Re: Who am I impersonating?

From: Alek Davis (alek_xDOTx_davis_xATx_intel_xDOTx_com)
Date: 02/28/04


Date: Sat, 28 Feb 2004 14:28:06 -0800

Tim,

This is by design (as Aaron described). To summarize, in a typical situation
(integrated authentication), you cannot pass users credentials over one
machine (i.e. from computer A (IE) through server B (ASPX) to server C (SQL
Server/Web Service/etc)), unless you enable Kerberos/delegation on the
network, which is generally not recommended for security reasons.

Alek

"Tim Thacker" <timthacker63@hotmail.com> wrote in message
news:OptxOjX$DHA.624@TK2MSFTNGP11.phx.gbl...
>
> I've got a similar issue and I think I'm running into the same problem.
> I've got a ASPX Page on Server A. Web Service on Server B. I need to
> pass the Windows Creditials through Server A to Server B. I've set the
> Impersonate options, turned on Windows Auth. When I run IE from Server A
> everyhting works fine. Run it from anywhere else and I get Access
> Denied. Is this by design or am I doing something wrong?
>
> Thanks!
> Tim
>
>
> *** Sent via Developersdex http://www.developersdex.com ***
> Don't just participate in USENET...get rewarded for it!



Relevant Pages

  • Re: Exchange 2007 and Hyper-V question
    ... I'm finalizing a design for a client that wants a 5,000 user Exchange 2007 ... I understand that E2K7 is supported in Hyper-V, with the exception of the UM ... Install Hyper-V on the server as well as the UM role. ... You would then be able to use three mailbox servers as ...
    (microsoft.public.exchange.design)
  • User autentification and access to "sister" domain resources
    ... I am in process of designing brand new AD structure for our customer. ... 2003 Servers - pretty classic design ... All DCs are Global Catalogs. ... user_from_domainA gets IP address from siteB DHCP server ...
    (microsoft.public.win2000.active_directory)
  • Re: Using SQl to store aspx pages and memory problems
    ... The solution I was looking at would be to create some specific server side ... I want the data to be saved in the page so I thought that a asp.net control ... the original design and one that ensures that future system changes will not ... > database isn't some sort of magic pixie dust that solves all problems. ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Software Testing Tools
    ... you should design and redesign frequently while ... majority of its functionality implemented on the server. ... API for the client such that the UI is an entirely separate component - ... most efficient and reliable way to test the server is not with the GUI ...
    (comp.software.testing)
  • Re: External users vs internal users.
    ... I think I need help with the design full-stop. ... To have Team and Meeting sites available to groups of external users. ... Then you'll need a separate WSS farm for this since you're using account ... > server, with Portal server on an internal server, but both use the same ...
    (microsoft.public.sharepoint.portalserver)