473,763 Members | 6,666 Online
Bytes | Software Development & Data Engineering Community
+ Post

Home Posts Topics Members FAQ

Q: Using the "Windows" Authentication method in With ASP.NET 2.0

Hi!

I have been struggeling with this Windows, Authentication method for a
while, and i am beginning to give up.

So a couple of questions that you guys probably have the answer on.

1. One should add the user to the Active Directory, right?
2. Could i use the Login components to validate the user? (Studio 2005)
3. Do i have to specify every user in the Web.Config?

Finaly, perheps there is a link to a great site that explains it so even a
dummy like me would understand it :D

Regards
Martin
Nov 23 '05 #1
2 1273

Użytkownik "Visual Systems AB (Martin Arvidsson)"
<ma************ **@vsab.net> napisał w wiadomości
news:eJ******** ******@TK2MSFTN GP12.phx.gbl...
Hi!

I have been struggeling with this Windows, Authentication method for a
while, and i am beginning to give up.

So a couple of questions that you guys probably have the answer on.

1. One should add the user to the Active Directory, right?
you can log as an Active Directory user or as a machine user. remember to
turn off anonymous access in application's configuration and choose one of
three authentication methods (basic, ..., integrated).
2. Could i use the Login components to validate the user? (Studio 2005)
yes you can but I belive that you will have to write your own code that
validates user's credentials against the Active Directory in the
OnAuthenticate handler of the Login component.

below link will explain to you how to authenticate users against AD:
http://msdn.microsoft.com/library/en...l/secmod16.asp
3. Do i have to specify every user in the Web.Config?
no, you do not have to.
Finaly, perheps there is a link to a great site that explains it so even a
dummy like me would understand it :D


you could start with reading the free book "Building Secure ASP.NET
applications:
http://msdn.microsoft.com/library/de...l/secmod16.asp

regards,
Wiktor Zychla
Nov 23 '05 #2
Adding to Wiktor's advice with ASP.NET 2.0
try going through this blog at:-
http://blogs.msdn.com/gduthie/archiv...17/452905.aspx
Its much more easier now that v.1.1
So enjoy:)
Patrick

"Wiktor Zychla [C# MVP]" <wzychla_ii.uni .wroc.pl> wrote in message
news:#S******** ******@TK2MSFTN GP09.phx.gbl...

Użytkownik "Visual Systems AB (Martin Arvidsson)"
<ma************ **@vsab.net> napisał w wiadomości
news:eJ******** ******@TK2MSFTN GP12.phx.gbl...
Hi!

I have been struggeling with this Windows, Authentication method for a
while, and i am beginning to give up.

So a couple of questions that you guys probably have the answer on.

1. One should add the user to the Active Directory, right?
you can log as an Active Directory user or as a machine user. remember to
turn off anonymous access in application's configuration and choose one of
three authentication methods (basic, ..., integrated).
2. Could i use the Login components to validate the user? (Studio 2005)


yes you can but I belive that you will have to write your own code that
validates user's credentials against the Active Directory in the
OnAuthenticate handler of the Login component.

below link will explain to you how to authenticate users against AD:
http://msdn.microsoft.com/library/en...l/secmod16.asp
3. Do i have to specify every user in the Web.Config?


no, you do not have to.
Finaly, perheps there is a link to a great site that explains it so even a dummy like me would understand it :D


you could start with reading the free book "Building Secure ASP.NET
applications:

http://msdn.microsoft.com/library/de...us/secmod/html
/secmod16.asp
regards,
Wiktor Zychla

Nov 24 '05 #3

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

5
1774
by: John | last post by:
I am creating an application that I would like to have the user type in their User ID, password and domain, and it do Windows Authentication to verify they are a valid user. Can someone provide me with any assistance on this by sample code, or a pointer to a site that goes over this? Thanks. JR
3
4641
by: Reza | last post by:
Hello I tried this friday, but didn't get anywhere so trying again Basically, I have a fixed list of people that can access the application in the Intranet, and with the policy of the company the Users can be created only with Windows authentication in SQL Server - with SQL server authentication have no problem So every time I try to connect get the error message, "Login failed for user, 'username'. I have also tried windows authentication...
1
5124
by: Marlon | last post by:
I got the error message below when I try to open a connection with code: Dim connection As New OdbcConnection("Driver={Microsoft Text Driver (*.txt; *.csv)};DBQ=C:\Inetpub\aesd") connection.Open() I am developing an asp.net application on Windows XP SP2 using Windows authentication and impersonation. Can anyone help? Personal I think it is because of a permissions/security problem
0
1245
by: Fabrício de Novaes Kucinskis | last post by:
Hi all, My ASP.net application uses Windows Authentication. When using Forms Authentication, if the session expires, the common thing to do is to redirect the user to the login page again. But what to do when using Windows Authentication? Thanks in advance,
3
2391
by: ATS | last post by:
HOWTO Post to a URL from Server Side ASP script. Please help, I'm trying to make a simple ASP page post to a URL on a seperate web site, and then get the returned HTML into a string which on service side script I can then parse. Is there any object built into IIS or Microsoft I could use Server.CreateObject with to make this possible?
0
1167
by: Pete | last post by:
I have a web asp.net 1.1 app that is using Windows Authentication on an Apache server. I cannot connect across the Intranet to another network even though there is a 'TRUST' setup between the network the server is on and the one I am trying to connect to. Do I still need to use impersonation within the web.config to gain access OR Is there some other way to allow the connection.
0
1018
by: Pete | last post by:
I am using windows authentication in Apache to access the web page - work Ok but I need to use this authentication, username and password to access an external network to get some data. How do I extract the username and password from the windows authentication ( for a user) and then use this access the external network. I prefer not to use impersonation as the username and password are in the web.config. Would prefer to use the users...
6
2365
by: Matt Adamson | last post by:
Guys, I'm unsure how to use windows authentication in an intranet application. I'd like to user existing windows account to identify users however the issue I have is how to then add settings to those users and map them to roles. If I'd like to restrict the windows users which log on and what tasks they can perform in the application how should I do this? Presumably I'd need one user to log in initially and perform admin type tasks...
3
3575
by: =?Utf-8?B?QnJpYW4gTmljaG9sc29u?= | last post by:
I'm building a test web application that, when run, will launch calc.exe on my computer. It seems to work as it appears in Windows Task Manager; however, the process doesn't actually pop up because it runs as ASPNET rather than the user I want. When having to run ASP.NET as another user (e.g. when doing AD queries), I was able to use IIS Windows Authentication and impersonation. These are still enabled, but they don't seem to be helping....
2
5706
by: fairbanj | last post by:
I am using Windows Authentication and I am trying to determine how to swap users (like when a supervisor needs to temporarily boost the priviledges of a session by logging into his own account and then punting back) I am trying to do this by adding a LinkButton that does the following: Response.StatusCode = 401; Response.End(); This *works* but it pops up the login screen 3 times before it settles down with the new credentials...
0
9387
by: Hystou | last post by:
Most computers default to English, but sometimes we require a different language, especially when relocating. Forgot to request a specific language before your computer shipped? No problem! You can effortlessly switch the default language on Windows 10 without reinstalling. I'll walk you through it. First, let's disable language synchronization. With a Microsoft account, language settings sync across devices. To prevent any complications,...
0
10148
Oralloy
by: Oralloy | last post by:
Hello folks, I am unable to find appropriate documentation on the type promotion of bit-fields when using the generalised comparison operator "<=>". The problem is that using the GNU compilers, it seems that the internal comparison operator "<=>" tries to promote arguments from unsigned to signed. This is as boiled down as I can make it. Here is my compilation command: g++-12 -std=c++20 -Wnarrowing bit_field.cpp Here is the code in...
0
10002
jinu1996
by: jinu1996 | last post by:
In today's digital age, having a compelling online presence is paramount for businesses aiming to thrive in a competitive landscape. At the heart of this digital strategy lies an intricately woven tapestry of website design and digital marketing. It's not merely about having a website; it's about crafting an immersive digital experience that captivates audiences and drives business growth. The Art of Business Website Design Your website is...
0
9823
tracyyun
by: tracyyun | last post by:
Dear forum friends, With the development of smart home technology, a variety of wireless communication protocols have appeared on the market, such as Zigbee, Z-Wave, Wi-Fi, Bluetooth, etc. Each protocol has its own unique characteristics and advantages, but as a user who is planning to build a smart home system, I am a bit confused by the choice of these technologies. I'm particularly interested in Zigbee because I've heard it does some...
1
7368
isladogs
by: isladogs | last post by:
The next Access Europe User Group meeting will be on Wednesday 1 May 2024 starting at 18:00 UK time (6PM UTC+1) and finishing by 19:30 (7.30PM). In this session, we are pleased to welcome a new presenter, Adolph Dupré who will be discussing some powerful techniques for using class modules. He will explain when you may want to use classes instead of User Defined Types (UDT). For example, to manage the data in unbound forms. Adolph will...
0
6643
by: conductexam | last post by:
I have .net C# application in which I am extracting data from word file and save it in database particularly. To store word all data as it is I am converting the whole word file firstly in HTML and then checking html paragraph one by one. At the time of converting from word file to html my equations which are in the word document file was convert into image. Globals.ThisAddIn.Application.ActiveDocument.Select();...
0
5270
by: TSSRALBI | last post by:
Hello I'm a network technician in training and I need your help. I am currently learning how to create and manage the different types of VPNs and I have a question about LAN-to-LAN VPNs. The last exercise I practiced was to create a LAN-to-LAN VPN between two Pfsense firewalls, by using IPSEC protocols. I succeeded, with both firewalls in the same network. But I'm wondering if it's possible to do the same thing, with 2 Pfsense firewalls...
1
3917
by: 6302768590 | last post by:
Hai team i want code for transfer the data from one system to another through IP address by using C# our system has to for every 5mins then we have to update the data what the data is updated we have to send another system
2
3528
muto222
by: muto222 | last post by:
How can i add a mobile payment intergratation into php mysql website.

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.