asked on

Access network credentials using javascript

Is there anyway to access network credentials with javascript without having to manually set them? This is needed in order to pass the credentials dynamically to a webservice. The webservice is setup for windows authentication and the browser is IE8.

Michel Plungjan

Try the code mentioned here.
http://www.ureader.com/msg/16721933.aspx

<script language=javascript>   
  function getNTUsername(){
  
var wshNetwork = new ActiveXObject("WScript.Network");   
        alert('domain ='+   wshNetwork.UserDomain);   
        alert('machine name = '+   wshNetwork.ComputerName);   
        alert('user name = '+   wshNetwork.UserName);
        document.getElementById('username').value = wshNetwork.UserName;
        document.getElementById('UsernameDiv').innerHTML = 
wshNetwork.UserName;
  }
</script>

Open in new window

However your HTML has to be saved with extension .hta and has to be loaded from hard disk

ahoffmann

mplungjan, just for curiosity: how would a local stored .hta file be loaded/used by a page send from anywhere without violating the SOP?
(sorry for the silly question, as I'm no IE and M$ guru ;-)

Michel Plungjan

You will need to "save/open" it from the web or copy it to your intranet users if that is what you need.

SOLUTION

ahoffmann

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

ASKER CERTIFIED SOLUTION

Michel Plungjan

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

EntAppDevTeam

ASKER

This won't work. At best, the user will be prompted to allow on every page load. Check it out http://forums.asp.net/t/1124769.aspx

ahoffmann

question answered, isn't it?

ahoffmann

hmm, mplungjan helped answering too, IMHO ...

Michel Plungjan

I believe I did.

What you are trying to do is a security risk, hence it only works on the lowest security level - that is when the user started the HTA him/herself

this cannot be done from a web page from a web server

ahoffmann

@all: I fully agree with mplungjan's comments and helped to point out the limits
sorry for beining a bit short in my comments, but mplungjan got them all:)