Re: Problem establishing SSL connection in code-behind

You call LogonUser on the local machine to validate a user's plaintext
credentials and create a logon token for them that can be used to start
processes, impersonate or perform security checks. To call it, the user in
question must actually be able to perform the requested logon type on the
current machine. Therefore, to authenticate AD users on the web server, the
web server would need to be in a domain in the same AD forest or in a
trusted domain. If that isn't the case, then LDAP may be a better way to
go.

I don't understand why you need to log on to a remote machine. What remote
machine do you need to log on to? From what I understood, it sounded like
you were only logging on to the remote IIS machine as a means to validate
the user's credentials.

Joe K.

--
Joe Kaplan-MS MVP Directory Services Programming
Co-author of "The .NET Developer's Guide to Directory Services Programming"
http://www.directoryprogramming.net
--

Indeed we don't need to create any AD user at all. So, I guess we
could try asking for an account that can have read access to the AD.

The web application is going to be run in an Intranet on a domain, and
right now, the web application runs under the ASPNET account.

The Win32 LogonUser API is completely new to me. I just checked the
documentation at http://msdn2.microsoft.com/en-us/library/aa378184.aspx
. I am not sure if I understand it, but it seems to say that "You
cannot use LogonUser to log on to a remote computer." Isn't this
gonna be an issue for my situation?


.

Relevant Pages

  • Re: Copy files in network with authentication ??
    ... >> The purpose of LogonUser is to obtain an access token specifying the ... >> credentials of a valid local or domain (remote) account. ...
    (microsoft.public.dotnet.languages.vc)
  • Re: select directory on remote machine using WMI
    ... you may use this one to connect/access a remote share or drive. ... LogonUser through PInvoke specifying the credentials for which you want to ... and the drives, I get them with: ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: A services threads outgoing security:how to manage?
    ... In my situation, I cannot use "LogonUser", because ... the credentials I have to access the remote machine, ...
    (microsoft.public.security)
  • Re: A services threads outgoing security:how to manage?
    ... In my situation, I cannot use "LogonUser", because ... the credentials I have to access the remote machine, ...
    (microsoft.public.dotnet.security)
  • Re: LogOnUser with Smart Card Credentials
    ... The handle obtained by the first call to LogonUser will remain valid untile ... call LogonUser with the credentials provided in the dialog. ... SmartCard logon, we pass on the marshalled credentials and the pin #. ... this is a problem because if the user removed the card from ...
    (microsoft.public.platformsdk.security)