Re: How to capture network login using ASP.NET

Yes, it's possible. There are several articles available on mixing Windows
and Forms authentication within a given application
(http://www.google.ca/search?sourceid=navclient&ie=UTF-8&rls=GGLR,GGLR:2006-19,GGLR:en&q=forms+windows+authentication)
to get you started. However, creating two virtual directories that point to
a given folder isn't usually all that much trouble either and, depending on
how your network infrastructure is set up, you might be able to get inbound
traffic routed to the correct instance with relatively little effort.


<mchemsi@xxxxxxxxx> wrote in message
news:1167896673.506826.68450@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Thanks Nicole for your reply.

Some modules of the application are supposed to be accessed externally.
So I am trying to avoid two things. The nuisance caused by login and
having two instances of the application.

Is it possible to acheive that?

Thanks

Nicole Calinoiu wrote:
You'll need to disable anonymous access to the home page if you wish the
client user's to be authenticated on that page. If you're running an
intranet application, there's usually little reason not to do this.
However, if your application is meant to be used by external users, this
may
cause problems for users that either do not have accounts on your network
or
for whom logging in to view the home page might be seen as a nuisance.


<mchemsi@xxxxxxxxx> wrote in message
news:1167801132.364785.272350@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Hello,

I'm currently maintaining an ASP.NET application with not much
knowledge about .NET. So any help would be greatly appreciated.

The application is access internally and has different modules in it,
most modules are available to all users. However, some should be only
available to paticular users (like the admin section).

Web Application:
|----->Module 1
|----->Module 2
|----->Module 3
|----->Module 4
|----->Admin Module (Need to be restricted based on network id)

Currently, the home page does not have any menu link to the admin
section and if you know the path you can access without a problem. I am
trying to avoid using a web form to login to that section and use the
network login as an authentication.

I would like to add a link in the menu to the admin module and make
visible only if USER1 for an example is accessing the page.

I have tried using
System.Security.Principal.WindowsIdentity.GetCurrent().Name but i get
the IUSR... accout on the server. I also tried
HttpContext.Current.User.Identity.Name but that does not return
anything.

THE ENVIRONMENT:
- Novell Network (Webserver without Novell client).
- Web App Setting:
+ Anonymous Access is enabled
+ Integrated Windows Authentication is checked.
- Web Config Setting:
+ <authentication mode="Windows" />
+ <identity impersonate="true" />
+ <authorization> <allow users="*" /> </authorization>

Thanks in advance.

Cheers,

Mehdi Chemsi




.

Relevant Pages

  • RE: Wireless Security Notes and Findings (from this list and other places)
    ... There are two general areas of wireless security: Authentication and ... authentication standard that works with wireless networks. ... client computer runs a client program to connect to the network with a ...
    (Security-Basics)
  • Re: IP address assignment problem
    ... I have a little problem and seek for ur thoughts, let's assume I'm in a very open environment where everyone can very easily try to get his/her laptop on the network and IP addresses are assigned by a DHCP server and we are in a domain environment, how do I prevent machines that are not part of our domain to be assigned an IP address? ... This approach doesn't stop your rogue clients from connecting to other clients, but merely doesn't give them the information they normally need to do so. ... Using 802.1x, your workstations authenticate through the switch to a radius server before they are allowed any connectivity. ... This authentication can use X.509 certificates, computer account credentials from AD, or whatever else you'd normally configure radius to authenticate with. ...
    (Focus-Microsoft)
  • Re: Kerberos machine authentication - apparent authentication failures
    ... When you joined your computer to the domain your wireless network card was ... denied access until you can authenticate to a domain controller as a user. ... While kerberos is the default authentication protocol of choice, ...
    (microsoft.public.windows.server.security)
  • RE: 802.1x, Computers, Wired Security
    ... client to use EAP-TLS. ... Authentication-Provider = Windows ... Wired 802.1X Authentication failed. ... Network Adapter: Broadcom NetXtreme Gigabit Ethernet - Packet Scheduler ...
    (microsoft.public.windows.server.active_directory)
  • Re: IIS 6.0 and 401.2 and 401.1 Errors
    ... > authentication -- client and server first negotiate authentication that ... > So, if you see repeated 401.2 for the same resource from the same client, ... > authenticated connection and instead RENEGOTIATING a new connection. ... > You can easily verify this by installing "Network Monitor" from Windows ...
    (microsoft.public.inetserver.iis)