Help - Search - Members - Calendar
Full Version: How To Automatically Authenticate Users ?
Movable Type Community Forum > Additional Resources > Tips and Tricks
catar4
Movable Type and NTLM authentification

Greetings. I’m dropping by in hopes that you will be able to help me with my questionning. You see, I’m currently setting up a Weblog for my company and I’m now at the stage where I’m testing different softwares to do the right choice. Movable Type is amongst those I decided to test and I’d like to know if it’s compatible with NTLM authentification.

Here’s some additional informations on how our Weblog is setup:

1) Our weblog will be hosted on our server (running on Windows server 2003) and it’s going to be on Intranet (so only computers connected to the intranet will have access to it)
2) Authentification on our Intranet sites are automatic with NTLM authentification, we never have to type usernames and passwords to access the sites and we’d like our Weblog to work the same and recognize the computer automatically. Since everyone working in the company will be an author on the Weblog with the ability to add Posts as well as comments.

So in resume, I’d like to know if automatic authentification is possible with Movable Type and if so, how would I realize that ?

Thanks in advance.
mgs
Not right out of the box.

I have not yet done so. However, I do not see any real problem. The following has to be done...

Users have to be stored in the Movable Type database. So you will need some process for copying the users. The exact procedure depends on where the users are stored (Microsoft Active Directory?), but this should not be that difficult. Reading the directory, creating some SQL.

Next, you have to bypass the login screen. It is just two textboxes with a submit. I suggest you create some ASP, located in a NTLM secured directory, doing nothing more than find out the user and hand over the data to the CGI.

The Movable Type passwords should be generated automatically.They are not known to any user. They should be stored in some data storage, that is to be read by the ASP.

Michael G. Schneider
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2009 Invision Power Services, Inc.