[mod_python] getting Windows username (REMOTE_USER)

I am not a Windows person, but as much as I understand it, I believe
you need mod_sspi installed and configured. See:

  http://sourceforge.net/projects/mod-auth-sspi/
  http://www.gknw.net/docu/ntlmsspi/mod_auth_sspi/

This should allow Apache authentication against a Windows domain to be
done transparently between IE and Apache without popup windows
requiring explicit password entry. In this circumstance, your client
machine user then should somehow be reflected in the req.user
attribute if mod_sspi does the right thing and sets it.

Graham

On 10/12/2007, Brett Dixon <drunkirishmic420 at hotmail.com> wrote:
>
> In my python handler Directory directive, i have the AuthTpye set to basic,
> but thats about it.  I have tried "ntlm" but that hasnt done much.  Is there
> a windows specific auth handler?
>
>
>
> ________________________________
> > Date: Mon, 10 Dec 2007 07:04:52 +1100
> > From: graham.dumpleton at gmail.com
> > To: drunkirishmic420 at hotmail.com
> > Subject: Re: [mod_python] getting Windows username (REMOTE_USER)
> > CC: mlopes at orangeway.org; mod_python at modpython.org
>
> >
> > REMOTE_USER in PHP should be the same as req.user in mod_python.
> >
> > The req.user attribute actually is 'user' attribute of internal Apache
> > request_rec structure. It is this value that is used to set
> > REMOTE_USER in CGI variable environments and presumably PHP.
> >
> > This attribute isn't restricted to just HTTP Basic/Digest
> > authentication. Any authentication handler should be setting it
> > correctly, whether that be some special Windows specific
> > authentication mechanism or otherwise.
> >
> > Do you have a Windows specific authentication handler enabled in your
> > Apache configuration?
> >
> > Graham
> >
> > On 10/12/2007, Brett Dixon <drunkirishmic420 at hotmail.com> wrote:
> > >
> > > yes Marco, that is the user i am trying to retrieve. If it's not
> possible
> > > to get with apache/mod_python then its back to IIS i go :)
> > >
> > > Thanks guys
> > >
> > >
> > >
> > > ________________________________
> > > Date: Sun, 9 Dec 2007 12:55:01 +0000
> > > From: mlopes at orangeway.org
> > > To: graham.dumpleton at gmail.com
> > > Subject: Re: [mod_python] getting Windows username (REMOTE_USER)
> > > CC: drunkirishmic420 at hotmail.com; mod_python at modpython.org
> > >
> > >
> > > I'm guessing you're both talking about different things. I'm new to
> > > mod_python but I'd say req.user is the HTTP user, the user given when
> the
> > > user is prompt for authentication by apache.
> > > The "user" Brett is asking about is the username of the user logged in a
> > > remote windows machine, wich I'd say he'd never be able to get cause the
> > > client will never send it to the server side for security and privacy
> > > reasons.
> > >
> > > On 12/9/07, Graham Dumpleton <graham.dumpleton at gmail.com> wrote:
> > > It should be set if an Apache authentication handler has actually
> > > authorised a user. If it isn't being set, then the URL isn't being
> > > authenticated or the authentication handler isn't compliant and doing
> > > what is expected of an Apache authentication handler.
> > >
> > > What is the actual authentication handler you are using? What handler
> > > phase are you trying to access this attribute?
> > >
> > > Please use reply-all to keep discussion on the mailing list.
> > >
> > > Graham
> > >
> > > On 09/12/2007, Brett Dixon <drunkirishmic420 at hotmail.com> wrote:
> > > >
> > > > i checked that one, but it is always None. Is there something in the
> > > apache
> > > > config i need to set first?
> > > >
> > > >
> > > >
> > > > ________________________________
> > > > > Date: Sun, 9 Dec 2007 15:36:31 +1100
> > > > > From: graham.dumpleton at gmail.com
> > > > > To: drunkirishmic420 at hotmail.com
> > > > > Subject: Re: [mod_python] getting Windows username (REMOTE_USER)
> > > > > CC: mod_python at modpython.org
> > > >
> > > > >
> > > > > Use:
> > > > >
> > > > > req.user
> > > > >
> > > > > Graham
> > > > >
> > > > > On 09/12/2007, Brett Dixon < drunkirishmic420 at hotmail.com> wrote:
> > > > > >
> > > > > > I'm not sure if this is a mod_python specific question or if it
> should
> > > > be
> > > > > > asked on the apache list. But is there any way to get the username
> of
> > > > the
> > > > > > currently logged in user from Windows. In PHP you could just snag
> > > > > > REMOTE_USER or AUTH_USER. I guess I'm just not sure how to get
> this
> > > info
> > > > or
> > > > > > if i need to run another module in order for this information to
> be
> > > > > > available.
> > > > > >
> > > > > > Thanks
> > > > > >
> > > > > > ________________________________
> > > > > > Get the power of Windows + Web with the new Windows Live. Power
> up!
> > > > > > _______________________________________________
> > > > > > Mod_python mailing list
> > > > > > Mod_python at modpython.org
> > > > > >
> > > >
> http://mailman.modpython.org/mailman/listinfo/mod_python
> > > > > >
> > > > > >
> > > >
> > > > ________________________________
> > > > Share life as it happens with the new Windows Live. Share now!
> > > _______________________________________________
> > > Mod_python mailing list
> > > Mod_python at modpython.org
> > >
> http://mailman.modpython.org/mailman/listinfo/mod_python
> > >
> > >
> > > ________________________________
> > > Your smile counts. The more smiles you share, the more we donate. Join
> in!
>
> ________________________________
> Share life as it happens with the new Windows Live. Share now!