RE: Intranet Windows Auth and Forms

From: Bassel Tabbara [MSFT] (basselt_at_online.microsoft.com)
Date: 04/26/03

  • Next message: Bassel Tabbara [MSFT]: "RE: Asp.Net "login failed for user 'NT Authority/Network service'"" 
    Date: Sat, 26 Apr 2003 14:55:52 GMT

    Hello Dave
    Basically you will have a page which is configured just for windows
    authentication. .
    >From this page, you can direct the internal user back to the login page to
    create the authentication cookie.

    In the login page, you use a session variable to track if this is the first
    time the user has visited the forms authentication logon page. This will
    provide that the user has been
    already in this page but he had been redirected to the authentication page.
    On the return from the windows
    authentication page, the session will flag if the user has visited the page.
          If Session("BeenHere") = "a" Then
             'If session("NTLM") = "OK" then pass them on through with no
    interaction
             'Otherwise, present some logon function here
          Else
             Session("BeenHere") = "a"
             'use response.redirect to the NTLM page
          End If

    Also, a label will display and a button like this:
             If you get prompted for your user name,
             cancel the dialog and click here: <button>

    The button will submit them back to the same page. This time the session
    variable will exist and we will display some form of logon screen.

    The windows authentication page will have just as a purpose to
    authenticate intranet users. This can be done by using the location
    configuration section which can
    specify which part of the application allow users access to certain part
    of the application.
    This can be better explained using an example.

    Lets say that you have the following application:
    WebApp1
          |
          ------ default.aspx
          |
          ----- page1.aspx
          |
          ----- page2.aspx.

    Part a) and part b) of your requirements can be accomplished using form
    authentication.
    In this sample default.aspx is accessed by all internet users which
    satisfies requirement a).
    Page1.aspx and page2.aspx are accessed by the internet user after being
    authenticated by
    form authentication.

    To achieve this scenario the following configuration must be included in
    the web.config:
    <forms loginUrl="login.aspx" >
       </forms>
         </authentication>
     <authorization>
      <deny users="?"/>
     </authorization>
    <!-- Allow all users to access default.aspx -->
    <location path="default.aspx">
      <system.web>
       <authorization>
        <allow users="*"/>
       </authorization>
      </system.web>
    </location>

    In your login page make sure to redirect him to the original page after
    custom authenticating the user by using
    "System.Web.Security.FormsAuthentication.RedirectFromLoginPage".

    I hope this makes sense. Please let me know if you have questions regarding
    this solution.

    Thanks,
    Bassel Tabbara
    Microsoft, ASP.NET

    This posting is provided "AS IS", with no warranties, and confers no rights.

    --------------------
    | Content-Class: urn:content-classes:message
    | From: "dave" <dy@onlinelg.com>
    | Sender: "dave" <dy@onlinelg.com>
    | Subject: Intranet Windows Auth and Forms
    | Date: Fri, 25 Apr 2003 07:15:19 -0700
    | Lines: 12
    | Message-ID: <071601c30b35$1a2747e0$a301280a@phx.gbl>
    | MIME-Version: 1.0
    | Content-Type: text/plain;
    | charset="iso-8859-1"
    | Content-Transfer-Encoding: 7bit
    | X-Newsreader: Microsoft CDO for Windows 2000
    | X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4910.0300
    | Thread-Index: AcMLNRon+eRMVU+ZQRiL+29mNeWVOQ==
    | Newsgroups: microsoft.public.dotnet.framework.aspnet.security
    | Path: cpmsftngxa06.phx.gbl
    | Xref: cpmsftngxa06.phx.gbl
    microsoft.public.dotnet.framework.aspnet.security:4926
    | NNTP-Posting-Host: TK2MSFTNGXA11 10.40.1.163
    | X-Tomcat-NG: microsoft.public.dotnet.framework.aspnet.security
    |
    | I am in an intranet setting on Windows, however we also
    | have many international offices that are not on windows.
    | They will be hitting the intranet.
    | What I would like to accomplish is to be able to pick up
    | the nt usernames for those individuals that are on
    | windows and for everyone else require them to register on
    | the site for username and password.
    | Does anyone know or have sample code on how this can be
    | accomplished?
    | (via asp.net vb)
    | thx
    | dave
    |

  • Next message: Bassel Tabbara [MSFT]: "RE: Asp.Net "login failed for user 'NT Authority/Network service'""
    • Quantcast