Capturing AD login into a field

[kiwiora]

Hi,

I have users going to a form and entering data which will add it into a FM database.  What I need lasso to do is capture the person's login into a field.  Is this possible?  And how do I go about doing it?

I don't need to authenticate or anything, and I don't want to create a cookie (i.e user interaction), I just want "jbloggs" as login to be captured into the field when they add a record.

Thanks in advance

first time user

[Brian Loomis-3]

You can direct any data into a filemaker field ( or mysql or any  
database).

for example, you can create an inline that does the following:

inline: $dbconn, $cleanparams,
                -database ='dbname',
                -table ='tablename',
                -inlinename ='inl1',
                'username' =action_param('username'),
                -Add;


/inline;

where the $dbconn is your inline auth and $cleanparams is your post  
params from the form.

as a practice you should use encode_sql if you are working with an SQL  
database instead of FileMaker.

'username' could also be a variable or a value from a cookie -- if you  
went that way.

On Oct 21, 2009, at 7:41 PM, kiwiora wrote:

>
> Hi,
>
> I have users going to a form and entering data which will add it  
> into a FM
> database.  What I need lasso to do is capture the person's login  
> into a
> field.  Is this possible?  And how do I go about doing it?
>
> I don't need to authenticate or anything, and I don't want to create a
> cookie (i.e user interaction), I just want "jbloggs" as login to be  
> captured
> into the field when they add a record.
>
> Thanks in advance
>
> first time user ;-)
> --
> View this message in context: http://www.nabble.com/Capturing-AD-login-into-a-field-tp26002625p26002625.html
> Sent from the Lasso - Talk mailing list archive at Nabble.com.
>
>
> --
> This list is a free service of LassoSoft: http://www.LassoSoft.com/
> Search the list archives: http://www.ListSearch.com/Lasso/Browse/
> Manage your subscription: http://www.ListSearch.com/Lasso/
>
>

Brian Loomis
http://www.virtualrelations.us
[phone] - 208 NEW BLOX
-- email checked daily --


--
This list is a free service of LassoSoft: http://www.LassoSoft.com/
Search the list archives: http://www.ListSearch.com/Lasso/Browse/
Manage your subscription: http://www.ListSearch.com/Lasso/

[Jason Huck]

I believe he's asking if there's any way, in Lasso, to access the
user's Active Directory login, without explicitly asking them to enter
it.

- jason



On Wed, Oct 21, 2009 at 10:09 PM, Brian Loomis <brian@...> wrote:

> You can direct any data into a filemaker field ( or mysql or any database).
>
> for example, you can create an inline that does the following:
>
> inline: $dbconn, $cleanparams,
>                -database               ='dbname',
>                -table                  ='tablename',
>                -inlinename             ='inl1',
>                'username'              =action_param('username'),
>                -Add;
>
>
> /inline;
>
> where the $dbconn is your inline auth and $cleanparams is your post params
> from the form.
>
> as a practice you should use encode_sql if you are working with an SQL
> database instead of FileMaker.
>
> 'username' could also be a variable or a value from a cookie -- if you went
> that way.
>
> On Oct 21, 2009, at 7:41 PM, kiwiora wrote:
>
>>
>> Hi,
>>
>> I have users going to a form and entering data which will add it into a FM
>> database.  What I need lasso to do is capture the person's login into a
>> field.  Is this possible?  And how do I go about doing it?
>>
>> I don't need to authenticate or anything, and I don't want to create a
>> cookie (i.e user interaction), I just want "jbloggs" as login to be
>> captured
>> into the field when they add a record.
>>
>> Thanks in advance
>>
>> first time user ;-)
>> --
>> View this message in context:
>> http://www.nabble.com/Capturing-AD-login-into-a-field-tp26002625p26002625.html
>> Sent from the Lasso - Talk mailing list archive at Nabble.com.
>>
>>
>> --
>> This list is a free service of LassoSoft: http://www.LassoSoft.com/
>> Search the list archives: http://www.ListSearch.com/Lasso/Browse/
>> Manage your subscription: http://www.ListSearch.com/Lasso/
>>
>>
>
> Brian Loomis
> http://www.virtualrelations.us
> [phone] - 208 NEW BLOX
> -- email checked daily --
>
>
> --
> This list is a free service of LassoSoft: http://www.LassoSoft.com/
> Search the list archives: http://www.ListSearch.com/Lasso/Browse/
> Manage your subscription: http://www.ListSearch.com/Lasso/
>
>
>

--
tagSwap.net :: Open Source Lasso Code
<http://tagSwap.net/>

--
This list is a free service of LassoSoft: http://www.LassoSoft.com/
Search the list archives: http://www.ListSearch.com/Lasso/Browse/
Manage your subscription: http://www.ListSearch.com/Lasso/

[Steve Piercy]

On 10/21/09 at 6:41 PM, kiwiora@... (kiwiora) pronounced:

>I have users going to a form and entering data which will add it into a FM
>database.  What I need lasso to do is capture the person's login into a
>field.  Is this possible?  And how do I go about doing it?

What kind of form?  How does the user get to the form?  Through
the web, the Filemaker Pro client, an operating system login, or
something else?

In almost all circumstances, the answer is yes with some
caveats.  A web interface is the simplest, but you could also
have a series of events or scripts outside of Lasso to
accomplish the task.

--steve

-- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
-- --
Steve Piercy               Web Site Builder              
Soquel, CA
<web@...>                  <http://www.StevePiercy.com/>


--
This list is a free service of LassoSoft: http://www.LassoSoft.com/
Search the list archives: http://www.ListSearch.com/Lasso/Browse/
Manage your subscription: http://www.ListSearch.com/Lasso/

[kiwiora]

Yes she is ;)

Jason Huck wrote:

I believe he's asking if there's any way, in Lasso, to access the
user's Active Directory login, without explicitly asking them to enter
it.

- jason



On Wed, Oct 21, 2009 at 10:09 PM, Brian Loomis <[e-mail]> wrote:
> You can direct any data into a filemaker field ( or mysql or any database).
>
> for example, you can create an inline that does the following:
>
> inline: $dbconn, $cleanparams,
>                -database               ='dbname',
>                -table                  ='tablename',
>                -inlinename             ='inl1',
>                'username'              =action_param('username'),
>                -Add;
>
>
> /inline;
>
> where the $dbconn is your inline auth and $cleanparams is your post params
> from the form.
>
> as a practice you should use encode_sql if you are working with an SQL
> database instead of FileMaker.
>
> 'username' could also be a variable or a value from a cookie -- if you went
> that way.
>
> On Oct 21, 2009, at 7:41 PM, kiwiora wrote:
>
>>
>> Hi,
>>
>> I have users going to a form and entering data which will add it into a FM
>> database.  What I need lasso to do is capture the person's login into a
>> field.  Is this possible?  And how do I go about doing it?
>>
>> I don't need to authenticate or anything, and I don't want to create a
>> cookie (i.e user interaction), I just want "jbloggs" as login to be
>> captured
>> into the field when they add a record.
>>
>> Thanks in advance
>>
>> first time user ;-)

[kiwiora]

It's a basic post form webpage which goes to confirmation.lasso which has a simple inline -add and the fields etc.

I need one of the fields to be auto entered with the user's AD login.

Background:  It's a voting system .. (cheap and nasty staff award for 160 people) so obviously I want to identify who voted for who, more so I can identify if they have already voted (save having to write a whole have you voted already or not drama).

Cheers

Steve Piercy wrote:

On 10/21/09 at 6:41 PM, [e-mail] (kiwiora) pronounced:

>I have users going to a form and entering data which will add it into a FM
>database.  What I need lasso to do is capture the person's login into a
>field.  Is this possible?  And how do I go about doing it?

What kind of form?  How does the user get to the form?  Through
the web, the Filemaker Pro client, an operating system login, or
something else?

In almost all circumstances, the answer is yes with some
caveats.  A web interface is the simplest, but you could also
have a series of events or scripts outside of Lasso to
accomplish the task.

--steve

-- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
-- --
Steve Piercy               Web Site Builder              
Soquel, CA
<[e-mail]>                  <http://www.StevePiercy.com/>

[Steve Piercy]

The trick would be to extract the AD login from wherever that
data is stored, AFAIK it ain't possible, but I could be wrong.

If the user's AD login is stored within the user's computer
only, there is no practical and reliable method to get it.  If
you can get the AD login from an AD server, you would first have
to obtain some kind of information from the user's computer that
uniquely identifies them, which you would pass to the AD server,
which would respond with the AD login.  Again, not very effective.

If this is a controlled environment, you could try client_ip to
obtain the computer's IP address, assuming that computers are
not shared.

Another option would be to send a unique identifying link with
an encrypted parameter:

http://mysurvey.com/?id=encryptedstringvalue

...and pass that along into the form, and ultimately submit its value.

--steve


On 10/22/09 at 1:32 AM, kiwiora@... (kiwiora) pronounced:

>It's a basic post form webpage which goes to confirmation.lasso which has a
>simple inline -add and the fields etc.
>
>I need one of the fields to be auto entered with the user's AD login.
>
>Background:  It's a voting system .. (cheap and nasty staff award for 160
>people) so obviously I want to identify who voted for who, more so I can
>identify if they have already voted (save having to write a whole have you
>voted already or not drama).
>
>Cheers
>
>
>
>Steve Piercy wrote:
>>
>>On 10/21/09 at 6:41 PM, kiwiora@... (kiwiora) pronounced:
>>
>>>I have users going to a form and entering data which will add it into a FM
>>>database.  What I need lasso to do is capture the person's login into a
>>>field.  Is this possible?  And how do I go about doing it?
>>
>>What kind of form?  How does the user get to the form?  
>>Through the web, the Filemaker Pro client, an operating system
>>login, or something else?
>>
>>In almost all circumstances, the answer is yes with some
>>caveats.  A web interface is the simplest, but you could also
>>have a series of events or scripts outside of Lasso to
>>accomplish the task.
>>
>>--steve
>>
>>-- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
>>-- --
>>Steve Piercy               Web Site Builder              
>>Soquel, CA
>><web@...>                  <http://www.StevePiercy.com/>
>>
>>
>>
>

-- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
-- --
Steve Piercy               Web Site Builder              
Soquel, CA
<web@...>                  <http://www.StevePiercy.com/>


--
This list is a free service of LassoSoft: http://www.LassoSoft.com/
Search the list archives: http://www.ListSearch.com/Lasso/Browse/
Manage your subscription: http://www.ListSearch.com/Lasso/

[kiwiora]

Thanks for the response :)

client_ip would probably work because I have a login script that records all logins\ip addresses\computernames into a SQL db that i can back track through the time stamp on the record.  Have a limited number of shared computers.  Not the best but... a possibility if all else fails :(

Kind of a failing really not to be able to identify the login :S

encrypted login won't work as it will be a votehere.lasso page on our intranet for everyone to access.

Cheers

Steve Piercy wrote:

The trick would be to extract the AD login from wherever that
data is stored, AFAIK it ain't possible, but I could be wrong.

If the user's AD login is stored within the user's computer
only, there is no practical and reliable method to get it.  If
you can get the AD login from an AD server, you would first have
to obtain some kind of information from the user's computer that
uniquely identifies them, which you would pass to the AD server,
which would respond with the AD login.  Again, not very effective.

If this is a controlled environment, you could try client_ip to
obtain the computer's IP address, assuming that computers are
not shared.

Another option would be to send a unique identifying link with
an encrypted parameter:

http://mysurvey.com/?id=encryptedstringvalue

...and pass that along into the form, and ultimately submit its value.

--steve


On 10/22/09 at 1:32 AM, [e-mail] (kiwiora) pronounced:

>It's a basic post form webpage which goes to confirmation.lasso which has a
>simple inline -add and the fields etc.
>
>I need one of the fields to be auto entered with the user's AD login.
>
>Background:  It's a voting system .. (cheap and nasty staff award for 160
>people) so obviously I want to identify who voted for who, more so I can
>identify if they have already voted (save having to write a whole have you
>voted already or not drama).
>
>Cheers
>
> -- -- -- -- --
-- --
Steve Piercy               Web Site Builder              
Soquel, CA
<[e-mail]>                  <http://www.StevePiercy.com/>

[Steve Piercy]

Yeah, it's not a failing of Lasso, but more of how AD stores
credentials and makes them available to web applications.

Regarding the encrypted ID, you could send an email to each user
with a unique link in the message body.  Then on votehere.lasso,
if there is no valid parameter for id (either missing, truncated
or already voted), then don't allow them to vote.

http://mysurvey.com/votehere.lasso?id=encryptedstringvalue

--steve


On 10/22/09 at 1:56 AM, kiwiora@... (kiwiora) pronounced:

>Thanks for the response :)
>
>client_ip would probably work because I have a login script that records all
>logins\ip addresses\computernames into a SQL db that i can back track
>through the time stamp on the record.  Have a limited number of shared
>computers.  Not the best but... a possibility if all else fails :(
>
>Kind of a failing really not to be able to identify the login :S
>
>encrypted login won't work as it will be a votehere.lasso page on our
>intranet for everyone to access.
>
>Cheers
>
>
>Steve Piercy wrote:
>>
>>The trick would be to extract the AD login from wherever that
>>data is stored, AFAIK it ain't possible, but I could be wrong.
>>
>>If the user's AD login is stored within the user's computer
>>only, there is no practical and reliable method to get it.  If
>>you can get the AD login from an AD server, you would first
>>have to obtain some kind of information from the user's
>>computer that uniquely identifies them, which you would pass
>>to the AD server, which would respond with the AD login.  
>>Again, not very effective.
>>
>>If this is a controlled environment, you could try client_ip
>>to obtain the computer's IP address, assuming that computers
>>are not shared.
>>
>>Another option would be to send a unique identifying link with
>>an encrypted parameter:
>>
>>http://mysurvey.com/?id=encryptedstringvalue
>>
>>...and pass that along into the form, and ultimately submit its value.
>>
>>--steve
>>
>>
>>On 10/22/09 at 1:32 AM, kiwiora@... (kiwiora) pronounced:
>>
>>>It's a basic post form webpage which goes to confirmation.lasso which has
>a
>>>simple inline -add and the fields etc.
>>>
>>>I need one of the fields to be auto entered with the user's AD login.
>>>
>>>Background:  It's a voting system .. (cheap and nasty staff award for 160
>>>people) so obviously I want to identify who voted for who, more so I can
>>>identify if they have already voted (save having to write a whole have you
>>>voted already or not drama).
>>>
>>>Cheers
>>>
>>> -- -- -- -- --
>>-- --
>>Steve Piercy               Web Site Builder              
>>Soquel, CA
>><web@...>                  <http://www.StevePiercy.com/>
>>
>>
>

-- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
-- --
Steve Piercy               Web Site Builder              
Soquel, CA
<web@...>                  <http://www.StevePiercy.com/>


--
This list is a free service of LassoSoft: http://www.LassoSoft.com/
Search the list archives: http://www.ListSearch.com/Lasso/Browse/
Manage your subscription: http://www.ListSearch.com/Lasso/

[kiwiora]

Hmm interesting concept... I could even email it out from the staff database using their fm staff serial id which can then be related back to give me their name.  Something to play with.  Thanks.



Yeah, it's not a failing of Lasso, but more of how AD stores
credentials and makes them available to web applications.

Regarding the encrypted ID, you could send an email to each user
with a unique link in the message body.  Then on votehere.lasso,
if there is no valid parameter for id (either missing, truncated
or already voted), then don't allow them to vote.

http://mysurvey.com/votehere.lasso?id=encryptedstringvalue

--steve

[bilcorry]

Is this information sent in a header?


- Bil


kiwiora wrote on 10/22/2009 1:29 AM:
> Yes she is ;)
>
>
> Jason Huck wrote:
>> I believe he's asking if there's any way, in Lasso, to access the
>> user's Active Directory login, without explicitly asking them to enter
>> it.



--
This list is a free service of LassoSoft: http://www.LassoSoft.com/
Search the list archives: http://www.ListSearch.com/Lasso/Browse/
Manage your subscription: http://www.ListSearch.com/Lasso/