Authenticating againts localhost (and another question)

From: Michal Januszczyk (anonymous_at_discussions.microsoft.com)
Date: 02/25/04 

Date: Wed, 25 Feb 2004 05:46:09 -0800

Is there any way to avoid {password being sent in clear text} when using forms authentication, without encrypting entire channel with SSL ?. I want to encrypt just password, nothing more. Is it possible ?

And question nr 2:
Where can i find information on authenticating users agains localhost windows accounts?
I'm developing an application that uses forms authentication, and when {username,passwor} pair
does not match any one from database, I would like to give the pair {username,password} another
try by checking in localsystem, whether there is such a user with matching password. How to do this ?
I found some examples on the web, but they were related to authernticating agains Active Directory.

Thanks for help
Michal Januszczyk

Relevant Pages

  • Re: Into the Fire
    ... One side can easily avoid encrypting with the same segment of ... the keystream twice. ... and authentication. ... use it to properly encrypt and sign a shorter message of his ...
    (sci.crypt)
  • Re: encrypted integrity check = authentication ?
    ... My authentication value is the encrypted sha1with key K ... Encrypting hashes is not a good way to ensure integrity or authentication. ... (Only Alice and I know the secret key. ... I would never create a MAC tag on this message. ...
    (sci.crypt)
  • Re: Wireless security client
    ... x509 PKI for authentication (both the server and the client authenticate ... OpenSSL's EVP for encrypting they data and HMAC-SHA1 for authenticating the ...
    (alt.internet.wireless)
  • Re: Mixed Mode Authentication in .net 2.0
    ... There are two parts to SSL, which is why this can be confusing. ... encryption and authentication of the server. ... ADFS supports a component called the federation service proxy which is ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Search not working
    ... Management>Authentication Providers>Edit Authentication, does not provide the ... ability to indicate whether the web application is using SSL or not. ... I changed IIS Authentication for the web site back to Integrated ... I have installed an SSL certificate and required SSL ...
    (microsoft.public.sharepoint.windowsservices)