Any idea how to get the AD name of a survey participant?

Example: Open survey, user will participate and a field shows his AD username.
Currently, when I want to start an open survey without participant table, I need the ask the user for their name using a text field. Or are there other ideas with the same result?

efingdmi wrote: Any idea how to get the AD name of a survey participant?

You cannot capture the AD name of a survey participant.
Even if we change the task to "Capture the AD name of the current Windows user session, the browser alone wouldn't be able to capture that info.

If people e.g. use InternetExplorer and have security settings disabled, there is a way to capture the username.
But nobody will allow that, if security is important.
stackoverflow.com/questions/9518092/java...-of-the-current-user

Makes sense. I thought about webserver auth with kerberos or something like that. But no idea how to use this in a survey.

efingdmi wrote: I thought about webserver auth with kerberos or something like that.

There are ways to provide that information, but that is depending on the enviroment and the setup done by the admins inside the company. It's doesn't depend on LimeSurvey.

In it's simplest form, you want to provide LimeSurvey the AD/name of the Windows usersession, the browser is running in. This information needs to be provided somewhere inside the company network.

The simplest way I think of, is to let admins create a landingpage on a Windows webserver (e.g with ASP.NET on a IIS) , where the AD/username is added to the URL as a parameter and the landingpage redirects to the LimeSurvey.
LimeSurvey gets the AD/username and can save it with the response.

The providing of the AD/username has to be done by the IT department. There are more secure ways than my example above, but that is not related to LimeSurvey.

For such system : i think i review a little the token entering process in a plugin :
1. Allow to connect via AD with a new plugin event : something using www.limesurvey.org/manual/NewUnsecureRequest or www.limesurvey.org/manual/NewDirectRequest
2. Create or find the related token in this function
3. Adding a button to token form in twig file.

DenisChenu wrote: 1. Allow to connect via AD with a new plugin event : something using www.limesurvey.org/manual/NewUnsecureRequest or www.limesurvey.org/manual/NewDirectRequest

Requirement in the environment of the threadstarter: The admins won't allow a connection from LimeSurvey directly to AD. So I wonder what does "Allow to connect via AD"? will mean?

jelo wrote: …
So I wonder what does "Allow to connect via AD"? will mean?

www.limesurvey.org/manual/Authentication_plugins#LDAP
AD is based on LDAP

DenisChenu wrote: AD is based on LDAP

Yes, I'm aware of that.

Once again: "The admins won't allow a connection from LimeSurvey directly to AD." So how is your " Allow to connect via AD with a new plugin event :" fitting in?

jelo wrote: …
" So how is your " Allow to connect via AD with a new plugin event :" fitting in?

No, plugin can‘t break rules …

If database is unavailbale : plugin can break rules … and can not make LimeSurey work.
I AD is not accessible via an LDAP connection : plugin can break rules …


My answer was exactly this one

For such system : i think i review a little the token entering process in a plugin :

But if AD admin don't want then i don't do