Re: How do I give ASP.NET process network credentials?

From: Joseph Geretz (jgeretz@nospam.com)
Date: 10/30/02 

From: "Joseph Geretz" <jgeretz@nospam.com>
Date: Wed, 30 Oct 2002 10:26:10 -0500

Hi Paul,

> Ok, I solved my problem by taking a different approach. After doing
> some more reading I figured that I had to use Delegation in order to
> access the file on the other box, which was more then I really needed

I've been thinking about this. Perhaps It's my ignorance about how the OS
deals with mapped network drives, but I've been thinking that I wouldn't
need delegation in order to access a file from a network share. After all,
the folder 'looks' local right? Perhaps this is a bit naive on my part. I'll
look into this a bit more.

> to do. So instead I went into IIS and changed the Anonymous user to a
> network user created with the network rights (and only the network
> rights) that I needed and I grabbed the file(s) with no problems.

That alternative would be more attractive to me IF the server would be
dedicated exclusively to this this particular web application. But this
deployment scenario can't be guaranteed. I definitely don't want all
anonymous accessors of all web sites to have network credentials.

> I never did get the network token created.

Me neither. :-(

Not yet anyway, I'm still working on it...

- Joe Geretz -

Relevant Pages

  • Re: access to network file server through web server denied
    ... Before I check with the network team to ... see whether the network has been configured with "Delegation", ... On our local developer's web server (It can be IIS 5 on Windows XP ...
    (microsoft.public.inetserver.iis.security)
  • Re: Listing files on network share
    ... If delegation isn't working in your environment, ... One solution is to run the ASPNET worker process under a domain ... network hop. ... >a network shre be displayed on the site. ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: LsaLogonUser - access to network resources
    ... target services must be specified. ... setting in AD U&C and you must configure constrained delegation. ... > and I managed to get access to the same network resources using ... > logon on that machine (Ctrl-Ald-Del and logon as domain user with the same ...
    (microsoft.public.platformsdk.security)
  • Re: Troubleshoot Security Issues
    ... You can put a trace on the network -or- you can dump out all the values ... NTLM then NTLM was used. ... impersonate="true"> and set authentication to Windows then it should ... I'm trying to set up a delegation secnario, ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: impersonate/delegate problem
    ... you don't have delegation so I'm not sure if you have ... > webserver from within AD users and computers) to pass the ... > on our production network. ... > request process from ...
    (microsoft.public.dotnet.framework.aspnet.security)
Quantcast