ASP.NET Authenication Question

Ask a Question related to ASP.NET Security, Design and Development.

  1. #1

    Default ASP.NET Authenication Question

    Hi

    I have an intranet app which resides on a web server that is not in a
    domain; but in a workgroup. The users of this web app all log into the
    domain.

    I want to be able to find out who the 'domain user' is when they browser to
    my web app on the server, how does one do this? what are the IIS settings?
    Currently I have IIS set to intergrate windows authenication -which pops up
    the message box for the user credentials. this obvously fails when the user
    is not a 'named' user on the web server.

    Craig


    Craig Guest

  2. Similar Questions and Discussions

    1. Howto Basic user authenication?
      I'd like to setup basic password protection for a small flex app I'm creating. Can anyone point me in the direction of a tutorial?
    2. Handle User Authenication
      Can someone give me a link on where I can learn about how to handle user authentication and Flex? I can't find anything. Thanks.
    3. authenication
      Next problem, i have a login form. And it don't work. I used dreamweaver to code it and when you log in, it just fails. Here's the code: <cfif...
    4. Domain Authenication with the public dmz
      You could have a separate domain in the DMZ. But my personal suggestion is look at ISA Server web publishing. That way, you can keep the IIS box...
    5. Windows Authenication Expiration
      Greetings, If you set a ASP.NET site up with Windows NT Authentication, is it possible to set a session timeout? Currently, it appears that the...
  3. #2

    Default Re: ASP.NET Authenication Question

    I think that the only way to do this is to replicate the domain users as
    local users for the web server.
    This because:
    - If you set the anonymous authentication in you loose the users identity
    - If you use "windows integrated" or basic the web server can't contact the
    DC for the authentication, then IIS throw a 404 error
    - If you use a custom login form you can impersonate in code the credential
    provided by the user (LogonAsUser api), but the web server can't contact the
    DC, then authentication failed

    The last two ways functions properly only if web server has the domain users
    as local users, but this is a very expensive solution (ie. password
    syncronization problem...). The best (fast, simple, ..) way to do this is to
    have the web server in the domain.

    HtH,
    Andrea

    --
    This posting is provided "AS IS" with no warranties, and confers no rights.

    "Craig" <pearson4@un.org> wrote in message
    news:eDGopfOxDHA.2440@TK2MSFTNGP12.phx.gbl...
    > Hi
    >
    > I have an intranet app which resides on a web server that is not in a
    > domain; but in a workgroup. The users of this web app all log into the
    > domain.
    >
    > I want to be able to find out who the 'domain user' is when they browser
    to
    > my web app on the server, how does one do this? what are the IIS
    settings?
    > Currently I have IIS set to intergrate windows authenication -which pops
    up
    > the message box for the user credentials. this obvously fails when the
    user
    > is not a 'named' user on the web server.
    >
    > Craig
    >
    >

    Andrea D'Onofrio [MSFT] Guest

Posting Permissions

  • You may not post new threads
  • You may post replies
  • You may not post attachments
  • You may not edit your posts

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139