Authentication not mapping domain user to local windows group

howard dierking

Hi,

I am using local windows groups as roles in an asp.net application. In my
web.config file, I have the following:

<authenticati on mode="Windows" />
<authorizatio n>
<allow roles="localmac hinename\OOK_CD D" />
<deny users="*" />
</authorization>

The problem is that when I launch the application, a challenge response box
is brought up, even though I have impersonation turned on and have anonymous
access disabled in my virtual directory options. If I type in my qualified
domain name and password, I can get to the application and everything works
fine. However, I can't figure out why either my network credentials are not
being passed to the application (I think that they are) or my authentication
evidence (domain) cannot be mapped to local windows groups.

Thoughts??

tia,

_howard

Nov 19 '05 #1

Subscribe Reply

1510

David Jessee

I just had a thought.....
does this happen when you do
http://localhost/app
and also when you use your machine name?
and when you use a fully qualified machine name? i.e. machinename.ara mco.com

"howard dierking" <ho************ @discussions.mi crosoft.com> wrote in
message news:F0******** *************** ***********@mic rosoft.com...

Hi,

I am using local windows groups as roles in an asp.net application. In my
web.config file, I have the following:

<authenticati on mode="Windows" />
<authorizatio n>
<allow roles="localmac hinename\OOK_CD D" />
<deny users="*" />
</authorization>

The problem is that when I launch the application, a challenge response box is brought up, even though I have impersonation turned on and have anonymous access disabled in my virtual directory options. If I type in my qualified domain name and password, I can get to the application and everything works fine. However, I can't figure out why either my network credentials are not being passed to the application (I think that they are) or my authentication evidence (domain) cannot be mapped to local windows groups.

Thoughts??

tia,

_howard

Nov 19 '05 #2

Similar topics

2256

Authentication and custom errors

by: Mark Aurit | last post by:

I have an intranet application that uses w2k Integrated Windows Authentication to authenticate users. We now have a situation where people will be accessing it who are on our network but will not be logged into w2k - so now they are challenged and fail the challenge. To handle that situation I plan to use iis custom errors with one of the 401 codes to redirect the user to a generic page. The problem is that I cant figure out how to...

ASP / Active Server Pages

1649

Portal Starter Kit authentication

by: .net user | last post by:

can some one point me what i'm doing wrong? I have spent half a day figuring out and totally stuck now. Here's what I'm trying to accomplish: I am writing a web appl - an intranet portal site (based on the portal starter kit) and I want to apply role based security to the site. - When the users type in the intranet URL, a windows logon window would pop up and then users login with their NT credentials. Based upon theie level of security...

ASP.NET

1664

IIS6 and Windows Authentication

by: Sam | last post by:

We have a small ASP.Net app that serves only a specific department. We would like to use windows authentication and only allow the dept folks access the web app. Use IIS6, Windows 2003, a member server of AD domain. Now, we dont want to use IP address based auth. The dept has a group created in local machine as well as in the AD. we dont want anyone besides that group (department) access the app. What is the best way to get...

ASP.NET

7720

Authentication between windows application and SQL server

by: Gav | last post by:

Hi, I am writing a windows form application (C#) which access's data from an SQL server. The SQL server is using windows authentication only. At the moment I have to grant the domain users access to the database for the application to work. However, the database includes information that I need to hide from the users, currently the application is taking care of that. There is nothing stopping the users from accessing the database in a...

.NET Framework

3443

Authentication in Windows XP Pro

by: Kofa | last post by:

Hi, I cannot create/drop databases from the command line, only from the GUI. Below is a detailed description of my installation and configuration attempts (sorry about the long post). I'm usually logged on to my PC as a domain user, IBE\ikovacs. As IBE\ikovacs, I'm member of my PC's Administrators group. There's also a local user Administrator, who's the default Windows admin user. I used that account (using runas) to install DB2...

DB2 Database

12776

Windows authentication/impersonation.. login failed for user null?

by: Not Me | last post by:

Hey, We have an sql server 2000 machine and IIS 6 machine running seperately but on the same domain. I can connect fine to the database without using impersonation, but when it's enabled I get the error: "Login failed for user '(null)'. Reason: Not associated with a trusted SQL Server connection." When I check System.Security.Principal.WindowsIdentity.GetCurrent().Name I get the valid domain user that I would expect, why isn't this...

ASP.NET

7595

NTLM authentication

by: webrod | last post by:

Dear All, let's say I have a web service. I would like to authenticate users who try to access it. I am on a winnt server so I will have to use NTLM but I don't want to use IIS settings. Is there a way to authenticate a user using WSE 3.0 against NTLM?? All the samples I have found on the web provide a solution based on

C# / C Sharp

7518

client authentication

by: Frank Swarbrick | last post by:

I am trying to understand "client authentication" works. My environment is DB2/UDB LUW 8.2 on zSeries SLES9 as the database server and DB2 for VSE 7.4 as the client. We currently have DB2/LUW set up as follows: Client Userid-Password Plugin (CLNT_PW_PLUGIN) = Client Kerberos Plugin (CLNT_KRB_PLUGIN) = Group Plugin (GROUP_PLUGIN) = GSS Plugin for Local Authorization ...

DB2 Database

1506

Authorization using Windows Authentication

by: DK | last post by:

I have an intranet application I've built using asp.net 3.5 / running on IIS6 I want to use BUILTIN groups on the server that contain domain users. So I set up my web.config like so for example: <authorization> <allow roles="BUILTIN\Intranet_Admin"/>   <deny users="*"/>

ASP.NET

8984

What is ONU?

by: marktang | last post by:

ONU (Optical Network Unit) is one of the key components for providing high-speed Internet services. Its primary function is to act as an endpoint device located at the user's premises. However, people are often confused as to whether an ONU can Work As a Router. In this blog post, we’ll explore What is ONU, What Is Router, ONU & Router’s main usage, and What is the difference between ONU and Router. Let’s take a closer look ! Part I. Meaning of...

General

9530

Problem With Comparison Operator <=> in G++

by: Oralloy | last post by:

Hello folks, I am unable to find appropriate documentation on the type promotion of bit-fields when using the generalised comparison operator "<=>". The problem is that using the GNU compilers, it seems that the internal comparison operator "<=>" tries to promote arguments from unsigned to signed. This is as boiled down as I can make it. Here is my compilation command: g++-12 -std=c++20 -Wnarrowing bit_field.cpp Here is the code in...

C / C++

9312

The easy way to turn off automatic updates for Windows 10/11

by: Hystou | last post by:

Overview: Windows 11 and 10 have less user interface control over operating system update behaviour than previous versions of Windows. In Windows 11 and 10, there is no way to turn off the Windows Update option using the Control Panel or Settings app; it automatically checks for updates and installs any it finds, whether you like it or not. For most users, this new feature is actually very convenient. If you want to control the update process,...

Windows Server

6793

Access Europe - Using VBA to create a class based on a table - Wed 1 May

by: isladogs | last post by:

The next Access Europe User Group meeting will be on Wednesday 1 May 2024 starting at 18:00 UK time (6PM UTC+1) and finishing by 19:30 (7.30PM). In this session, we are pleased to welcome a new presenter, Adolph Dupré who will be discussing some powerful techniques for using class modules. He will explain when you may want to use classes instead of User Defined Types (UDT). For example, to manage the data in unbound forms. Adolph will...

Microsoft Access / VBA

4593

Trying to create a lan-to-lan vpn between two differents networks

by: TSSRALBI | last post by:

Hello I'm a network technician in training and I need your help. I am currently learning how to create and manage the different types of VPNs and I have a question about LAN-to-LAN VPNs. The last exercise I practiced was to create a LAN-to-LAN VPN between two Pfsense firewalls, by using IPSEC protocols. I succeeded, with both firewalls in the same network. But I'm wondering if it's possible to do the same thing, with 2 Pfsense firewalls...

Networking - Hardware / Configuration

4864

Windows Forms - .Net 8.0

by: adsilva | last post by:

A Windows Forms form does not have the event Unload, like VB6. What one acts like?

Visual Basic .NET

3300

transfer the data from one system to another through ip address

by: 6302768590 | last post by:

Hai team i want code for transfer the data from one system to another through IP address by using C# our system has to for every 5mins then we have to update the data what the data is updated we have to send another system

C# / C Sharp

2775

How to add payments to a PHP MySQL app.

by: muto222 | last post by:

How can i add a mobile payment intergratation into php mysql website.

PHP

2206

Comprehensive Guide to Website Development in Toronto: Expert Insights from BSMN Consultancy

by: bsmnconsultancy | last post by:

In today's digital era, a well-designed website is crucial for businesses looking to succeed. Whether you're a small business owner or a large corporation in Toronto, having a strong online presence can significantly impact your brand's success. BSMN Consultancy, a leader in Website Development in Toronto offers valuable insights into creating effective websites that not only look great but also perform exceptionally well. In this comprehensive...

General