Web Server Auth doesn't work because some code appears to be missing from application\core\useridentity.php. Additionally, I've added code to make it work with Windows Integrated Authentication (allowing single sign on).

Code changes to the above file are:

Change line 59 farom:

elseif(Yii::app()->getConfig("auth_webserver") === true && isset($_SERVER['PHP_AUTH_USER'])) // normal login through webserver authentication

to:

elseif(Yii::app()->getConfig("auth_webserver") === true && (isset($_SERVER['PHP_AUTH_USER'])||isset($_SERVER['LOGON_USER']))) // normal login through webserver authentication

Change line 61 from:

$sUser=$_SERVER['PHP_AUTH_USER'];

to:

        if (isset($_SERVER['PHP_AUTH_USER'])) {
                         $sUser=$_SERVER['PHP_AUTH_USER'];
                    } else {
                        $sUser = $_SERVER['LOGON_USER'];
                        $sUser = substr($sUser, strrpos($sUser, "\\")+1);
                    }

change (old) line 74 from:

            elseif (Yii::app()->getConfig("auth_webserver_autocreate_user"))
            {
                $aUserProfile=Yii::app()->getConfig("auth_webserver_autocreate_profile");
            }
        }

to:

            elseif (Yii::app()->getConfig("auth_webserver_autocreate_user"))
            {
                $aUserProfile=Yii::app()->getConfig("auth_webserver_autocreate_profile");
            }
        } else {
    $this->id = $oUser->uid;
            $this->user = $oUser;                    
            $this->errorCode = self::ERROR_NONE;    
                    }