[dmorand]

I'm trying to retrieve the username of the user logged into a machine when a person visits my page on our intranet. I've looked over cfntauthenticate but that's not going to do what I need it to do.

Is this even possible with coldfusion or should I be looking to asp?

[acoder]

If you're using IIS and Integrated Windows Authentication, cgi.auth_user should be set to DOMAIN\username.

[dmorand]

Originally Posted by acoder

If you're using IIS and Integrated Windows Authentication, cgi.auth_user should be set to DOMAIN\username.

Yeah I turned on Integrated Windows Authentication and now I can get the username of the person logged in. I need to be able to retrieve a list of the groups the user is a member of on our active directory.

I'm trying to use th cfldap, but I'm not getting any data back:

<cfldap 
          server = "domain controller server"
          action = "query"
          name = "results"
          start = "dc=xxxx,dc=xxx"
          filter = "(&(objectclass=group)(name=Domain Admins))"
          attributes = "cn,ou,dn,mail,memberOf"
          sort = "cn ASC">

Is there a really simple cfldap query I can run to make sure I'm making the connection to the server?

[acoder]

See if this tutorial helps.

[dmorand]

Originally Posted by acoder

See if this tutorial helps.

That helps give me some info, I think I need to have a better understanding of how to query LDAP, I think that might be where my problem is.

[acoder]

If you haven't already, also check out the reference. You could test with a public server (emailman has some useful info.).

[dmorand]

Originally Posted by acoder

If you haven't already, also check out the reference. You could test with a public server (emailman has some useful info.).

I'm able to query LDAP for info, but I can't seem to get the data I'm looking for.

I want to either check if a user is a member of a particular group, or at least retrieve all the groups a user is a member of, whichever one I can do.

[acoder]

Now, it's just an LDAP problem, not necessarily Coldfusion.

I'd say that a basic LDAP tutorial might help. Check this Wikipedia page and the external links.

[dmorand]

Originally Posted by acoder

Now, it's just an LDAP problem, not necessarily Coldfusion.

I'd say that a basic LDAP tutorial might help. Check this Wikipedia page and the external links.

I ended up figuring it out. Here's what my cfldap looks like:

[code=html]
<cfldap
server = "Domain Controller"
action = "query"
name = "results"
start = "DC=ha2000,DC=com"
filter="samAccountName=#form.name#"
attributes="cn,displayname,title,mail,member,membe rof"
username="xxxxxx"
password="xxxxxxx"
sort = "memberof ASC">
[/code]

[acoder]

Glad you got it working. Thanks for posting.

[developing]

for future, you can download Softerra LDAP Browser (free version) and tweak your filter as much as you like without it being too much of a pain

[dmorand]

Originally Posted by developing

for future, you can download Softerra LDAP Browser (free version) and tweak your filter as much as you like without it being too much of a pain

Thanks for that info, I've got Softerra LDAP Browser now, it's how I've been figuring out what fields I can retrieve now.