473,837 Members | 1,551 Online
Bytes | Software Development & Data Engineering Community
+ Post

Home Posts Topics Members FAQ

AUTH_USER & LOGON_USER server variables


I apologise that this isn't *specifically* an ASP.NET issue - I will also
post it to the IIS newsgroup - but I thought I'd ask here anyway on the
off-chance that someone may have come across this before...

It's an intranet system written in ASP.NET v1.1 using C#. The site is
running on IIS6 on Win2k3S with all the SPs and patches etc.

The Session_Start interrogates the AUTH_USER server variable to identify the
current user. This is then used to query ActiveDirectory , and the site
dynamically configures itself according to which AD groups the current user
is a member of - fairly standard stuff.

However, one of the users has recently changed her name, let's say from Anne
Smith to Anne Jones. As far as I can tell, this has been changed throughout
ActiveDirectory . The user now logs into her Windows XP desktop as
an********@doma in.com instead of an********@doma in.com.

However, although the LOGON_USER server variable correctly shows her as
DOMAIN\Anne.Jon es, the AUTH_USER server variable still shows her as
DOMAIN\Anne.Smi th - why is this? What / where needs to be changed for the
AUTH_USER server variable to show the new name?

I found the following site:
http://www.codeproject.com/asp/reque..._variables.asp which says that
AUTH_USER is: "The name of the user as it is derived from the authorization
header sent by the client, before the user name is mapped to a Windows
account. This variable is no different from REMOTE_USER. If you have an
authentication filter installed on your Web server that maps incoming users
to accounts, use LOGON_USER to view the mapped user name."

What *actually* is the authorization header which the client is sending, and
where is the old name still coming from?

Any assistance gratefully received.


P.S. the solution is obvious... use LOGON_USER instead of AUTH_USER in
Session_Start - but I'm now curious as to why AUTH_USER is still being
populated with the old name
Jul 26 '06 #1
0 3967

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

by: JZ | last post by:
I am using Webware installed on Windows2000 server and I found I could not find all server variable like PHP could. E.g. Windows2000 server has specific variable LOGON_USER which is set for every logged person. PHP can easy get to this using $_SERVER. I want to do the same with Webware but I do not know how... Only small sets of variables are available for request()._environ variable which I got with the following code (for Webware): ...
by: Maria | last post by:
I'm trying to get the NT login id of a user on a web page without making the user type it into a login box. I'm using the LOGON_USER server variable. The problem is, if the web page allows anonymous access, LOGON_USER returns nothing. If the page is set to Basic Security, the NT login popup box comes up, even though the user is already logged into the network, and HAS access to this page. Moreover, if I try this on my PC instead of our...
by: MeAndI | last post by:
How to everybody, how it is possible to change the value of the AUTH_USER server variable? Is this possible? If no, how I could change the logged user? Thanks for help
by: Ian Staines | last post by:
In asp the following code: Request.Servervarables("AUTH_USER") will return the header variable AUTH_USER In .NET the code Request.Servervariables("AUTH_USER") returns the server variable AUTH_USER, but if you want the header variable you must request it with Request.Headers("AUTH_USER")
by: Dave | last post by:
Hi, I have a dev machine, part of a domain, with a site set to Integrated security only. I want to determine the username of person accessing the page. When I run the page with the following code: Response.Write(Request.ServerVariables); Response.Write("<BR>"); Response.Write(HttpContext.Current.User.Identity.Name);
by: T. | last post by:
Hello, I'm trying to pull the logon user's name using Request.ServerVariables("LOGON_USER")...which is returning nothing...so I need help in determining why it's returning nothing, or I need the format in which it returns the username so that I can hard code it. Does it return anything with the username? Thanks...
by: z f | last post by:
trying to achieve windows authentication on the fly (without the file configured to deny anonymous access in IIS) i returned a 401 status if the Request.ServerVariables("auth_user") = "" this is OK, the 401 status Code returned with additional headers and the browser performed windows authentication and the next time i had auth_user correctly. but after closing the browser and re-opening it and requesting the same page again, i get the...
by: Ryan | last post by:
I am trying to figure out why I am trying to use the result of Request.ServerVariables("LOGON_USER") in a query in my aspx application. I want to use the server variable. When I check the length of the string that this method returns (len(Request.ServerVariables("LOGON_USER")) I get a number that is one greater than the the number of characters that are displaying, which of course causes a problem. Does anyone know why this is and...
by: bhavin30 | last post by:
Is there a way to obtain user information (using LOGON_USER server variables) when you have set up the security to Anonymous Access? I have tried setting the security to both Anonymous + Window Integrated, without any luck. I'm using IIS 6.0 on Windows Server 2003 Thanks in advance!
by: Hystou | last post by:
Most computers default to English, but sometimes we require a different language, especially when relocating. Forgot to request a specific language before your computer shipped? No problem! You can effortlessly switch the default language on Windows 10 without reinstalling. I'll walk you through it. First, let's disable language synchronization. With a Microsoft account, language settings sync across devices. To prevent any complications,...
by: jinu1996 | last post by:
In today's digital age, having a compelling online presence is paramount for businesses aiming to thrive in a competitive landscape. At the heart of this digital strategy lies an intricately woven tapestry of website design and digital marketing. It's not merely about having a website; it's about crafting an immersive digital experience that captivates audiences and drives business growth. The Art of Business Website Design Your website is...
by: Hystou | last post by:
Overview: Windows 11 and 10 have less user interface control over operating system update behaviour than previous versions of Windows. In Windows 11 and 10, there is no way to turn off the Windows Update option using the Control Panel or Settings app; it automatically checks for updates and installs any it finds, whether you like it or not. For most users, this new feature is actually very convenient. If you want to control the update process,...
by: agi2029 | last post by:
Let's talk about the concept of autonomous AI software engineers and no-code agents. These AIs are designed to manage the entire lifecycle of a software development project—planning, coding, testing, and deployment—without human intervention. Imagine an AI that can take a project description, break it down, write the code, debug it, and then launch it, all on its own.... Now, this would greatly impact the work of software developers. The idea...
by: conductexam | last post by:
I have .net C# application in which I am extracting data from word file and save it in database particularly. To store word all data as it is I am converting the whole word file firstly in HTML and then checking html paragraph one by one. At the time of converting from word file to html my equations which are in the word document file was convert into image. Globals.ThisAddIn.Application.ActiveDocument.Select();...
by: TSSRALBI | last post by:
Hello I'm a network technician in training and I need your help. I am currently learning how to create and manage the different types of VPNs and I have a question about LAN-to-LAN VPNs. The last exercise I practiced was to create a LAN-to-LAN VPN between two Pfsense firewalls, by using IPSEC protocols. I succeeded, with both firewalls in the same network. But I'm wondering if it's possible to do the same thing, with 2 Pfsense firewalls...
by: adsilva | last post by:
A Windows Forms form does not have the event Unload, like VB6. What one acts like?
by: 6302768590 | last post by:
Hai team i want code for transfer the data from one system to another through IP address by using C# our system has to for every 5mins then we have to update the data what the data is updated we have to send another system
by: bsmnconsultancy | last post by:
In today's digital era, a well-designed website is crucial for businesses looking to succeed. Whether you're a small business owner or a large corporation in Toronto, having a strong online presence can significantly impact your brand's success. BSMN Consultancy, a leader in Website Development in Toronto offers valuable insights into creating effective websites that not only look great but also perform exceptionally well. In this comprehensive...

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.