Forms authentication <-> Windows user?

[InspektorDerrick]

Hi,

I'm new in ASP.NET and I've got a question about authentication in an
intranet application:

I want to authentify and authorize the user by a database. Authentication
should work like this:

1. evaluate the windows username
2. check if user exists in database
yes -> new customIdentiy (IsAuthenticated = true), new customPrincipal
(roles from database)
no -> 3.
3. redirect to logon form
4. check if the user exists in database
yes -> new customIdentiy (IsAuthenticated = true), new customPrincipal
(roles from database)
no -> securityexception or redirect

The problem is, if I use Windows-Authentication I may not change
Principal(?), if I use Forms-Authentication I cannot get the windows-user
from step 1 (?)
--
Regards, InspektorDerrick

[Paul Glavich [MVP ASP.NET]]

This might help. Similar scenario to yours. A little different but the
technique can still apply.

[url]http://aspalliance.com/553[/url]


--

- Paul Glavich
ASP.NET MVP
ASPInsider ([url]www.aspinsiders.com[/url])


"InspektorDerrick" <inspektor.derrick@kstp.at> wrote in message
news:6A26C79B-432F-4CF9-8754-DF5641E10A6E@microsoft.com...

> Hi,
>
> I'm new in ASP.NET and I've got a question about authentication in an
> intranet application:
>
> I want to authentify and authorize the user by a database. Authentication
> should work like this:
>
> 1. evaluate the windows username
> 2. check if user exists in database
> yes -> new customIdentiy (IsAuthenticated = true), new customPrincipal
> (roles from database)
> no -> 3.
> 3. redirect to logon form
> 4. check if the user exists in database
> yes -> new customIdentiy (IsAuthenticated = true), new customPrincipal
> (roles from database)
> no -> securityexception or redirect
>
> The problem is, if I use Windows-Authentication I may not change
> Principal(?), if I use Forms-Authentication I cannot get the windows-user
> from step 1 (?)
> --
> Regards, InspektorDerrick

[Peng Jie]

you can authenticate against the Active Directory by using Forms.

try the link below:

[url]http://support.microsoft.com/?id=316748[/url]


"InspektorDerrick" wrote:

> Hi,
>
> I'm new in ASP.NET and I've got a question about authentication in an
> intranet application:
>
> I want to authentify and authorize the user by a database. Authentication
> should work like this:
>
> 1. evaluate the windows username
> 2. check if user exists in database
> yes -> new customIdentiy (IsAuthenticated = true), new customPrincipal
> (roles from database)
> no -> 3.
> 3. redirect to logon form
> 4. check if the user exists in database
> yes -> new customIdentiy (IsAuthenticated = true), new customPrincipal
> (roles from database)
> no -> securityexception or redirect
>
> The problem is, if I use Windows-Authentication I may not change
> Principal(?), if I use Forms-Authentication I cannot get the windows-user
> from step 1 (?)
> --
> Regards, InspektorDerrick