检索NTLM的Active Directory用户数据到Rails的W / O型的IIS [英] Retrieve NTLM Active Directory user data to Rails w/o IIS

问题描述

我相信我们可以允许Firefox发送NTLM数据到SharePoint网站做自动认证，而我认为这是可行的与IIS。

I believe that we can allow Firefox to sent NTLM data to SharePoint sites to do automatic authentication, and I think that this is doable with IIS.

我希望做同样的事情与内部Rails的网站。

I'd like to do the same thing with an internal Rails site.

有谁知道我可以通过一个阿帕奇/杂种设置（前提当然是它已经在Windows中的Active Directory域的内部运行的）NTLM身份验证类型的用户信息的方式？

Does anyone know of way that I could authenticate NTLM type user information through a Apache/mongrel setup (provided of course that it's already running on a Windows box inside of an Active Directory domain)?

推荐答案

我假设你已经制定了需要发送，以获得Firefox和IE浏览器发回NTLM身份验证的东西的HTTP报头，并只是需要来处理在服务器端？

I'm assuming you've already worked out which HTTP headers you need to send in order to get firefox and IE to send back the NTLM authentication stuff, and are just needing to handle that on the server side?

您可以使用一些Ruby的的win32库访问底层的Windows身份验证功能，其处理NTLM。

You could use some of ruby's win32 libraries to access the underlying windows authentication functions which handle the NTLM.

我建议阻力最小的路径可能是，看是否有一个COM组件，它可以做认证为你，如果是这样，使用WIN32OLE Ruby库使用它。

I'd suggest the path of least resistance might be to see if there is a COM component which can do the authentication for you, and if so, to use it using the Win32OLE ruby library.

如果没有COM组件，你也许能找到的东西在其中可以调用本机Win32方法您与其他图书馆之一。

If there's no COM component, you might be able to find something in one of those other libraries which can invoke the native win32 methods for you.

如果你找不到，你必须写一个Ruby的C扩展。我已经在Linux上做到了这一点，并延伸红宝石pretty的容易，但你会发现微软认证API是有点痛苦。

If you can't find that, you'd have to write a ruby C extension. I've done this on linux, and extending ruby is pretty easy, but you may find the microsoft authentication API's a bit painful.

希望得到您开始在正确的轨道： - ）

Hope that gets you started on the right track :-)

这篇关于检索NTLM的Active Directory用户数据到Rails的W / O型的IIS的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！