Windows security

From: Boyan Dimitrov (boyan@netagesolutions.com)
Date: 11/01/02 

From: "Boyan Dimitrov" <boyan@netagesolutions.com>
Date: Fri, 1 Nov 2002 14:18:13 +0200

HI,

I'm developing an intranet application using asp.net. I have a web service
and a client. I use window authentication for logging. Here is a sample
code:

srvcProtocol srvc = new srvcProtocol();

if ( ! srvc.VerifyUser( User.Identity.Name ) )

{

text1.Text = "User was not verified !";

}

VerifyUser routines compares domain name account value with a field of my
db. If such value exists in the DB user is authenticated.

Here is what I cann't do. If authorization fails I want an authentication
header "WWW-authenticate" to be displayed. This header has two edit boxes
and allows to the user to log with different domain account.

10x in advance
Boyan

Relevant Pages

  • Re: HTTP_AUTHORIZATION header
    ... authentication sequence. ... this in your setup by directly accessing the CGI EXE a couple of timems. ... i.e. the HTTP_AUTHORIZATION header gets sent every time ... I use WFetch to make a Basic authenticated POST request against my CGI ...
    (microsoft.public.inetserver.iis.security)
  • Re: Accessing Authenticate Header
    ... .NET HTTPModule receives request from client on the BeginRequest event, ... HTTP_AUTHORIZATION header is not included on the HTTPRequest because IIS ... > 1) IIS configuration for anonymous access ONLY (NO Basic Authentication) ... > 3) Handler or Module reads the AUTHORIZATION header and authenticates ...
    (microsoft.public.dotnet.security)
  • Re: Accessing Authenticate Header
    ... IIS configuration for anonymous access ONLY (NO Basic Authentication) ... Handler or Module reads the AUTHORIZATION header and authenticates ...
    (microsoft.public.dotnet.security)
  • Re: Accessing Authenticate Header
    ... >From my experience with building a custom authorization module, ... a basic auth header, parse it and then use the username and password from ... ability to provide authentication services. ... >> of IIS. ...
    (microsoft.public.dotnet.security)
  • Re: IPSec without AH
    ... > header from being modified. ... Another IPSEC protocol ESP (Encrypted ... > problem with NAT traversal. ... encrypting the packet payload, and AH for authentication. ...
    (freebsd-questions)