Windows Authentication

[Nick Wright]

Hi

I'm trying to implement a forms based NT authentication mechanisum..

I've managed this for Windows 2000 / NT users, XP users.... but sadly not fo
9x users i.e. Windows 95 and Windows 98 / ME users...

I'm after the user logging into a web based server application with their Windows Username & Password, this information is then authneticated and the user then connects to a portal application ( implementing single sign on...!

However all 95 / 98 and ME users don't get authenticated..

I'm using the LogonUser AP

How might I implement this...

Regards

[Todd Evans via .NET 247]

How do you create a Windows Authenticated Ticket using FormsAuthentication. Microsoft states that it is possible, but Ihaven't figured out how? Or more simpliar, how can you programmatically create a Windows Authenticated Ticket to beused by all pages with in the site?
There is not much documentation on AuthenticationManager.
--------------------------------
From: Todd Evans

-----------------------
Posted by a user from .NET 247 ([url]http://www.dotnet247.com/[/url])

<Id>paOfxZCM00aU1YinUyOJSg==</Id>

[David Coe, MCP]

Check out the IPrincipal and IIdentity classes. You may also want to check out the blog posting at [url]http://blogs.msdn.com/dansellers/archive/2004/03/13/89203.aspx[/url].

[MB]

I've got the following settings in my web.config file which is working
properly, however my users want to see the login prompt each time the
visit the site. Is there a setting or code that I can impliment so
that users are prompted upon each visit?

<authentication mode="Windows">
</authentication>
<identity impersonate="false" />
<authorization>
<allow roles="domain\xxx1, domain\xxx2"
users="domain\user1, domain\user2" />
<deny users="*"/>
</authorization>


Thanks in advance,
Mike.

[Joe Kaplan \(MVP - ADSI\)]

If you use Basic authentication, you will always get prompted (make sure you
combine that with SSL if you do). If you use Integrated auth, then the
prompt will be based on your IE settings. IE can be set to always prompt,
or send the current user's credentials automatically. If you use group
policy in your organization, I believe you can control this browser setting
with that.

Joe K.

"MB" <mikebanks@clearchannel.com> wrote in message
news:f3f8a088.0409161339.7dd0893f@posting.google.c om...

> I've got the following settings in my web.config file which is working
> properly, however my users want to see the login prompt each time the
> visit the site. Is there a setting or code that I can impliment so
> that users are prompted upon each visit?
>
> <authentication mode="Windows">
> </authentication>
> <identity impersonate="false" />
> <authorization>
> <allow roles="domain\xxx1, domain\xxx2"
> users="domain\user1, domain\user2" />
> <deny users="*"/>
> </authorization>
>
>
> Thanks in advance,
> Mike.

[Ken Schaefer]

Here's a list of conditions that must be met for IE to auto-logon (the
defaults):
[url]http://support.microsoft.com/?id=258063[/url]

So, you could change IE's settings, you could get your users to use the FQDN
or IP address of the server, use Basic or Digest authentication etc.

Cheers
Ken


"MB" <mikebanks@clearchannel.com> wrote in message
news:f3f8a088.0409161339.7dd0893f@posting.google.c om...

> I've got the following settings in my web.config file which is working
> properly, however my users want to see the login prompt each time the
> visit the site. Is there a setting or code that I can impliment so
> that users are prompted upon each visit?
>
> <authentication mode="Windows">
> </authentication>
> <identity impersonate="false" />
> <authorization>
> <allow roles="domain\xxx1, domain\xxx2"
> users="domain\user1, domain\user2" />
> <deny users="*"/>
> </authorization>
>
>
> Thanks in advance,
> Mike.

[simonlevey]

Guys,

Have a major problem with a portal that I am working on. I am using
Windows Authentication with Custom Roles (Stored in SQL backend). If I
want to add/remove a user/group or change a user's role, I have to
restart the IIS service before it is applied. As soon as the IIS
service restarts the user takes on this new role. Is there any way
around this?

Hope so.

Simon



--
simonlevey
------------------------------------------------------------------------
Posted via [url]http://www.codecomments.com[/url]
------------------------------------------------------------------------

[Dominick Baier [DevelopMentor]]

Hello simonlevey,

how do you attach the roles to the Prinicpal object?

---------------------------------------
Dominick Baier - DevelopMentor
[url]http://www.leastprivilege.com[/url]

> Guys,
>
> Have a major problem with a portal that I am working on. I am using
> Windows Authentication with Custom Roles (Stored in SQL backend). If I
> want to add/remove a user/group or change a user's role, I have to
> restart the IIS service before it is applied. As soon as the IIS
> service restarts the user takes on this new role. Is there any way
> around this?
>
> Hope so.
>
> Simon
>
> --
> simonlevey
> ----------------------------------------------------------------------
> --
> Posted via [url]http://www.codecomments.com[/url]
> ----------------------------------------------------------------------
> --

[simonlevey]

Hi,

I have edited the global.asax to retrieve the users/roles from a SQL
table. These are placed in a hashtable. I have then used the
WindowsAuthentication_Authenticate sub to assign a new GenericPrincipal
to the users....

I have done some more testing today and have found that the user
changes will actually apply if you wait long enough. I have not found
out how long this is but it appears to be an hour or so. I have
attached a copy of the global.asax.vb file that I have used.

If you could have a look I would be really gratefull.


+----------------------------------------------------------------+
| Attachment filename: global.asax.vb.txt |
|Download attachment: [url]http://www.codecomments.com/attachment.php?postid=1622993[/url] |
+----------------------------------------------------------------+


--
simonlevey
------------------------------------------------------------------------
Posted via [url]http://www.codecomments.com[/url]
------------------------------------------------------------------------