Form Authentication with Remote Login.aspx

From: Beginner (bzhang_at_hotmail.com)
Date: 02/28/04 

Date: Sat, 28 Feb 2004 10:41:46 -0500

I know this is an old question, but searching all over the internet plus
several MS security conferences, still haven't got a straight anwser.

Basically, the login.aspx is on one dedicated server in the domain using AD.
ASP.NET applications run on other servers (not neccessary in domain) and
trying to use authentication server. How could this be done?

- Most response says you need to set MachineKey the same, but that doesn't
seem to work
- There's one article says the login.aspx needs to set a third-party cookie
for the requester in order for them to retrieve (sounds reasonable, any
examples?) Any workaround if not so sure about browser privacy settings?
- Can I use Server.Transfer to pass the cookie/ticket/principal to the
request page? Is that safe?

Anyway, the goal is have a central .NET based form authentication for all
our intra-net web applications.

Thanks.

Relevant Pages

  • Re: Samba HOWTO
    ... but I see no reason why eCS or Warp Server ... OS/2 LAN Requester initialization file ... 9 buffer small read and write requests until the buffer is full ... Acknowledgment Timeout ...
    (comp.os.linux.networking)
  • Re: Pathsend API for Java
    ... When a request to a server class has more than 32K of data in the response, ... Pathsend with the client returning the positioning information to a server ... one server class process and a requester, until all of the response is ...
    (comp.sys.tandem)
  • [SLE] Re: Samba HOWTO
    ... OS/2 side is warp 4.52, but I see no reason why eCS or Warp Server ... OS/2 LAN Requester initialization file ... 9 buffer small read and write requests until the buffer is full ...
    (SuSE)
  • Re: PATHWAY problem
    ... This is incorrect design. ... You *must* wait until the server finishes processing ... the request before replying to the requester. ... is available for another transaction, when in fact it is NOT ready. ...
    (comp.sys.tandem)
  • Re: PATHWAY problem
    ... You *must* wait until the server finishes ... it is able to return the data to the same requester that asked for ... In its effects, yes, but in terms of design, no -- this isn't a bug. ... is available for another transaction, when in fact it is NOT ready. ...
    (comp.sys.tandem)