Authentication question

From: Boyan Dimitrov (boyan@netagesolutions.com)
Date: 11/06/02 

From: "Boyan Dimitrov" <boyan@netagesolutions.com>
Date: Wed, 6 Nov 2002 15:45:52 +0200

Hi,

I'm developing an intranet application using asp.net. I have a web service
and a client. I use window authentication for logging. Here is a sample
code:

srvcProtocol srvc = new srvcProtocol();

if ( ! srvc.VerifyUser( User.Identity.Name ) )

{

text1.Text = "User was not verified !";

}

VerifyUser routines compares domain name account value with a field of my
db. If such value exists in the DB user is authenticated.

Here is what I cann't do. If authorization fails I want an authentication
header "WWW-authenticate" to be displayed. This header has two edit boxes
and allows to the user to log with different domain account. This header is
the same dialog that widows dispays when a user tries to connect to the
computer in the net on which currently is logged somebody else.

For example on machine
"Test1" NTUSER\test1 is logged. Now NTUSER\test2 comes to his machine.
NTUSER\test2 needs access to his c disk on machine "Test2". So he wirtes in
windows explorer:

Test2\c$

So if NTUSER\test1 rights are insuficient an authorization dialog box is
displayed. I want to show this authorization box in my intranet application
in same circumstances.

10x in advance
Boyan

Relevant Pages

  • Re: HTTP_AUTHORIZATION header
    ... authentication sequence. ... this in your setup by directly accessing the CGI EXE a couple of timems. ... i.e. the HTTP_AUTHORIZATION header gets sent every time ... I use WFetch to make a Basic authenticated POST request against my CGI ...
    (microsoft.public.inetserver.iis.security)
  • Re: Urgent - need help with logging anonymous and Active Dir users without login form
    ... networks behind the same firewall. ... automatically logged in to our intranet in. ... forms authentication for everything. ... the user back to the page the access which initiated the login request. ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Constant Password Authentication
    ... domain and server name in the URL. ... confirm that the same authentication methods are checkmarked as compared to ... Within our organisation there are staff who are ... > Up until recently a company that has had access to our intranet had been ...
    (microsoft.public.inetserver.iis.security)
  • Re: Accessing Authenticate Header
    ... .NET HTTPModule receives request from client on the BeginRequest event, ... HTTP_AUTHORIZATION header is not included on the HTTPRequest because IIS ... > 1) IIS configuration for anonymous access ONLY (NO Basic Authentication) ... > 3) Handler or Module reads the AUTHORIZATION header and authenticates ...
    (microsoft.public.dotnet.security)
  • Re: Accessing Authenticate Header
    ... IIS configuration for anonymous access ONLY (NO Basic Authentication) ... Handler or Module reads the AUTHORIZATION header and authenticates ...
    (microsoft.public.dotnet.security)