Re: dynamically requesting windows authentication on a resource
From: Joe Kaplan \(MVP - ADSI\) (joseph.e.kaplan_at_removethis.accenture.com)
Date: 08/30/05
- Next message: surya: "COM+ and NetworkCredential problem"
- Previous message: Joe Kaplan \(MVP - ADSI\): "Re: Does 'IsInRole()' check against Active Directory groups?"
- In reply to: Chris Crowe [MVP]: "Re: dynamically requesting windows authentication on a resource"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Mon, 29 Aug 2005 23:13:14 -0500
You can definitely handle your own basic auth though. It is very "basic".
:)
However, this is not a good idea without SSL in the mix.
Joe K.
"Chris Crowe [MVP]" <IISMVP2005@iisfaq.homeip.net> wrote in message
news:ei99Z2MrFHA.2588@tk2msftngp13.phx.gbl...
> Although you can dynamically request authentication by setting a 401
> Status and also a WWW-Authenticate header you will not be able to process
> these I would think. What will you do with the NTLM hash that is produced?
>
> Why do you want to do this?
>
> This is a set of headers that IIS returns when a user requests an NTLM
> page. But if IIS is not configured to accept the NTLM header I do not know
> what happens.
>
> HTTP/1.1 401 Access Denied
> Server: Microsoft-IIS/5.1
> Date: Mon, 29 Aug 2005 19:10:54 GMT
> WWW-Authenticate: Negotiate
> WWW-Authenticate: NTLM
> Connection: close
> Content-Length: 4431
> Content-Type: text/html
>
> --
> Cheers
>
> Chris
>
> Chris Crowe [IIS MVP]
> http://blog.crowe.co.nz
>
>
> "z f" <dont@send.mails> wrote in message
> news:e3k2rQ7qFHA.2648@TK2MSFTNGP10.phx.gbl...
>> Hi,
>>
>> I have a asp.net web application, and in one of my pages I would like to
>> be able to request windows authentication on the fly, without the page
>> configured for windows authenticatino in IIS.
>>
>> is this possible using some http header / return value?
>>
>> i can surely mimic IIS behavior returning access denied, but a key should
>> be added and IIS have to accept the credentials of the client.
>>
>> TIA.
>>
>>
>
>
- Next message: surya: "COM+ and NetworkCredential problem"
- Previous message: Joe Kaplan \(MVP - ADSI\): "Re: Does 'IsInRole()' check against Active Directory groups?"
- In reply to: Chris Crowe [MVP]: "Re: dynamically requesting windows authentication on a resource"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
