Fix REMOTE_USER Header with IIS and AD

Remove DOMAIN\ portion of DOMAIN\user when using Windows Authentication and IIS with REMOTE_USER.
2018-07-17 14:03:19 +10:00
parent a4799a495a
commit 7c2da81700
1 changed files with 6 additions and 0 deletions
@@ -69,6 +69,12 @@ class LoginController extends Controller
        $remote_user = $request->server('REMOTE_USER');
        if (Setting::getSettings()->login_remote_user_enabled == "1" && isset($remote_user) && !empty($remote_user)) {
            LOG::debug("Authenticatiing via REMOTE_USER.");
+
+            $pos = strpos($remote_user, '\\');
+            if ($pos > 0) {
+                $remote_user = substr($remote_user, $pos + 1);
+            };
+            
            try {
                $user = User::where('username', '=', $remote_user)->whereNull('deleted_at')->first();
                LOG::debug("Remote user auth lookup complete");