RE: Forms authentication <-> Windows user?

From: Peng Jie (PengJie_at_discussions.microsoft.com)
Date: 02/02/05

  • Next message: Peng Jie: "Re: different between http://computer and http://computer.domain.c" 
    Date: Wed, 2 Feb 2005 09:11:06 -0800

    you can authenticate against the Active Directory by using Forms.

    try the link below:

    http://support.microsoft.com/?id=316748

    "InspektorDerrick" wrote:

    > Hi,
    >
    > I'm new in ASP.NET and I've got a question about authentication in an
    > intranet application:
    >
    > I want to authentify and authorize the user by a database. Authentication
    > should work like this:
    >
    > 1. evaluate the windows username
    > 2. check if user exists in database
    > yes -> new customIdentiy (IsAuthenticated = true), new customPrincipal
    > (roles from database)
    > no -> 3.
    > 3. redirect to logon form
    > 4. check if the user exists in database
    > yes -> new customIdentiy (IsAuthenticated = true), new customPrincipal
    > (roles from database)
    > no -> securityexception or redirect
    >
    > The problem is, if I use Windows-Authentication I may not change
    > Principal(?), if I use Forms-Authentication I cannot get the windows-user
    > from step 1 (?)
    > --
    > Regards, InspektorDerrick

  • Next message: Peng Jie: "Re: different between http://computer and http://computer.domain.c"

    Relevant Pages

    • Re: Windows Integrated Security - Restricting Users Without Groups
      ... Just look for:-How to configure and implement a Role based Windows ... > the following in the Authentication Event in global.asax. ... >> users are in fact, Active Directory user accounts, or whether, perhaps, ... >> database, which would be entirely separate from Active Directory, other ...
      (microsoft.public.dotnet.framework.aspnet)
    • Re: Use of Active Directory vs Database (e.g. SQL server)
      ... > One of them will be accessed only by internal users, ... > use active directory or directly use database for authentication). ...
      (microsoft.public.windows.server.active_directory)
    • ASP.NET Forms Authentication Best Practices
      ... ASP.NET Forms Authentication Best Practices ... What happens if your user database is compromised? ... Listing One, where you want to use login.aspx to log users in. ... string FirstName ...
      (microsoft.public.dotnet.framework.aspnet)
    • User authentication over the web (was: Secure Password in database)
      ... Subject: User authentication over the web (was: Secure Password in database) ... a web server is usually authenticated to users by using SSL or TLS ...
      (SecProg)
    • Re: Using SSPI with Custom Authentication
      ... It boils down to moving the security perimeter away from the server. ... first database contains all of the user information; ... perform authentication, and users need to be authenticated before accessing ...
      (microsoft.public.dotnet.security)