Re: Proxy auth with default credentials

Ok, I'm still getting my head around the whole windows security setup,
but from what you've said my understanding is:
I can't auth with kerberos to the proxy, impersonation is a function of
kerberos, so I won't be able to authenticate against the proxy with an
impersonated user.

I'm happy I can't do that, but seeing as I'm impersonating the user on
the IIS box, I've therefore got a thread running as mydomain\myuser on
the IIS box. Why can't I use that users credentials to create something
I can assign to the proxy object so I can use with NTLM authentication
(which does work against the proxy)?

Basically I'm trying to get a way of creating a
System.Net.NetworkCredential with the details of the user IIS is
impersonating - I just can't see how to do it?

.

Relevant Pages

  • Re: Proxy auth with default credentials
    ... It is actually delegation that is a function of Kerberos. ... proxy server in this case), ... If you authenticated with Basic authentication, ... I'm happy I can't do that, but seeing as I'm impersonating the user on ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Configuring a proxy multiple times
    ... I have several xxxWSE proxy classed in my project. ... Before I make a call using them I'm attaching a KerberosToken to the tokens ... when generating the kerberos token I'm using the following method ...
    (microsoft.public.dotnet.framework.webservices.enhancements)
  • Re: AD Proxy
    ... verify whether there are any differences with W2K3. ... With proxy, you're right ... you were right on regarding Kerberos. ... I've been reviewing some ISA Server info and wondering if the reverse ...
    (microsoft.public.windows.server.active_directory)
  • Re: "Requested registry access is not allowed" and Web Service call
    ... I think I'm doing something wrong in that I tried setting the Proxy ... work-around, though, in that I'm not always impersonating a user in the ... and I can set a private proxy field in the ... constructor and use it as needed when I do my calls. ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: Remote file access while impersonating with NTLM
    ... if you are impersonating, you are impersonating - you had to write code to do that - and you have to remove code to stop it - but maybe i am wrong.... ... Kerberos will be implemented in a future release. ... Good point is to use delegation. ... with the service account's network credentials. ...
    (microsoft.public.dotnet.security)