🚀 go-pugleaf

TBerry <tberry@vhb.com> wrote in message news:3C110990.680CF638@vhb.com...
> Owen,
>
> I have a web app. for our company's Intranet (for the Internet will be
later).
> It requires that the user login with their username and password. Since
they
> have already logged-in to Windows,  I would like to grab just their
username for
> now so that when they access the web app. they will be automatically
logged-in.
> If accessing the Windows environment for the username differs between
versions,
> I would be coding first for NT4 then 2000.
>
> My options so far seem to be 1. cookies, 2. Javascript & ActiveX, 3.
secure
> applet. I would like to avoid #2, and #3 is uncharted territory for me.

Depends what you're looking for. If all you want is a tempoary measure to
get people on whilst you finish the app itself, then why not restrict access
of the app to your subnet?; if you want proper authentication then obviously
just passing the username isn't going to cut it.

If you /do/ want proper authentication, and your users happen to be
administered from an NT Domain (or an NIS server, or an LDAP server, or...)
then the Java Authorization and Authentication Service is well worth a look,
though it's a bit tricky to get going with at first.

I don't think a secured applet would be that difficult to rustle up, if you
really did want to automate passing the local user over...

Owen