Re: [Dynapi-Chat] OT: Getting NT Username?

[Joachim L. <lu...@ho...>]

At 2001-07-09 21:25, you wrote:
>Okay, this has nothing to do with DynAPI, but I'm hoping somebody here
>might be able to help.
>
>I'm working on an intranet app, and out of the blue, my manager asked if
>we could capture the NT logon name of users who use this particular
>tool, so that we can get more detailed statistics on who is using it (we
>*want* people to use it, so if they aren't, we need to be able to ask
>them why not). We don't want to have to force the user to logon. The web
>server is in a firebreak network with its own domain, so we can't just
>turn on NTLM auth and count on a transparent logon, either. But it
>doesn't look like AUTH_USER or LOGON_USER get sent by the browser unless
>we turn off anonymous access.
>
>Anyone got any suggestions? Is there some way I can "trick" our browsers
>into sending the NT logon name transparently?

No, you're out of luck. The browser first tries to connect without any user info (ie. anonymously) and only if the server sends back "401 Unauthorized" some sort of athentication can take place.

Well, there is a way around this I think. You could make an applet or ActiveX object that gets enough credentials to get the user name. That object could then pass the info back to the server in various ways, for example a hidden IMG that on window.onload will set its src to a cgi or asp script on the server.

/Lunna