Re: User Authentication, Active Directory and more (help)
From: Timothy Parez (tpsoftware_at_users.sourceforge.net)
Date: Fri, 18 Jun 2004 07:26:05 +0200
Would the following be possible:
On the Server I could have an XML WebService which takes a windows
username and password as parameters for a "login" function.
Can this be done ?
(Sorry for the endless questions)
Joe Kaplan (MVP - ADSI) wrote:
> Ah, forgot that part. I'm not a CF programmer, so I don't know the details,
> but the Framework reference doesn't say WindowsIdentity is supported on CF,
> so you may be SOL. My guess is that PocketPC doesn't support Windows
> security (you don't log onto the domain on one of those, do you?), so that's
> why it is excluded.
> I'm not sure what to tell you to do on Pocket PC, sorry. It doesn't even
> look like any of the classes in System.Security.Principal are in the CF, so
> you may have to roll your own.
> Joe K.
> "Timothy Parez" <firstname.lastname@example.org> wrote in message
>>Joe Kaplan (MVP - ADSI) wrote:
>>>Yes, .NET can make use of any Windows account (local machine, NT4 domain
>>>AD) for authentication and authorization.
>>>The built-in support for this is in the WindowsIdentity and
>>>classes. WindowsIdentity represents the Windows user and is basicallly
>>>wrapper around the Windows login token. WindowsPrincipal contains a
>>>WindowsIdentity and provides the ability to do role-based authorization
>>>against a user's Windows groups by calling the IsInRole method with the
>>>Windows group name. You can get the current WindowsIdentity at any time
>>>The WindowsPrincipal class can be associated automatically with the
>>>currently executing thread as well. The mechanism for doing this is
>>>different depending on whether it is an ASP.NET or WinForms/Console app.
>>>This association allows you to take advantage of the
>>>PrincipalPermissionAttribute for doing declarative security in .NET.
>>>is quite a bit of explanation of this stuff that you can find in MSDN if
>>>need specifics, or you can ask here.
>>What about the PocketPC,
>>how would I fit it into this scenario
>>because the PocketPC's will be used to scan barcodes and insert items
>>into the database (with that barcode as the key)