Re: How to log out when in windows authentication?

From: Arild Bakken (arildb_@hotmail.com)
Date: 07/19/02 

From: "Arild Bakken" <arildb_@hotmail.com>
Date: Fri, 19 Jul 2002 09:48:54 +0200

Hi,

Well... the problem is that the client (IE) caches the username and
password. There is a trick you could look into (we've done this in regular
ASP once).

The client (IE) caches the username and password based on the realm that the
HTTP401.2 (or whatever it is) sends out. By overriding the realm (you'll
need to intercept that IIS output on this one) you can change the realm name
(like send a GUID) whenever a new session is started. That way the client
will not treat this as the same site and will not send the cached
credentials.

I'm not quite sure if this applies only to Basic authentication or Windows
integrated authentication though.

Arild

"Philo" <philo@saintchad.maps.org> wrote in message
news:Xns924FD630A95F2philosaintchadmapsor@216.148.53.93...
> Is there any way to log a user out of an aspx page when using Windows
> standard authentication? (other than close the browser)
>
> Thanks,
> Philo

Relevant Pages

  • Re: Smartcard authentication in a multi-tier application
    ... side where the user enters the username and password and on the server ... implementation as we need the domain username and password of the PIN- ... since SC authentication on the Windows client results in a Kerberos ... bootstrapped a secure authentication mechanism using Kerb and PKInit ...
    (microsoft.public.platformsdk.security)
  • Re: UsernameTokenManager.AuthenticateUser
    ... That happens because you are using secure session. ... WSE only authenticates the client the first ... authentication and the key interchange is done once. ... > I'm currently using username over certificate with secure session. ...
    (microsoft.public.dotnet.framework.webservices.enhancements)
  • RE: Internet Authentication
    ... the domain which has access to the internet through the ISA server. ... client tries to connect to the Internet via the ISA server, ... it will prompt for a username and a password, at that case the user can ... authentication to computers which are NOT attached to the domain? ...
    (microsoft.public.isa.clients)
  • UsernameTokenManager.AuthenticateUser
    ... I'm currently using username over certificate with secure session. ... Also calling SetClientCredential from the client with a new UsernameToken ... doesn't cause a re-authentication. ... I assume this is by design and that the authentication is being cached. ...
    (microsoft.public.dotnet.framework.webservices.enhancements)
  • Re: Windows Authentication, Single sign on and Active Directory
    ... service proxy client fails to connect due to authentication failure and then ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ... The server is always in the domain. ...
    (microsoft.public.dotnet.framework.aspnet.security)
Loading