Delegation user's credential from webserver to backend server through terminal service

From: culeno (sutsunghan_at_gmail.com)
Date: 05/19/05 

Date: 19 May 2005 12:01:01 -0700

I have an intranet application within a domain. Following the KB
article: How to configure an ASP.NET application for a delegation
scenario
(http://support.microsoft.com/default.aspx?scid=kb;en-us;810572) allows
us to impersonate user's credential from the web server to the back end
server (SQL and Reporting service server). It works fine if user logs
in within the domain and launch the application.

The problem happens when the users work at home and use Windows 2003
terminal service (not in the same domain as the web app and SQL) to log
on, and then launch the web app. We noticed that the authentication
method is NTLM instead of Kerberos when accessing the web app through
the terminal service (since they don't belong to the same domain).
Maybe this is the reason why the delegation doesn't work anymore? Can
anybody tell me how to make it work?

Thanks.
Jerry

Relevant Pages

  • Re: Application Flow / security issues
    ... You need delegation IF: ... Your browser users are accessing the web server from a different machine ... You want to use the credentials of the authenticated web app user to ... impersonation and makes it possible for the server process to access ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Delegation users credential from webserver to backend server through terminal service
    ... Delegation is a Kerberos feature, so that would stand to reason. ... and then launch the web app. ... > the terminal service. ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Connecting VS.NET 2003 to IIS6/WSS
    ... successful at creating a web app with the source tree on the web server. ... >> I'm posting this question here, rather than in the programming group, ... >> web apps, web parts, etc. wants to find an IIS installation (with Windows ...
    (microsoft.public.sharepoint.windowsservices)
  • Re: Using Access for web application?
    ... My about the server running the web app was stemming from the following ... decision of using Windows or Linux has been made. ... If you are using DreamWeaver and ASP; the fact of using Access or MySQL as ...
    (microsoft.public.access.dataaccess.pages)
  • Re: Front End WSS3.0 Server
    ... WSS only listens to addresses for web applications that are in AAM. ... Another use for zones for a web application is when you extend a web app. ... When you add a second WFE to a server farm, WSS assumes that it will be ...
    (microsoft.public.sharepoint.windowsservices)