Re: special authentication

From: Joe Kaplan \(MVP - ADSI\) (joseph.e.kaplan_at_removethis.accenture.com)
Date: 02/22/05 

Date: Tue, 22 Feb 2005 13:31:46 -0600

"Paul Clement" <UseAdddressAtEndofMessage@swspectrum.com> wrote in message
news:d50n11tamp2otuj720o9rp1dnucuv8fpja@4ax.com...
> On 22 Feb 2005 06:41:44 -0800, peter.kornills@web.de (Peter Kornills)
> wrote:
>
> ¤ Hi!
> ¤
> ¤ My problem is quiet simple, but a solution seems to be difficult(for
> ¤ me):
> ¤ I've a group of users for my asp.net webapplication. In case of a
> ¤ login the User should be authenticated automaticly (this means the
> ¤ application should verify if he's allowed to use it).
> ¤
> ¤ I want to get the windows username from the client and look up in an
> ¤ oracle database weather the user is allowed to act with the webapp. If
> ¤ he isn't the Application will redirect to an error-message.
> ¤
> ¤ But it seems to be hard to get the windows-user.
> ¤
> ¤ I've tried to set the authentication form on "Windows" in the
> ¤ Web.config-file
> ¤
> ¤ In the code behind I try to get the following value:
> ¤
> ¤ name = Page.User.Identity.Name
> ¤
> ¤ but that doesn't work.
> ¤ Does any body have an idea to solve this problem?
> ¤
> ¤ Regards
> ¤
> ¤ Peter
>
> In addition to what Joe mentioned you also need to enable impersonation.
>
> http://msdn.microsoft.com/library/default.asp?url=/library/en-us/vsent7/html/vxconimpersonation.asp
>
>
> Paul ~~~ pclement@ameritech.net
> Microsoft MVP (Visual Basic)

Why?

All he wants to do is check to see who the authenticated user is.
Context.User.Identity.Name (or Page.User.Identity.Name) will be the
authenticated use regardless of what the setting for impersonation is.
Impersonation is only needed if he needs to execute code as the
authenticated user.

Joe K.

Relevant Pages

  • RE: ASP/COM security context difference?
    ... each thread running in that process is being ... run as the authenticated user. ... object and verify that the Impersonation ... This posting is provided “AS IS” with no warranties, and confers no rights. ...
    (microsoft.public.inetserver.iis.security)
  • Re: Impersonation in code/Sharepoint
    ... Is there a way to create code to, instead of using the authenticated user, ... use the ASPNet user account? ... If impersonation is disabled then the ASP.NET user account will be ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Can the new IMF filter OUTBOUND?
    ... So an authenticated user with a POP/SMTP account would not have their ... Regards, Neal ... > from the Internet. ... >> get it to filter outbound. ...
    (microsoft.public.exchange2000.admin)