Professional Web Applications Themes

Forms Authentication Ticket Functionality With Windows Authentication - ASP.NET Security

I am creating a web application for a company intranet and I am using Windows Authentication for a somewhat "transparent" login process. What I would like to do is allow all users into the application that exist in our LDAP under a particular user (their is a heirarchy associated with the LDAP tree). I was able to do this with Forms Authentication as I included the code to do this in the Page_Load event of the page associated with the <forms> tag in the web.config. My question is where would I include this functionality when using Integrated Windows Authentication? And ...

  1. #1

    Default Forms Authentication Ticket Functionality With Windows Authentication

    I am creating a web application for a company intranet and I am using
    Windows Authentication for a somewhat "transparent" login process.
    What I would like to do is allow all users into the application that
    exist in our LDAP under a particular user (their is a heirarchy
    associated with the LDAP tree). I was able to do this with Forms
    Authentication as I included the code to do this in the Page_Load event
    of the page associated with the <forms> tag in the web.config. My
    question is where would I include this functionality when using
    Integrated Windows Authentication? And any idea what would be the best
    way to sort of keep track of the user like the forms authentication
    ticket does. Thanks in advance.

    jfer Guest

  2. #2

    Default Re: Forms Authentication Ticket Functionality With Windows Authentication

    Hello jfer,


    is this 1.1?

    You could handle the Authenticate_Request and check via LDAP. If the user
    is in a particular OU let him through, otherwise reject.

    ---------------------------------------
    Dominick Baier - DevelopMentor
    http://www.leastprivilege.com
     


    Dominick Guest

  3. #3

    Default Re: Forms Authentication Ticket Functionality With Windows Authentication

    Sorry just to clarify it is in ASP.NET 2.0. I am famaliar with
    querying the LDAP but what is confusing me is where to include it.
    Does Authenticate_Request run on every user interaction with the web
    application or only the first time they enter a web application (sort
    of like Session Start). And what would be the best way to make sure
    they are put through this "gateway" if they try to jump to a page
    somewhere in the middle of the web application later on (lets say via a
    bookmark) and to manage this (Cookies? Session?) I liked how Forms
    Authentication let you hook to a sort of start page. Again insight is
    appreciated.

    Thanks

    jfer Guest

  4. #4

    Default Re: Forms Authentication Ticket Functionality With Windows Authentication

    Hello jfer,

    Authenticate_Request runs on every request - there is no way to bypass.

    ---------------------------------------
    Dominick Baier - DevelopMentor
    http://www.leastprivilege.com
     


    Dominick Guest

Similar Threads

  1. Forms Authentication Ticket isn't destroyed when logging out
    By Ethan Chan in forum ASP.NET Security
    Replies: 1
    Last Post: April 25th, 04:23 AM
  2. Forms Authentication Ticket Reissue
    By Stefan Leyhane in forum ASP.NET Security
    Replies: 1
    Last Post: March 30th, 04:46 PM
  3. forms authentication ticket expiration problem
    By tparks69 in forum ASP.NET Security
    Replies: 2
    Last Post: February 17th, 08:11 PM
  4. forms based authentication - ticket not expiring
    By tparks69 in forum ASP.NET Security
    Replies: 0
    Last Post: January 31st, 09:03 PM
  5. Authentication ticket, cookieless, forms authentication?
    By Lauchlan M in forum ASP.NET Security
    Replies: 0
    Last Post: October 1st, 12:23 AM

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139