WebGUI
      Click here to register.
      
Sprechen Sie WebGUI? Parlez vous WebGUI? Se habla WebGUI? Spreekt u WebGUI?

Do you speak WebGUI? Please help us translate WebGUI into your language.

NTLM Authentication for Win32 servers

User: AussieRules
Date: 8/12/2005 2:51 pm
Views: 8969
Rating: 67    Rate [
|
]

This authentication module is a meant for those of us running WebGUI on Windows 2000 servers in an intranet environment.

Basically, it allows a WebGUI user to gain access using their Windows domain password. It is simpler than SMB auth and does not require PDC/BDC settings.

To install it, unpack the attached zip file into your WebGUI distro and install
the amazing Win32-AdminMisc module using the ppd file. Win32::AdminMisc is available from
www.roth.net.

Add the contents of create-NTLM-1.sql to your database. Use a command like this:
    mysql -uwebgui -ppassword  mydatabase <create-NTLM-1.sql

Add the auth method in your WebGUI/etc/configuration_file.conf file like this:
    authMethods=WebGUI, \
        NTLM

Some configuration of your web server will also be required. Use the local policy editor to grant
    - Act as part of the operating system
    - Replace a process level token
    - Bypass traverse checking

Restart your web server.

When adding a new user, just specify their Windows username and login domain and you are set.

Note: Changes for WebGUI 6.1.x and 6.2.x are included in the zip file



Replies

Problem with this package
User: afieni
Date: 8/12/2005 2:51 pm 		Rating: 2    Rate [
|
]
Status: Approved

I have some problem with this module. I've installed the Win32::AdminMisc module but I can't see the NTLM authentication option in WebGui.

My configuration: Webgui on WinXpPro and NT4 domain.


Re: Problem with this package
User: AussieRules
Date: 8/12/2005 2:51 pm 		Rating: 5    Rate [
|
]
Status: Approved
I've included some better instructions in the latest package. Hope this helps.

auto login to WebGUI ?
User: oschko
Date: 8/12/2005 2:51 pm 		Rating: 1    Rate [
|
]
Status: Approved
Im Using WebGUI 6.1 on a Windows 2003 Server with IIS 6.0 in an intranet
envirnonment with domain controller.

Is it possible with NTLM and Win32::AdminMisc module that
users can authenticate themselves with not entering the login
and password again. They are authenticated with Windows Logon and
should be logged in to WebGUI automatically.

Re: auto login to WebGUI ?
User: AussieRules
Date: 8/12/2005 2:51 pm 		Rating: 12    Rate [
|
]
Status: Approved

Theoretically it should be possible to do this but I haven't attempted it for a number of reasons - I don't know enough about WebGUI internals for a start!

If you were to check the Integrated Windows Authentication and uncheck the Anonymous Access security checkboxes in IIS manager, then the username becomes available in the HTTP environment variable REMOTE_USER ($ENV{REMOTE_USER}) in the form of DOMAIN\username.

This new username could be passed into a modified version of WebGUI/Session.pm which checks the validity as the session is opened. The subroutine to change would probably be _setupUserInfo.

I decided against this because I did not want to rely on Integrated Windows Authentication - not all users are in domains which have domain trusts setup in my system. Secondly, since WebGUI remembers the user in a cookie, the user only has to log in once anyway.

I agree that auto login would be a nice thing to have but I though it would be too hard to get it to work.


Problem with NTLM auth
User: afieni
Date: 8/12/2005 2:51 pm 		Rating: 25    Rate [
|
]
Status: Approved

I have installed this contrib, but whenever I try to authenticate one user with NTLM webgui crashes with error: "can't open webgui.log". If i use Webgui authentication this doesn't happen?

Which is the problem?

I think, only an impression, that the first releas you posted of this contrib, didn't have the problem, possible?

Thank.

Ps: No one use this authentication??


Previous • Back • Next