At my previous job, when a user logged in to the non-novell network and
they went to the web server, the user's login would be stored as the http
authenticated variable "Remote User"  In PHP, this is $_SERVER['REMOTE_U
SER']

Is this what Kerbose does?

We are preparing to add an OES on our Novell network for the sole purpose
of hosting a website.  I was hoping that because of the nature of OES, I
could grab the user's Novell login (if it exists) without the user logging
into the website.

This would make it easy to offer content targeted to employees, but still
offer public content to anyone else who views the website.

Any ideas?

[ Post a follow-up to this message ]

I would be interested in this as well. I am putting togeather an intranet
site and want the users to log in using their novell id's.



Dennis St. James
Dstjames@lionel.com
Network Administrator
Lionel L.L.C.

[ Post a follow-up to this message ]

Dennis St. James wrote:
> I would be interested in this as well. I am putting togeather an intranet
> site and want the users to log in using their novell id's.

This can be done easily with Apache via mod_edir or mod_auth_ldap. The
user is promted in the browser to enter their eDirectory credentials.
However, I think Chris is talking about something else... where the user
(by virtue of being already authenticated to eDirectory via the NetWare
client) is "automagically" logged-in to the web site.

The only way I know to accomplish something like that is to use iChain
to front-end the web server, with NetIdentity client.


--
Jim
NSC SYsop

[ Post a follow-up to this message ]

Jim Michael wrote:
> Dennis St. James wrote:
> 
>
>
> This can be done easily with Apache via mod_edir or mod_auth_ldap. The
> user is promted in the browser to enter their eDirectory credentials.

This sounds like something I would like to know how to do, I'll google
it up a bit, but any advice from experience would be great.  Can I make
this optional?  Maybe a login link that would call the authentication?

> However, I think Chris is talking about something else... where the user
> (by virtue of being already authenticated to eDirectory via the NetWare
> client) is "automagically" logged-in to the web site.
>
> The only way I know to accomplish something like that is to use iChain
> to front-end the web server, with NetIdentity client.

I think that is exactly what I'm looking for, once again I'll start
searching, but any starting places/warnings based on experience would be
great.

I'll reply to this with all of my findings!

[ Post a follow-up to this message ]

Chris wrote:

> This sounds like something I would like to know how to do, I'll google
> it up a bit, but any advice from experience would be great.  Can I make
> this optional?  Maybe a login link that would call the authentication?

The mod_edir documentation has examples that should get you going. I'm
not sure what you mean by optional? If you want to restrict access to
parts of a site, then logging in would be mandatory, not optional... if
it were optional, then there's no point in logging in at all, right? ;-)

> I think that is exactly what I'm looking for, once again I'll start
> searching, but any starting places/warnings based on experience would be
> great.

The ichain docs have a bit on how to configure it for NetIdentity, and
of course you need to install the NetIdentity client (part of client32).


--
Jim
NSC SYsop

[ Post a follow-up to this message ]

Jim Michael wrote:
> Chris wrote:
> 
>
>
> The mod_edir documentation has examples that should get you going. I'm
> not sure what you mean by optional? If you want to restrict access to
> parts of a site, then logging in would be mandatory, not optional... if
> it were optional, then there's no point in logging in at all, right? ;-)

If it is optional, then I would be able to say "if they are logged in,
give them this content, otherwise, give them this content."
The web server is actually for our public website, but we want to add a
few internal portions to it as well.

> 
> 
>
>
> The ichain docs have a bit on how to configure it for NetIdentity, and
> of course you need to install the NetIdentity client (part of client32).

Cool

[ Post a follow-up to this message ]