This topic is locked

Yet another Single Sign On question

8/5/2008 5:00:49 AM
ASPRunnerPro General questions
Z
zion4ever author

Hi,
I hope you can shed some light onto this question. I have read the posts regarding the readout of the servervariabele LOGON USER:
if Request.ServerVariables("LOGON_USER")<>"" then

SESSION("UserID") = Request.ServerVariables("LOGON_USER")

SESSION("AccessLevel") = ACCESS_LEVEL_USER

Response.Redirect "Menu.asp"

end if
Now I have created an asprunner intranetproject which regulates reservations of our conferenceroom occupation, internal laptop rentals, etc. This page will become available to our employees in the field so they can for example reservate a car or conferenceroom. All of our remote users login through a vpn (radius server) and once authenticated they can see our intranet.
I would like to implement single sign on. The code above will work fine for users who are physically present at our company and logged in. But when a employee logs in remotely via VPN, but is logged on on his own computer as a local user JohnDoe will the serverVariable("LOGONUSER") return JohnDoe (which is not an ActiveDirectory username in our company) ? This would mean that I cannot rely on this code for this specific purpose. Maybe someone has another snippet example for SSO which checks for a valid NT logon with a domaincontroller? Or maybe someone could just say i'm wrong and it will work just fine.
Tia
Hans

Sergey Kornilov admin 8/5/2008

Hans,
as far as I understand VPN users will be assigned IP address from different pool.
I would suggest to use Request.ServerVariables("REMOTE_ADDR") server variable to recognize VPN users and force them to enter username/password manually.

Z
zion4ever author 8/5/2008

Good tip!
Thank you for the swift reply. Asprunner support team rocks!