Forms Authentication and Active Directory

[- Steve -]

I have forms based authentication working, using my Active Directory for
authentication.

I have a web page that creates a user in active directory. When I was using
IIS authentication it worked fine, now it doesn't. I'm assuming it's
running in the context of the IIS anonymous user. How can I get it to run
as the user that logged in with the forms based authentication?

--

Steve Evans
Email Services
SDSU Foundation
[phone]

[Raterus]

Here is how you will need to do it, scroll down to "Impersonat e a Specific User in Code"

http://support.microsoft.com/default...b;en-us;306158
--Michael

"- Steve -" <se****@foundat ion.sdsu.edu> wrote in message news:OB******** ******@TK2MSFTN GP09.phx.gbl...

I have forms based authentication working, using my Active Directory for
authentication.

I have a web page that creates a user in active directory. When I was using
IIS authentication it worked fine, now it doesn't. I'm assuming it's
running in the context of the IIS anonymous user. How can I get it to run
as the user that logged in with the forms based authentication?

--

Steve Evans
Email Services
SDSU Foundation
[phone]

[- Steve -]

That appears to be what I want to do.

I'm implementing the "Impersonat e the Authenticating User in Code" and I
have one small problem.

The second line of code is (this is in C#)
impersonationCo ntext =
((System.Securi ty.Principal.Wi ndowsIdentity)U ser.Identity).I mpersonate();

What the heck is User.Identity? I can't find the type or namespace? Is
this simply the username that is logged in. Should I be using
HttpContext.Cur rent.User.Ident ity.Name
--

Steve Evans
Email Services
SDSU Foundation
[phone]
"Raterus" <ra*****@spam.o rg> wrote in message
news:uC******** ******@tk2msftn gp13.phx.gbl...
Here is how you will need to do it, scroll down to "Impersonat e a Specific
User in Code"

http://support.microsoft.com/default...b;en-us;306158
--Michael

"- Steve -" <se****@foundat ion.sdsu.edu> wrote in message
news:OB******** ******@TK2MSFTN GP09.phx.gbl...

I have forms based authentication working, using my Active Directory for
authentication.

I have a web page that creates a user in active directory. When I was using IIS authentication it worked fine, now it doesn't. I'm assuming it's
running in the context of the IIS anonymous user. How can I get it to run
as the user that logged in with the forms based authentication?

--

Steve Evans
Email Services
SDSU Foundation
[phone]

[Raterus]

I think you are looking at the wrong example, you're looking at code for IIS authenticated users, not Forms Authenticated users. You'd essentially be impersonating the already impersonated user! That line of code you mentioned is equilavent to <identity impersonate="tr ue"> in web.config, and yes User.Identity is HttpContext.Cur rent.User.Ident ity.

But none of that really matters for Forms Authentication. For you, you need to scroll down to the little bit more messy code, "Impersonat e a Specific User in Code". You'll have the username/password they used to log onto your website, so just plug it in and have at it.

--Michael

"- Steve -" <se****@foundat ion.sdsu.edu> wrote in message news:eZ******** ******@TK2MSFTN GP09.phx.gbl...

That appears to be what I want to do.

I'm implementing the "Impersonat e the Authenticating User in Code" and I
have one small problem.

The second line of code is (this is in C#)
impersonationCo ntext =
((System.Securi ty.Principal.Wi ndowsIdentity)U ser.Identity).I mpersonate();

What the heck is User.Identity? I can't find the type or namespace? Is
this simply the username that is logged in. Should I be using
HttpContext.Cur rent.User.Ident ity.Name


--

Steve Evans
Email Services
SDSU Foundation
[phone]


"Raterus" <ra*****@spam.o rg> wrote in message
news:uC******** ******@tk2msftn gp13.phx.gbl...
Here is how you will need to do it, scroll down to "Impersonat e a Specific
User in Code"

http://support.microsoft.com/default...b;en-us;306158
--Michael

"- Steve -" <se****@foundat ion.sdsu.edu> wrote in message
news:OB******** ******@TK2MSFTN GP09.phx.gbl...

I have forms based authentication working, using my Active Directory for
authentication.

I have a web page that creates a user in active directory. When I was

using

IIS authentication it worked fine, now it doesn't. I'm assuming it's
running in the context of the IIS anonymous user. How can I get it to run
as the user that logged in with the forms based authentication?

--

Steve Evans
Email Services
SDSU Foundation
[phone]

[- Steve -]

Well I can get there username with HttpContexct.Cu rrent.User.Iden tity.Name,
but how can I get their password? Remember I'm using forms based
authentication against my AD. If I can read their password somehow in plain
text then I'm home free. I had it in plain text back at the logon.aspx
page, but is there a safe way to send that over to another page or store it
somewhere that I can retrieve?

--

Steve Evans
Email Services
SDSU Foundation
[phone]
"Raterus" <ra*****@spam.o rg> wrote in message
news:%2******** ********@tk2msf tngp13.phx.gbl. ..
I think you are looking at the wrong example, you're looking at code for IIS
authenticated users, not Forms Authenticated users. You'd essentially be
impersonating the already impersonated user! That line of code you
mentioned is equilavent to <identity impersonate="tr ue"> in web.config, and
yes User.Identity is HttpContext.Cur rent.User.Ident ity.

But none of that really matters for Forms Authentication. For you, you need
to scroll down to the little bit more messy code, "Impersonat e a Specific
User in Code". You'll have the username/password they used to log onto your
website, so just plug it in and have at it.

--Michael

"- Steve -" <se****@foundat ion.sdsu.edu> wrote in message
news:eZ******** ******@TK2MSFTN GP09.phx.gbl...

That appears to be what I want to do.

I'm implementing the "Impersonat e the Authenticating User in Code" and I
have one small problem.

The second line of code is (this is in C#)
impersonationCo ntext =
((System.Securi ty.Principal.Wi ndowsIdentity)U ser.Identity).I mpersonate();

What the heck is User.Identity? I can't find the type or namespace? Is
this simply the username that is logged in. Should I be using
HttpContext.Cur rent.User.Ident ity.Name
--

Steve Evans
Email Services
SDSU Foundation
[phone]
"Raterus" <ra*****@spam.o rg> wrote in message
news:uC******** ******@tk2msftn gp13.phx.gbl...
Here is how you will need to do it, scroll down to "Impersonat e a Specific
User in Code"

http://support.microsoft.com/default...b;en-us;306158
--Michael

"- Steve -" <se****@foundat ion.sdsu.edu> wrote in message
news:OB******** ******@TK2MSFTN GP09.phx.gbl...

I have forms based authentication working, using my Active Directory for
authentication.

I have a web page that creates a user in active directory. When I was

using

IIS authentication it worked fine, now it doesn't. I'm assuming it's
running in the context of the IIS anonymous user. How can I get it to run as the user that logged in with the forms based authentication?

--

Steve Evans
Email Services
SDSU Foundation
[phone]

[- Steve -]

Oh also I tried to use the Authenticating User in Code section and where I
was having troubles compiling I simply but
HttpContexct.Cu rrent.User.Iden tity. It compiled fine but during runtime I'm
told that it's an invalid cast.

--

Steve Evans
Email Services
SDSU Foundation
[phone]
"Raterus" <ra*****@spam.o rg> wrote in message
news:%2******** ********@tk2msf tngp13.phx.gbl. ..
I think you are looking at the wrong example, you're looking at code for IIS
authenticated users, not Forms Authenticated users. You'd essentially be
impersonating the already impersonated user! That line of code you
mentioned is equilavent to <identity impersonate="tr ue"> in web.config, and
yes User.Identity is HttpContext.Cur rent.User.Ident ity.

But none of that really matters for Forms Authentication. For you, you need
to scroll down to the little bit more messy code, "Impersonat e a Specific
User in Code". You'll have the username/password they used to log onto your
website, so just plug it in and have at it.

--Michael

"- Steve -" <se****@foundat ion.sdsu.edu> wrote in message
news:eZ******** ******@TK2MSFTN GP09.phx.gbl...

That appears to be what I want to do.

I'm implementing the "Impersonat e the Authenticating User in Code" and I
have one small problem.

The second line of code is (this is in C#)
impersonationCo ntext =
((System.Securi ty.Principal.Wi ndowsIdentity)U ser.Identity).I mpersonate();

What the heck is User.Identity? I can't find the type or namespace? Is
this simply the username that is logged in. Should I be using
HttpContext.Cur rent.User.Ident ity.Name
--

Steve Evans
Email Services
SDSU Foundation
[phone]
"Raterus" <ra*****@spam.o rg> wrote in message
news:uC******** ******@tk2msftn gp13.phx.gbl...
Here is how you will need to do it, scroll down to "Impersonat e a Specific
User in Code"

http://support.microsoft.com/default...b;en-us;306158
--Michael

"- Steve -" <se****@foundat ion.sdsu.edu> wrote in message
news:OB******** ******@TK2MSFTN GP09.phx.gbl...

I have forms based authentication working, using my Active Directory for
authentication.

I have a web page that creates a user in active directory. When I was

using

IIS authentication it worked fine, now it doesn't. I'm assuming it's
running in the context of the IIS anonymous user. How can I get it to run as the user that logged in with the forms based authentication?

--

Steve Evans
Email Services
SDSU Foundation
[phone]

[Raterus]

Save their password in the session right after they log in, it's safe there.

"- Steve -" <se****@foundat ion.sdsu.edu> wrote in message news:Ol******** ********@tk2msf tngp13.phx.gbl. ..

Well I can get there username with HttpContexct.Cu rrent.User.Iden tity.Name,
but how can I get their password? Remember I'm using forms based
authentication against my AD. If I can read their password somehow in plain
text then I'm home free. I had it in plain text back at the logon.aspx
page, but is there a safe way to send that over to another page or store it
somewhere that I can retrieve?

--

Steve Evans
Email Services
SDSU Foundation
[phone]


"Raterus" <ra*****@spam.o rg> wrote in message
news:%2******** ********@tk2msf tngp13.phx.gbl. ..
I think you are looking at the wrong example, you're looking at code for IIS
authenticated users, not Forms Authenticated users. You'd essentially be
impersonating the already impersonated user! That line of code you
mentioned is equilavent to <identity impersonate="tr ue"> in web.config, and
yes User.Identity is HttpContext.Cur rent.User.Ident ity.

But none of that really matters for Forms Authentication. For you, you need
to scroll down to the little bit more messy code, "Impersonat e a Specific
User in Code". You'll have the username/password they used to log onto your
website, so just plug it in and have at it.

--Michael

"- Steve -" <se****@foundat ion.sdsu.edu> wrote in message
news:eZ******** ******@TK2MSFTN GP09.phx.gbl...

That appears to be what I want to do.

I'm implementing the "Impersonat e the Authenticating User in Code" and I
have one small problem.

The second line of code is (this is in C#)
impersonationCo ntext =
((System.Securi ty.Principal.Wi ndowsIdentity)U ser.Identity).I mpersonate();

What the heck is User.Identity? I can't find the type or namespace? Is
this simply the username that is logged in. Should I be using
HttpContext.Cur rent.User.Ident ity.Name
--

Steve Evans
Email Services
SDSU Foundation
[phone]
"Raterus" <ra*****@spam.o rg> wrote in message
news:uC******** ******@tk2msftn gp13.phx.gbl...
Here is how you will need to do it, scroll down to "Impersonat e a Specific
User in Code"

http://support.microsoft.com/default...b;en-us;306158
--Michael

"- Steve -" <se****@foundat ion.sdsu.edu> wrote in message
news:OB******** ******@TK2MSFTN GP09.phx.gbl...

I have forms based authentication working, using my Active Directory for
authentication.

I have a web page that creates a user in active directory. When I was

using

IIS authentication it worked fine, now it doesn't. I'm assuming it's
running in the context of the IIS anonymous user. How can I get it to run as the user that logged in with the forms based authentication?

--

Steve Evans
Email Services
SDSU Foundation
[phone]

[- Steve -]

Now you've got me confused.

Over at the logon.aspx.cs I can access tbPassword.Text and get the plaint
text password.

Now I can store that in viewstate in logon.aspx.cs but then how would I
access it over at my createAccount.a spx.cs file?

Thanks for all the help by the way.

--

Steve Evans
Email Services
SDSU Foundation
[phone]
"Raterus" <ra*****@spam.o rg> wrote in message
news:OE******** ******@tk2msftn gp13.phx.gbl...
Save their password in the session right after they log in, it's safe there.

"- Steve -" <se****@foundat ion.sdsu.edu> wrote in message
news:Ol******** ********@tk2msf tngp13.phx.gbl. ..

Well I can get there username with HttpContexct.Cu rrent.User.Iden tity.Name, but how can I get their password? Remember I'm using forms based
authentication against my AD. If I can read their password somehow in plain text then I'm home free. I had it in plain text back at the logon.aspx
page, but is there a safe way to send that over to another page or store it somewhere that I can retrieve?

--

Steve Evans
Email Services
SDSU Foundation
[phone]
"Raterus" <ra*****@spam.o rg> wrote in message
news:%2******** ********@tk2msf tngp13.phx.gbl. ..
I think you are looking at the wrong example, you're looking at code for IIS authenticated users, not Forms Authenticated users. You'd essentially be
impersonating the already impersonated user! That line of code you
mentioned is equilavent to <identity impersonate="tr ue"> in web.config, and yes User.Identity is HttpContext.Cur rent.User.Ident ity.

But none of that really matters for Forms Authentication. For you, you need to scroll down to the little bit more messy code, "Impersonat e a Specific
User in Code". You'll have the username/password they used to log onto your website, so just plug it in and have at it.

--Michael

"- Steve -" <se****@foundat ion.sdsu.edu> wrote in message
news:eZ******** ******@TK2MSFTN GP09.phx.gbl...

That appears to be what I want to do.

I'm implementing the "Impersonat e the Authenticating User in Code" and I
have one small problem.

The second line of code is (this is in C#)
impersonationCo ntext =
((System.Securi ty.Principal.Wi ndowsIdentity)U ser.Identity).I mpersonate();

What the heck is User.Identity? I can't find the type or namespace? Is
this simply the username that is logged in. Should I be using
HttpContext.Cur rent.User.Ident ity.Name
--

Steve Evans
Email Services
SDSU Foundation
[phone]
"Raterus" <ra*****@spam.o rg> wrote in message
news:uC******** ******@tk2msftn gp13.phx.gbl...
Here is how you will need to do it, scroll down to "Impersonat e a Specific User in Code"

http://support.microsoft.com/default...b;en-us;306158
--Michael

"- Steve -" <se****@foundat ion.sdsu.edu> wrote in message
news:OB******** ******@TK2MSFTN GP09.phx.gbl...

I have forms based authentication working, using my Active Directory for authentication.

I have a web page that creates a user in active directory. When I was

using

IIS authentication it worked fine, now it doesn't. I'm assuming it's
running in the context of the IIS anonymous user. How can I get it to

run as the user that logged in with the forms based authentication?

--

Steve Evans
Email Services
SDSU Foundation
[phone]