Verifying the password

[Bevo]

We are developing a desktop application for a customer (VS 2003). The
customer wants us to retrieve the Windows logon information from Active
Directory, then ask the user to verify his password and then assure that this
password is the same as the one given when doing Windows logon. This must be
done before starting the app.

I wonder: whats the best way to accomplish this?

Thanks!

[Dincer Uyav]

You can call the unmanaged Windows api function "LogonUser" to check user's
credentials. But this function supported by NT SP3 or higher clients.

Regards,

Dincer Uyav
di********@tekn ainternational. net

"Bevo" wrote:

We are developing a desktop application for a customer (VS 2003). The
customer wants us to retrieve the Windows logon information from Active
Directory, then ask the user to verify his password and then assure that this
password is the same as the one given when doing Windows logon. This must be
done before starting the app.

I wonder: whats the best way to accomplish this?

Thanks!

[Ollie Riches]

First off question about AD are better answered by the 2 Joe's in the
following newsgroup:

microsoft.publi c.adsi.general

But there are several ways to achieve what you want, you can use unmanaged
code via the win32 api 'LogonUser' or you can use the DirectoryServic es
namespace.

Using the DirectoryServic es namespace you could do something like this:
{
...
DirectoryEntry de = new DirectoryEntry( );

// example LDAP string 'LDAP://CN=Users;DC=myd omain;DC=net'

de.Path = LDAP://CN=Users;DC=DOM AINNAME;DC=DOMA INSUFFIX;
de.Username = @"USERNAME";
de.Password = "PASSWORD";
string nativeGuid = de.NativeGuid;

...
}

When the call to 'de.NativeGuid' is made if the username or password are
invalid an exception will be thrown.

Have a look at this:

http://www.c-sharpcorner.com/Code/20.../ADand.NET.asp

HTH

Ollie Riches


"Bevo" <Be**@discussio ns.microsoft.co m> wrote in message
news:00******** *************** ***********@mic rosoft.com...

We are developing a desktop application for a customer (VS 2003). The
customer wants us to retrieve the Windows logon information from Active
Directory, then ask the user to verify his password and then assure that
this
password is the same as the one given when doing Windows logon. This must
be
done before starting the app.

I wonder: whats the best way to accomplish this?

Thanks!

[Vadym Stetsyak]

you can use System.Director yServices;

/// <summary>
/// AuthenticationT ypes specifying the security
/// protocol to use, i.e. Secure, SSL
/// </summary>
private AuthenticationT ypes atAuthentType;
using(Directory Entry deDirEntry = new DirectoryEntry( strDomain,
strUser,
strPass,
atAuthentType))

{
// if user is verified then it will welcome then
try
{
MessageBox.Show ("Welcome");
// TODO: add your specific tasks here
}
catch (Exception exp)
{
MessageBox.Show ("Sorry, unable to verify your information");
}
}

--
Vadym Stetsyak aka Vadmyst
http://vadmyst.blogspot.com
"Dincer Uyav" <Di********@dis cussions.micros oft.com> wrote in message
news:40******** *************** ***********@mic rosoft.com...

You can call the unmanaged Windows api function "LogonUser" to check user's credentials. But this function supported by NT SP3 or higher clients.

Regards,

Dincer Uyav
di********@tekn ainternational. net

"Bevo" wrote:

We are developing a desktop application for a customer (VS 2003). The
customer wants us to retrieve the Windows logon information from Active
Directory, then ask the user to verify his password and then assure that this password is the same as the one given when doing Windows logon. This must be done before starting the app.

I wonder: whats the best way to accomplish this?

Thanks!

[Leticia Chinen]

hello!

I need to do you exactly the same, but using ASP, does anybody can help me?

tks!
LetÃ*cia
"Ollie Riches" wrote:

First off question about AD are better answered by the 2 Joe's in the
following newsgroup:

microsoft.publi c.adsi.general

But there are several ways to achieve what you want, you can use unmanaged
code via the win32 api 'LogonUser' or you can use the DirectoryServic es
namespace.

Using the DirectoryServic es namespace you could do something like this:
{
...
DirectoryEntry de = new DirectoryEntry( );

// example LDAP string 'LDAP://CN=Users;DC=myd omain;DC=net'

de.Path = LDAP://CN=Users;DC=DOM AINNAME;DC=DOMA INSUFFIX;
de.Username = @"USERNAME";
de.Password = "PASSWORD";
string nativeGuid = de.NativeGuid;

...
}

When the call to 'de.NativeGuid' is made if the username or password are
invalid an exception will be thrown.

Have a look at this:

http://www.c-sharpcorner.com/Code/20.../ADand.NET.asp

HTH

Ollie Riches


"Bevo" <Be**@discussio ns.microsoft.co m> wrote in message
news:00******** *************** ***********@mic rosoft.com...

We are developing a desktop application for a customer (VS 2003). The
customer wants us to retrieve the Windows logon information from Active
Directory, then ask the user to verify his password and then assure that
this
password is the same as the one given when doing Windows logon. This must
be
done before starting the app.

I wonder: whats the best way to accomplish this?

Thanks!

[Ollie Riches]

what you could do is create a .Net aasembly that does all your
authentication to AD in C# and then call this from classic ASP. To do this
you have to get .NET to generate a TLB library for your the .NET class. In
Vs.NET, you can modify the current build profile and set the "Register for
COM Interop" property to true.

http://www.csharphelp.com/archives/archive190.html
http://support.microsoft.com/?kbid=302901

HTH

Ollie Riches

"Leticia Chinen" <Leticia Ch****@discussi ons.microsoft.c om> wrote in message
news:87******** *************** ***********@mic rosoft.com...

hello!

I need to do you exactly the same, but using ASP, does anybody can help
me?

tks!
Letícia
"Ollie Riches" wrote:

First off question about AD are better answered by the 2 Joe's in the
following newsgroup:

microsoft.publi c.adsi.general

But there are several ways to achieve what you want, you can use
unmanaged
code via the win32 api 'LogonUser' or you can use the DirectoryServic es
namespace.

Using the DirectoryServic es namespace you could do something like this:
{
...
DirectoryEntry de = new DirectoryEntry( );

// example LDAP string 'LDAP://CN=Users;DC=myd omain;DC=net'

de.Path = LDAP://CN=Users;DC=DOM AINNAME;DC=DOMA INSUFFIX;
de.Username = @"USERNAME";
de.Password = "PASSWORD";
string nativeGuid = de.NativeGuid;

...
}

When the call to 'de.NativeGuid' is made if the username or password are
invalid an exception will be thrown.

Have a look at this:

http://www.c-sharpcorner.com/Code/20.../ADand.NET.asp

HTH

Ollie Riches


"Bevo" <Be**@discussio ns.microsoft.co m> wrote in message
news:00******** *************** ***********@mic rosoft.com...

> We are developing a desktop application for a customer (VS 2003). The
> customer wants us to retrieve the Windows logon information from Active
> Directory, then ask the user to verify his password and then assure
> that
> this
> password is the same as the one given when doing Windows logon. This
> must
> be
> done before starting the app.
>
> I wonder: whats the best way to accomplish this?
>
> Thanks!

[Ollie Riches]

There isn't a license requirement for .Net as such (i.e. it is shipped with
the current windows OS's), you only need a license for Visual Studio .Net
which is the development tool form MS. You can of course use a free
development tool for .Net.

HTH

Ollie Riches

"Leticia Chinen" <Le***********@ discussions.mic rosoft.com> wrote in message
news:1E******** *************** ***********@mic rosoft.com...

hi Ollie!!!

I can´t use your solution because here in the company we don´t have .NET
license. But I found an ASP solution.

If it is interesting for someone, there is a link with an example:
http://www.4guysfromrolla.com/webtech/061202-1.shtml

bye
Leticia

"Ollie Riches" wrote:

what you could do is create a .Net aasembly that does all your
authentication to AD in C# and then call this from classic ASP. To do
this
you have to get .NET to generate a TLB library for your the .NET class.
In
Vs.NET, you can modify the current build profile and set the "Register
for
COM Interop" property to true.

http://www.csharphelp.com/archives/archive190.html
http://support.microsoft.com/?kbid=302901

HTH

Ollie Riches

"Leticia Chinen" <Leticia Ch****@discussi ons.microsoft.c om> wrote in
message
news:87******** *************** ***********@mic rosoft.com...

> hello!
>
> I need to do you exactly the same, but using ASP, does anybody can help
> me?
>
> tks!
> Letícia
>
>
> "Ollie Riches" wrote:
>
>> First off question about AD are better answered by the 2 Joe's in the
>> following newsgroup:
>>
>> microsoft.publi c.adsi.general
>>
>> But there are several ways to achieve what you want, you can use
>> unmanaged
>> code via the win32 api 'LogonUser' or you can use the
>> DirectoryServic es
>> namespace.
>>
>> Using the DirectoryServic es namespace you could do something like
>> this:
>> {
>> ...
>> DirectoryEntry de = new DirectoryEntry( );
>>
>> // example LDAP string 'LDAP://CN=Users;DC=myd omain;DC=net'
>>
>> de.Path = LDAP://CN=Users;DC=DOM AINNAME;DC=DOMA INSUFFIX;
>> de.Username = @"USERNAME";
>> de.Password = "PASSWORD";
>> string nativeGuid = de.NativeGuid;
>>
>> ...
>> }
>>
>> When the call to 'de.NativeGuid' is made if the username or password
>> are
>> invalid an exception will be thrown.
>>
>> Have a look at this:
>>
>> http://www.c-sharpcorner.com/Code/20.../ADand.NET.asp
>>
>> HTH
>>
>> Ollie Riches
>>
>>
>>
>>
>> "Bevo" <Be**@discussio ns.microsoft.co m> wrote in message
>> news:00******** *************** ***********@mic rosoft.com...
>> > We are developing a desktop application for a customer (VS 2003).
>> > The
>> > customer wants us to retrieve the Windows logon information from
>> > Active
>> > Directory, then ask the user to verify his password and then assure
>> > that
>> > this
>> > password is the same as the one given when doing Windows logon. This
>> > must
>> > be
>> > done before starting the app.
>> >
>> > I wonder: whats the best way to accomplish this?
>> >
>> > Thanks!
>>
>>
>>