From 7c2da8170028b2616b99ddf4483c956c057de31b Mon Sep 17 00:00:00 2001 From: DeusMaximus Date: Tue, 17 Jul 2018 14:03:19 +1000 Subject: [PATCH] Fix REMOTE_USER Header with IIS and AD Remove DOMAIN\ portion of DOMAIN\user when using Windows Authentication and IIS with REMOTE_USER. --- app/Http/Controllers/Auth/LoginController.php | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/app/Http/Controllers/Auth/LoginController.php b/app/Http/Controllers/Auth/LoginController.php index 940317a2c6..ed37640cd4 100644 --- a/app/Http/Controllers/Auth/LoginController.php +++ b/app/Http/Controllers/Auth/LoginController.php @@ -69,6 +69,12 @@ class LoginController extends Controller $remote_user = $request->server('REMOTE_USER'); if (Setting::getSettings()->login_remote_user_enabled == "1" && isset($remote_user) && !empty($remote_user)) { LOG::debug("Authenticatiing via REMOTE_USER."); + + $pos = strpos($remote_user, '\\'); + if ($pos > 0) { + $remote_user = substr($remote_user, $pos + 1); + }; + try { $user = User::where('username', '=', $remote_user)->whereNull('deleted_at')->first(); LOG::debug("Remote user auth lookup complete");