if any) transmitted with it are confidential and/or
privileged and solely for the use of the intended person or entity to which
it is addressed. Any review, re-transmission, dissemination or other use of
or taking of any action in reliance upon this information by persons or
entities other than the intended recipient is prohibited. This e-mail and
its attachments have been scanned for the presence of computer viruses. It
is the responsibility of the recipient to run the virus check on e-mails
and attachments before opening them. If you have received this e-mail in
error, kindly delete this e-mail from all computers.
Limited-time offer: Fast, reliable MSN 9 Dial-up Internet access FREE for 2