I built a php intranet web application that allow users to show their information stored in Active Directory.
I want to auto authenticate the user over the Active directory using his windows credentials that he entered when he logged in to the windows, but a login pop up window appears when I access the application.
I actually prefer to auto authenticate the user, but this popup window is not a big problem. The problem happens when the user enter wrong credentials. It allows him to access the application !!
How can I auto authenticate the user ? or How can I prevent users from accessing the application when they provide wrong credentials?
note:
I am using the NTLM authentication witch is described in this article: http://siphon9.net/loune/2007/10/simple-lightweight-ntlm-in-php/
I am working on Windows 7 I am using Apatch 2.2, php5 and iis7