Re: ASP.NET Security/Authentication question

From: Dominick Baier [DevelopMentor] (dbaier_at_pleasepleasenospamdevelop.com)
Date: 03/17/05


Date: Thu, 17 Mar 2005 11:49:49 -0800

Hello Terry,

at first - ask yourself the following question: will my users be stored as
Windows accounts (AD or SAM) - or will they be stored in a custom store (e.g.
SQL Server)

if Windows - set <authentication mode="Windows" /> and make yourself familiar
with IIS authentication types
if Customer - set <authentication mode="Forms" /> and make yourself familiar
with Forms Authentication

---------------------------------------
Dominick Baier - DevelopMentor
http://www.leastprivilege.com

> I am a newbie on ASP.NET.
> I am creating an asp.net application (with C#) which will have a
> number of
> screens.
> The backend database for this app is SQL Server.
> The user is required to login and we have to be able to control which
> users
> have access to which screens and if they have read only or update
> access.
> I have just started reading about the different types of
> authentication for
> asp.net.
> Can anyone provide me with some direction as the best way to proceed.
> Terry
>



Relevant Pages

  • Re: Windows Authentication in asp.net 2005 to SQL Server?
    ... If the domains do not trust each other, Windows authentication is not going ... Basic authentication sometimes makes the need for Kerberos delegation go ... generic account to do the backend data stuff on our SQL Server. ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: I dont want to re-invent the Login/Login Wheel - Help with utilities
    ... Yes, if you use .NET1.1, there isn't built-in login control, and more importanltly there isn't ready-to-use membership component to use. ... the membership provider uses SQL Server or SQL Server Express. ... We feel that having the capability to force password change would be a better benefit in securing our application and data access. ... Both Windows authentication and authorization wolud be be fine if we wanted the world to have access to our application data, but not very intuitive for maintaining integrity over our data. ...
    (microsoft.public.vstudio.general)
  • RE: IIS (ASP) -> SQLServer Authentication Issue
    ... I understand that you'd like to use IIS Intergration authentication in the ... and ASP "impersonates" authencitaed users to access SQL Server on ... only kerberos authentication allows double-hops from clients ...
    (microsoft.public.sqlserver.security)
  • Re: SBS Premium Edition .. what way is SQL licenced
    ... Another thing to note in using your SQL Server as a backend database is the ... concept of Forms-based authentication and Integrated Windows authentication. ... thereby requiring individual CALs to access SQL Server. ... Chad A. Gross - SBS MVP ...
    (microsoft.public.windows.server.sbs)
  • Unable to Serialize.
    ... I have a remote Sql Server Instance locally. ... Unable to serialize the session state. ... session state store in 'Custom' mode. ... This section sets the authentication policies of the ...
    (microsoft.public.dotnet.framework.aspnet)