Re: Mixed Mode (Forms & Windows) Authentication
- From: Dominick Baier <dbaier@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Tue, 5 Sep 2006 18:33:29 +0000 (UTC)
There are basically two models -
#1one is to have a separate "start page" for Windows users - this page will convert the Windows credentials (and groups) to a FormsAuth ticket and redirect to your main app. All security will be forms based then.
#2 A second approach involves injecting code into the pipeline (and reordering some of the modules) to enable this scenario.
For existing applications #1 is often easier.
I describe both approaches here [0]. #2 is too much code and plumbing to post here.
If #1 is feasible for you i can walk you through the steps.
[0] http://www.microsoft.com/mspress/books/9989.asp
---
Dominick Baier, DevelopMentor
http://www.leastprivilege.com
I have an ASP.NET application that is used remotely (over the
internet) by our clients that uses Forms authentication and the
usernames/passwords are stored in the database. I need to integrate
Windows authentication with the existing Forms authentication so that
our employees (on the intranet) can use the same application with
requiring username/password.
I've seen a suggestion of having two seperate copies of the app
hosted, one accessed locally with Windows authentication and the other
remotely with Forms authentication. But, I would rather have one
server/site do both.
There must be a way to do this, and I don't know why this support
wasn't built into ASP.NET 2.0 out of the box. Does anyone have any
suggestions/examples of doing Mixed Mode Authentication in ASP.NET
2.0??
.
- Prev by Date: SQL Server does not exists... Yada, yada, yada
- Next by Date: Re: User forgot password and answer to question
- Previous by thread: SQL Server does not exists... Yada, yada, yada
- Next by thread: Re: Mixed Mode (Forms & Windows) Authentication
- Index(es):
Relevant Pages
|