Website "login" authenticate against user's login/passwd to Windows machine.

[rdu...@my-dejanews.com]

Hi, I'm developing a web app for an intranet. There will
only be a handfull of users.

I want the user to "login" to the site and I want it to
authenticate against the current username and password that
the user used to login to the windows machine.

ie. When a user logs into the Windows system and then opens
the web browser and visits the URL, the user will have to
enter the username/passwd that was used to login to the system.

If he/she authenticates, I would then like to pass the username
to the webserver for user tracking.

This will require client side logic, not server side. I'm coding
the server side to accept any username given.

But im not sure how to implement the client side authentication.
Would I need to use some kind of ActiveX control or could I use
a java applet..?

Would the solution be different for Win95, Win98 and WinNT..?

btw> This app will be run in IE4.x
PS> Please, cc your posting replies to rajesh...@hotmail.com

Any answers, advice, and pointers greatly appreciated.
Thanks,
Rajesh.

-----------== Posted via Deja News, The Discussion Network ==----------
http://www.dejanews.com/ Search, Read, Discuss, or Start Your Own

[Homer J Simpson]

No offense, but that would be very sloppy. I hope this is not a commercial
project or one you're being paid to do? Anyone who has enough knowledge of
client-side web technologies (ie. ActiveX scripting, Javascript etc..) could
quite easily break past that authentication process. If you are running a
Unix server for the itnranet then you could use .htaccess, but seeing as
this is a Windows newsgroup, that's probably an idiotic thing for me to
say.....

bubbl...@yahoo.com

rdu...@my-dejanews.com wrote in message
<7g20ic$hb4$1...@nnrp1.dejanews.com>...

[Gary Smith]

I think you need to set up IIS to use NT authentication and then use either
ASP or VB6 web classes to pull the information back.

--Gary;

[rdu...@my-dejanews.com]

No offense taken. :)

As I mentioned this web based app is to be used internally within
in an intranet and will be used by only a handfull of non-techie users.
The goal is to have some kind of logging of who is doing what
on the web app ( by logging on the server ) and to enable the
users to only have to remember one login/password combination.

We would prefer this than to have them remember their windows
logon password and a web app password.

The reason for user authentication is for user tracking, not security.

btw> This will be run on unix servers. .htaccess would not be an option
as the login/passwd would have to be saved on the server.. If the
user changed his/her windows password there would have to be some
process to update the .htaccess file on the server. We would prefer
the authentication to take place on the client not server. Only
the login name would need to be passed to the server.

Thanks,
Rajesh.

In article <925143838.7736.0...@news.demon.co.uk>,