Ask a Question related to ASP.NET Security, Design and Development.
-
Craig #1
ASP.NET Authenication Question
Hi
I have an intranet app which resides on a web server that is not in a
domain; but in a workgroup. The users of this web app all log into the
domain.
I want to be able to find out who the 'domain user' is when they browser to
my web app on the server, how does one do this? what are the IIS settings?
Currently I have IIS set to intergrate windows authenication -which pops up
the message box for the user credentials. this obvously fails when the user
is not a 'named' user on the web server.
Craig
Craig Guest
-
Howto Basic user authenication?
I'd like to setup basic password protection for a small flex app I'm creating. Can anyone point me in the direction of a tutorial? -
Handle User Authenication
Can someone give me a link on where I can learn about how to handle user authentication and Flex? I can't find anything. Thanks. -
authenication
Next problem, i have a login form. And it don't work. I used dreamweaver to code it and when you log in, it just fails. Here's the code: <cfif... -
Domain Authenication with the public dmz
You could have a separate domain in the DMZ. But my personal suggestion is look at ISA Server web publishing. That way, you can keep the IIS box... -
Windows Authenication Expiration
Greetings, If you set a ASP.NET site up with Windows NT Authentication, is it possible to set a session timeout? Currently, it appears that the... -
Andrea D'Onofrio [MSFT] #2
Re: ASP.NET Authenication Question
I think that the only way to do this is to replicate the domain users as
local users for the web server.
This because:
- If you set the anonymous authentication in you loose the users identity
- If you use "windows integrated" or basic the web server can't contact the
DC for the authentication, then IIS throw a 404 error
- If you use a custom login form you can impersonate in code the credential
provided by the user (LogonAsUser api), but the web server can't contact the
DC, then authentication failed
The last two ways functions properly only if web server has the domain users
as local users, but this is a very expensive solution (ie. password
syncronization problem...). The best (fast, simple, ..) way to do this is to
have the web server in the domain.
HtH,
Andrea
--
This posting is provided "AS IS" with no warranties, and confers no rights.
"Craig" <pearson4@un.org> wrote in message
news:eDGopfOxDHA.2440@TK2MSFTNGP12.phx.gbl...to> Hi
>
> I have an intranet app which resides on a web server that is not in a
> domain; but in a workgroup. The users of this web app all log into the
> domain.
>
> I want to be able to find out who the 'domain user' is when they browsersettings?> my web app on the server, how does one do this? what are the IISup> Currently I have IIS set to intergrate windows authenication -which popsuser> the message box for the user credentials. this obvously fails when the> is not a 'named' user on the web server.
>
> Craig
>
>
Andrea D'Onofrio [MSFT] Guest



Reply With Quote

