From: Gregory Brown <gregory_brown@...>
Date: 2012-03-21T07:33:09+09:00
Subject: Re: network user with sinatra

On 3/20/12 9:57 PM, Brian Candler wrote:
> Mario Ruiz wrote in post #1052356:
>> Robert Klemme wrote in post #1052335:

> But if they just went to http://your.site/ and your site doesn't require
> authentication, then your site will just serve them the page and you
> won't know what Windows username they had.
>
> If they have a domain login, then it *might* be possible to set up your
> webserver to require Kerberos authentication and for the Windows client
> to present its domain Kerberos ticket as credentials. I don't know how
> feasible this is. I've done it with Unix krb5 clients but not with
> Windows clients.

With domain logins it's possible to have Apache handle it. I worked on a 
project several years ago that did this for an internal application. We 
may have used mod_ntlm, but I can't remember: 
http://modntlm.sourceforge.net/

Sorry if that's extremely vague, I'm just confirming that it is possible 
to have a Rails app with Windows domain logins, even if I don't remember 
*how* we did it.

-greg