Re: How to Clear the Integrated Windows authentication credential in .

Hi,

i think this will not work - several problems

a) there is no way to clear the credentials from ASP.NET - there is only a client IE command that can do that.
b) there is no reliable way to detect a session end - Session_End only guarantees to fire with InProc sessions

---------------------------------------
Dominick Baier - DevelopMentor
http://www.leastprivilege.com

We have got an application which is using Integrated Windows
authentication credential method for logging into the site. Our
customer now is asking for a requirement to provide more security. The
requirement is like this..

"Whenever the session of the application expires(as per time in
web.config), it should clear the User credentials so that even if the
User enters the site url in the same browser instance,the Integrated
Windows authentication credential dialog box should pop up. This will
make the user to enter the userid and password again to access the
application. In other words, even if the session expires, only
authorized users should be allowed to login".

Please help us in finding a solution for this. It will be really great
if some experts can provide us the code snippet for this.

Kind Regards & Thanks in Advance,

Gireesh



.

Relevant Pages

  • Re: How to close LAN session and login as another credentials
    ... and is connected to a share on the server. ... these credentials, since it will automatically try to use the credentials of ... The problem is that from 1 login session on a PC, ... When I try to access administrator share ...
    (microsoft.public.windowsxp.network_web)
  • Re: How to use WinLogon API to solicit credentials?
    ... I can't simply use the current session identity for my ... I will need to engineer credential solicitation ... I understand that I'll need to use the WinLogon API in order to do this. ... user credentials, or will WinLogin step in to assume this function. ...
    (microsoft.public.security)
  • Re: I am stucked: Working on a network mapped drive via Web Service
    ... >>> Network sessions are session bound, that means that when you map ... >>> credentials when accessing network resources. ... >>> only access local drives. ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: How to close LAN session and login as another credentials
    ... When I try to access administrator share ... passwords for that already selected guest user. ... user whether one wants to maintain session for the connection or temporarily ... >> credentials to access that folder but it don't so, ...
    (microsoft.public.windowsxp.network_web)
  • RE: Task Scheduler result code 0xc0000025
    ... >The task cannot be run under the same credentials as the logged-in user ... same credentials for the task as for the TS session, ... The task does have an interactive component, ... Also, if you get any application or system errors in the Event Viewer, ...
    (microsoft.public.win2000.general)