Re: Who am I impersonating?

From: Alek Davis (alek_xDOTx_davis_xATx_intel_xDOTx_com)
Date: 02/28/04


Date: Sat, 28 Feb 2004 14:28:06 -0800

Tim,

This is by design (as Aaron described). To summarize, in a typical situation
(integrated authentication), you cannot pass users credentials over one
machine (i.e. from computer A (IE) through server B (ASPX) to server C (SQL
Server/Web Service/etc)), unless you enable Kerberos/delegation on the
network, which is generally not recommended for security reasons.

Alek

"Tim Thacker" <timthacker63@hotmail.com> wrote in message
news:OptxOjX$DHA.624@TK2MSFTNGP11.phx.gbl...
>
> I've got a similar issue and I think I'm running into the same problem.
> I've got a ASPX Page on Server A. Web Service on Server B. I need to
> pass the Windows Creditials through Server A to Server B. I've set the
> Impersonate options, turned on Windows Auth. When I run IE from Server A
> everyhting works fine. Run it from anywhere else and I get Access
> Denied. Is this by design or am I doing something wrong?
>
> Thanks!
> Tim
>
>
> *** Sent via Developersdex http://www.developersdex.com ***
> Don't just participate in USENET...get rewarded for it!



Relevant Pages

  • User autentification and access to "sister" domain resources
    ... I am in process of designing brand new AD structure for our customer. ... 2003 Servers - pretty classic design ... All DCs are Global Catalogs. ... user_from_domainA gets IP address from siteB DHCP server ...
    (microsoft.public.win2000.active_directory)
  • Re: Using SQl to store aspx pages and memory problems
    ... The solution I was looking at would be to create some specific server side ... I want the data to be saved in the page so I thought that a asp.net control ... the original design and one that ensures that future system changes will not ... > database isn't some sort of magic pixie dust that solves all problems. ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Software Testing Tools
    ... you should design and redesign frequently while ... majority of its functionality implemented on the server. ... API for the client such that the UI is an entirely separate component - ... most efficient and reliable way to test the server is not with the GUI ...
    (comp.software.testing)
  • Re: External users vs internal users.
    ... I think I need help with the design full-stop. ... To have Team and Meeting sites available to groups of external users. ... Then you'll need a separate WSS farm for this since you're using account ... > server, with Portal server on an internal server, but both use the same ...
    (microsoft.public.sharepoint.portalserver)
  • Re: VB connection to SQL server
    ... > the client machine begins to lose its relevance and accuracy as soon as it ... > aware that the data is probably out of date, a client sided cursor might ... > design minimises the possibility that records will have changed in the ... >> The Database server is in the office, and people use the Vb program from ...
    (microsoft.public.vb.database)