473,324 Members | 2,567 Online
Bytes | Software Development & Data Engineering Community
Post Job

Home Posts Topics Members FAQ

Join Bytes to post your question to a community of 473,324 software developers and data experts.

Windows Domain Authentication

Dear All

Newbie question here. i design form to take input from
user(username,password). How do i autheticate if the user is Windows Domain
user and once it has authenticated successfully, how do i forward to the
success page.

Any help would be appreciated.

Regards

Zille.
Jul 19 '05 #1
5 6928
Don't use a form, just use Windows Authentication on the application/site.

You can't take a plain text password from a form, and "check" it against
Windows Authentication, AFAIK. This would be a *H*U*G*E* security hole.

--
Aaron Bertrand
SQL Server MVP
http://www.aspfaq.com/


"Zille Hassan" <zh*****@umg.com.sa> wrote in message
news:e9**************@TK2MSFTNGP11.phx.gbl...
Dear All

Newbie question here. i design form to take input from
user(username,password). How do i autheticate if the user is Windows Domain user and once it has authenticated successfully, how do i forward to the
success page.

Any help would be appreciated.

Regards

Zille.

Jul 19 '05 #2
You could use ADSI to do it...

Cheers
Ken
"Aaron Bertrand [MVP]" <aa***@TRASHaspfaq.com> wrote in message
news:%2****************@TK2MSFTNGP10.phx.gbl...
: Don't use a form, just use Windows Authentication on the application/site.
:
: You can't take a plain text password from a form, and "check" it against
: Windows Authentication, AFAIK. This would be a *H*U*G*E* security hole.
:
: --
: Aaron Bertrand
: SQL Server MVP
: http://www.aspfaq.com/
:
:
:
:
: "Zille Hassan" <zh*****@umg.com.sa> wrote in message
: news:e9**************@TK2MSFTNGP11.phx.gbl...
: > Dear All
: >
: > Newbie question here. i design form to take input from
: > user(username,password). How do i autheticate if the user is Windows
: Domain
: > user and once it has authenticated successfully, how do i forward to the
: > success page.
: >
: > Any help would be appreciated.
: >
: > Regards
: >
: > Zille.
: >
: >
:
:
Jul 19 '05 #3
But how do i do it, i am really new to ASP. do i have to enable Windows
authentication from the IIS admin.

and how do i store the username and password taken from the user in session
variables

"Zille Hassan" <zh*****@umg.com.sa> wrote in message
news:e9**************@TK2MSFTNGP11.phx.gbl...
Dear All

Newbie question here. i design form to take input from
user(username,password). How do i autheticate if the user is Windows Domain user and once it has authenticated successfully, how do i forward to the
success page.

Any help would be appreciated.

Regards

Zille.

Jul 19 '05 #4
> and how do i store the username and password taken from the user in
session
variables


I hope that even through ADSI this is impossible. A programmer should never
be able to have access to Windows passwords, for reasons that should be
obvious.

--
Aaron Bertrand
SQL Server MVP
http://www.aspfaq.com/
Jul 19 '05 #5
On Mon, 1 Dec 2003 08:38:18 +0300, "Zille Hassan" <zh*****@umg.com.sa>
wrote:
But how do i do it, i am really new to ASP. do i have to enable Windows
authentication from the IIS admin.
Take a look at:

http://www.iisfaq.com/default.aspx?View=P78&P=145
and how do i store the username and password taken from the user in session
variables
Don't ever store the password in a session variable. You could set a
session variable for "Logged In" but with Windows authentication
there's no real reason to (at least that my feeble little mind can
come up with at the moment...). Windows knows whether you're logged
in or not.

Jeff
"Zille Hassan" <zh*****@umg.com.sa> wrote in message
news:e9**************@TK2MSFTNGP11.phx.gbl...
Dear All

Newbie question here. i design form to take input from
user(username,password). How do i autheticate if the user is Windows

Domain
user and once it has authenticated successfully, how do i forward to the
success page.

Any help would be appreciated.

Regards

Zille.


Jul 19 '05 #6

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

5
by: John | last post by:
I am creating an application that I would like to have the user type in their User ID, password and domain, and it do Windows Authentication to verify they are a valid user. Can someone provide...
1
by: Mark | last post by:
When our staff are logged into a computer on our domain, they're still prompted for their domain login and password to get into our ASP.NET application in Internet Explorer when using Windows...
2
by: Joseph Geretz | last post by:
I'm having a credentialing problem in my web application. Actually, I don't think this is an IIS security issue, since I'm able to access the page I'm requesting. However, the executing page itself...
4
by: Andrew | last post by:
Hey all, I would like to preface my question by stating I am still learning ASP.net and while I am confident in the basics and foundation, the more advanced stuff is still a challenge. Ok....
8
by: Nils Magnus Englund | last post by:
Hello, I am having trouble using Integrated Windows Authentication between our intranet server and our database server, both of which are on our local domain. Windows authentication works for...
10
by: Hriday | last post by:
Hi there, Please help me..It is urgent This is Hriday, working on windows authentication with Active Directory... My requirment is when a user sends a request to my web Applicatoin I want to...
7
by: Alice Wong | last post by:
I am setting up my Web ASP.net application to connect to Sql server using windows authentication. I set up IIS to have integrated windows authenication and sql to allow Windows authentication....
4
by: Gav | last post by:
Hi, I am writing a windows form application (C#) which access's data from an SQL server. The SQL server is using windows authentication only. At the moment I have to grant the domain users...
3
by: =?Utf-8?B?RGFuZGFuIFpoYW5n?= | last post by:
Now I have a web application, a web service and a SQL Server database. The Web application will invoke the web service, the web service invokes the SQL Server stored procedure. I let the web...
6
by: =?Utf-8?B?UGFyYWcgR2Fpa3dhZA==?= | last post by:
Hi All, We have a requirement where we have to develop a custom Login Page which will accept user's NT credentials ( Username , password, domain name). This then needs to be passed to a website...
0
by: ryjfgjl | last post by:
ExcelToDatabase: batch import excel into database automatically...
1
isladogs
by: isladogs | last post by:
The next Access Europe meeting will be on Wednesday 6 Mar 2024 starting at 18:00 UK time (6PM UTC) and finishing at about 19:15 (7.15PM). In this month's session, we are pleased to welcome back...
0
by: Vimpel783 | last post by:
Hello! Guys, I found this code on the Internet, but I need to modify it a little. It works well, the problem is this: Data is sent from only one cell, in this case B5, but it is necessary that data...
0
by: ArrayDB | last post by:
The error message I've encountered is; ERROR:root:Error generating model response: exception: access violation writing 0x0000000000005140, which seems to be indicative of an access violation...
1
by: PapaRatzi | last post by:
Hello, I am teaching myself MS Access forms design and Visual Basic. I've created a table to capture a list of Top 30 singles and forms to capture new entries. The final step is a form (unbound)...
1
by: Defcon1945 | last post by:
I'm trying to learn Python using Pycharm but import shutil doesn't work
0
by: af34tf | last post by:
Hi Guys, I have a domain whose name is BytesLimited.com, and I want to sell it. Does anyone know about platforms that allow me to list my domain in auction for free. Thank you
0
by: Faith0G | last post by:
I am starting a new it consulting business and it's been a while since I setup a new website. Is wordpress still the best web based software for hosting a 5 page website? The webpages will be...
0
isladogs
by: isladogs | last post by:
The next Access Europe User Group meeting will be on Wednesday 3 Apr 2024 starting at 18:00 UK time (6PM UTC+1) and finishing by 19:30 (7.30PM). In this session, we are pleased to welcome former...

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.