Re: Can I pass ASP Basic Auth Credentials to an APS.NET Forms Authentication site?

From: Douglas J. Badin (DJBadin_at_NOSPAM.msn.com)
Date: 01/26/04

  • Next message: Steve: "Network Credentials not passing in Authentication mode" 
    Date: Mon, 26 Jan 2004 08:58:11 -0500

    Hi Yanhong Huang,

    You understand correctly.

    The database of usernames and password is SQL Server and you are correct in
    assuming I can get the Username and Password.

    Your idea sounds interesting. I will have to check it out. The only
    concern I have is that it will be a cross-domain cookie. Site A and N are
    two different boxes in different locations. Right now I redirect to the IP
    of Site N.

    Thanks,

    Doug

    "Yan-Hong Huang[MSFT]" <yhhuang@online.microsoft.com> wrote in message
    news:Dg$BY874DHA.568@cpmsftngxa07.phx.gbl...
    > Hello Douglas,
    >
    > Thanks for posting in the group.
    >
    > Based on my understanding, now the question is: You have one asp
    > application which uses basic authentication and one asp.net applicaiton
    > which uses forms authentication. The user ID and password database is the
    > same for these two web applications. Now, - User Logs in to Site A (ASP)
    by
    > using user name and passoword, Site A redirects the User to Site N
    > (ASP.NET). Can Site A programitically pass the credentials, UserID and
    > Password, to
    > Site N so the user does not have to logon a second time? Please correct me
    > if I have misunderstood anything.
    >
    > Here I thought of a method. Since we are using basic authentication in
    Site
    > A (ASP), so we can get username and password in ASP web application first
    > and store it in the cookie. When the Site A redirectes users to Site N
    > (ASP.NET), it will redirect to forms authentication auto-login page. In
    the
    > Page_Load of that page, we can fetch the user name and password from
    cookie
    > and authenticate the user programmatically. So the client doesn't need to
    > input username and password again.
    >
    > Does that answer your question? If there is any unclear, please feel free
    > to post here.
    >
    > Ps: In ASP programming, if we use basic authentication, we can only use
    > username and password in NT domain. What database do you mean in the
    > sentence "The ASP site A uses Basic Authentication and has the user enter
    a
    > UserID and Password that are Authenticated against a database."? Do you
    > mean authenticate the user name and password in NT domain?
    >
    > Best regards,
    > Yanhong Huang
    > Microsoft Community Support
    >
    > Get Secure! ¨C www.microsoft.com/security
    > This posting is provided "AS IS" with no warranties, and confers no
    rights.
    >

  • Next message: Steve: "Network Credentials not passing in Authentication mode"

    Relevant Pages

    • Re: vb & mssql apps : security issue
      ... So use Windows Authentication rather than SQL Authentication to give the ... >>> You could have the password an encryption of the username. ... So if the username is stored in your database and it isn't ...
      (microsoft.public.sqlserver.security)
    • Re: ASP Login Script not working
      ... Here is a pretty good code solution, however it uses sql server as the backend. ... Don't use a DNS connection...rather use an absolute path to the database. ... I'm sure if I were more knowledgeable with ASP I would do just that, but alas I'm not and your reply helps me little ... created a small Access database called UserDB.mdb, which stores the username ...
      (microsoft.public.inetserver.asp.db)
    • Re: ASP Login Script not working
      ... I'm sure if I were more knowledgeable with ASP I would do just that, but alas I'm not and your reply helps me little ... I am trying to protect a portion of a web site by allowing users to register ... created a small Access database called UserDB.mdb, which stores the username ...
      (microsoft.public.inetserver.asp.db)
    • Can connect to sqlexpress via asp.net but not via asp
      ... I can connect to a sqlexpress database using aspx pages ... Both the asp and aspx pages are within ... The sqlexpress database is also on the same server. ... including dsn, dsn-less, windows authentication, sql authentication ...
      (microsoft.public.sqlserver.connect)
    • IIS7: cannot access a database from a page with authentication on local webserver
      ... I have an .ASP page that requires authentication. ... I enabled Windows Authentication in IIS Manager> Authentication. ... For the database, I successfully completed the solutions and workaround in KB article at ... Microsoft JET Database Engine error '80004005' ...
      (microsoft.public.inetserver.iis.security)