search

gabihodoroaga / nginx-ntlm-module

A nginx module to allow proxying requests with NTLM Authentication.
MIT License
91 stars 22 forks source link

how to get domain user info #12

Open gnyuan opened 1 year ago

gnyuan commented 1 year ago

Hello, after NTLM authentication, how can I get domain user info? Does it store in session?

barryvdh commented 1 year ago

I'm wondering this also. Did you figure this out?

I remember with LDAP that the username was passed to the SERVER headers, is that the same here? Or do I actually need to call the NTLM service or something?

gnyuan commented 1 year ago

I'm wondering this also. Did you figure this out?

  • Windows users are logged in, with NTLM
  • We setup a reverse proxy to add the authentication flow which somehow authenticates?
  • After authentication, how does my (PHP) back-end know which user it is.

I remember with LDAP that the username was passed to the SERVER headers, is that the same here? Or do I actually need to call the NTLM service or something?

Yes, you are right, It pass User Info to the headers. I'm not using this module, but another by the way.

barryvdh commented 1 year ago

I think this headers only makes sure the authorization flow works? I used this nginx module together with https://github.com/interexperts/NTLM to send the Authorization headers/challenges and decode the result. Als maybe I needed SSL and to whitelist the domain for NTLM