Where is the user impersonation token stored?

From: Gery D. Dorazio (gdorazio_at_enque.net)
Date: 10/10/05

  • Next message: Dominick Baier [DevelopMentor]: "Re: Where is the user impersonation token stored?" 
    Date: Mon, 10 Oct 2005 04:02:00 -0400

    When a user visits a web site and is authenticated through the popup dialog
    box (Windows authentication) he enters his username and password. Evidently
    this creates the users impersonation token that is used on subsequent
    requests to secured web pages. On subsequent requests the
    WindowsAuthenticationModule is what authenticates on each request. The code
    that does this looks like this:

    WindowsIdentity wi = new WindowsIdentity(ctx.WorkerRequest.GetUserToken(),
    text2, WindowsAccountType.Normal, true);
    Context.User = new WindowsPrincipal(wi);

    The questions are:
    1. Where did the initial Windows authentication put the user impersonation
    token?
    2. Where is the user impersonation token stored as the user makes web page
    requests(or is it generated on each request and if so how?)?

    Thanks,
    Gery 

    -- 
Gery D. Dorazio
Development Engineer
EnQue Corporation
www.EnQue.com
www.ImagingHardware.com
  • Next message: Dominick Baier [DevelopMentor]: "Re: Where is the user impersonation token stored?"

    Relevant Pages

    • Re: Total Requests/sec problem
      ... We also have users that are on 3mb connections that are having long load ... I want to say that it is the overhead of some many requests and the reponse ... are presented with the Pop-up windows authentication prompt. ... Network monitor trace from one client and the server. ...
      (microsoft.public.sharepoint.portalserver)
    • Re: Total Requests/sec problem
      ... individual requests to the webserver? ... are presented with the Pop-up windows authentication prompt. ... Network monitor trace from one client and the server. ... My external users are seeing slow page load times on the order of 4 - ...
      (microsoft.public.sharepoint.portalserver)
    • Re: Basic authentication without browser login window
      ... I have a problem with basic windows authentication in IIS6. ... requests. ... After I logon to AD using the user credentials entered in my custom asp.net ...
      (microsoft.public.dotnet.framework.aspnet.security)
    • Re: Implementing Security - Advice Please
      ... > support Basic Authentication which requests a username/password. ... > over SSL and you should be ok. ... Is Windows Authentication based on the Domain user accounts? ...
      (microsoft.public.dotnet.framework.aspnet.security)
    • Re: Implementing Security - Advice Please
      ... > support Basic Authentication which requests a username/password. ... > over SSL and you should be ok. ... Is Windows Authentication based on the Domain user accounts? ...
      (microsoft.public.dotnet.security)