Professional Web Applications Themes

Enabling Windows Authentication from inside Forms Authentication (ASP.NET 2.0) - ASP.NET Security

I need the ability to bypass the forms authentication login page when the user requesting the protected page is running on our corporate network and is also logged into the corporate domain. How do I do this? Thanks, Mike Ober....

  1. #1

    Default Enabling Windows Authentication from inside Forms Authentication (ASP.NET 2.0)

    I need the ability to bypass the forms authentication login page when the
    user requesting the protected page is running on our corporate network and
    is also logged into the corporate domain. How do I do this?

    Thanks,
    Mike Ober.


    Michael Guest

  2. #2

    Default Re: Enabling Windows Authentication from inside Forms Authentication (ASP.NET 2.0)

    Thats not easily doable.

    the easiest way is to provider two application entry points - one for non-domain
    users, and a separate app for domain users that converts the windows account
    details to a forms auth cookie.

    another option is to modify the pipeline and inject some modules that "bypass"
    forms auth - this needs some kind of indicator if windows auth should be
    used or not - like an IP address range for domain users.

    i described both approaches and trade offs in detail here - but feel free
    to ask more questions:

    http://www.microsoft.com/mspress/books/9989.asp

    ---
    Dominick Baier, DevelopMentor
    http://www.leastprivilege.com
     


    Dominick Guest

  3. #3

    Default Re: Enabling Windows Authentication from inside Forms Authentication (ASP.NET 2.0)


    http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnaspp/html/mixedsecurity.asp

    "Michael D. Ober" <obermd..alum.mit.edu.nospam> wrote in message
    news:%23X4JEeH%phx.gbl... 


    Jeff Guest

  4. #4

    Default Re: Enabling Windows Authentication from inside Forms Authentication (ASP.NET 2.0)

    Jeff,

    Thanks for the link.

    Mike Ober.

    "Jeff Dillon" <com> wrote in message
    news:OS9qpWI%phx.gbl... 
    >
    >[/ref]


    Michael Guest

  5. #5

    Default Re: Enabling Windows Authentication from inside Forms Authentication (ASP.NET 2.0)

    Dear Mike

    You don't say whether external users have an internal network account
    but if you opt for Windows authentication in web.config and set
    Directory Security in IIS to "Integrated Windows" and disable
    "Anonymous access" then external visitors will be prompted for a
    username and password. The credentials they supply will be verified by
    a domain controller in the same manner as in internal corporate network
    login.

    Hope that's helpful

    Phil Hall

    Phil Guest

  6. #6

    Default Re: Enabling Windows Authentication from inside Forms Authentication (ASP.NET 2.0)

    That won't work. My external users must use Forms Authentication because
    they don't have domain accounts (nor am I going to shell out $$$ to M$ for
    web-enabled CALs for them.) I did solve the problem by mimicking the login
    control, however.

    Mike.

    "Phil H" <me.uk> wrote in message
    news:googlegroups.com... 


    Michael Guest

  7. #7

    Default Re: Enabling Windows Authentication from inside Forms Authentication (ASP.NET 2.0)

    Phil,

    Sorry about being curt - it's Monday from Hell here.

    Mike.

    "Michael D. Ober" <obermd..alum.mit.edu.nospam> wrote in message
    news:uEM183C$phx.gbl... 
    >
    >[/ref]


    Michael Guest

Similar Threads

  1. Replies: 3
    Last Post: September 16th, 06:30 PM
  2. Enabling Forms Authentication Stops Button Click Events
    By Waqas in forum ASP.NET Security
    Replies: 3
    Last Post: August 22nd, 06:20 PM
  3. Replies: 2
    Last Post: February 24th, 04:31 PM
  4. Forms authentication with Windows authentication
    By Dadi in forum ASP.NET Security
    Replies: 2
    Last Post: September 16th, 04:47 AM

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139