Re: Intranet app via remote location (Internet)



I find it strange that you've had such bad experiences with Windows auth as
you usually don't have to do anything to make it work. Just enable Windows
auth in IIS, disable anonymous and set ASP.NET to Windows auth mode. It
just works. If the IIS box is domain-joined, it will authenticate against
AD. There is no code to write.

The question is still whether you want to use Windows auth or forms auth.
If you choose to go with forms auth, the AD membership provider is the
easiest solution.

Joe K.
--
Joe Kaplan-MS MVP Directory Services Programming
Co-author of "The .NET Developer's Guide to Directory Services Programming"
http://www.directoryprogramming.net
--
"Troy S." <TroyS@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:9E2C31D1-D414-4AFA-945D-012086BA23E2@xxxxxxxxxxxxxxxx
Joe, thanks for your time and informative reply.

How do you want the auth to be done?

I've always used Forms authentication in conjunction with my own SQL
tables
(Users, Roles, etc) so I'm not sure how to answer your question. I've
never
tried to utilize Active Directory for an internet application but I've had
to
maintain a few apps that do (code is ugly and monstrous, using third-party
components).

I've not yet seen an elegant way to make Windows prompt the user for their
Windows un & pw and then allow them access to the site, which is the
functionality I need (just like RDPing to my work machine from home--fill
in
my un & pw and I can then access all the network resources I normally have
access to).

I'm not sure about the domain controller. All I know at the moment is the
client has an intranet with many machines connected to it and wants to
host
this new site on one of their machines, using existing Windows accounts
for
authentication.

I will research the Active Directory membership provider and see where
that
leads me. Hopefully I find the veritable pot of gold.

Take care.

Troy



.



Relevant Pages

  • Re: Windows authentication in code
    ... With Windows auth, the browser actually ... If you aren't using Windows auth, the browser will not send authorization ... I guess that replicating Windows authentication ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: ASP.net & Win32 API (LogonUser) question...
    ... I still only have Windows Auth checked in IIS and I still get ... You want to use Windows authentication but you ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Using Windows Auth in Sharepoint and ASPx pages question
    ... But if the app is on another sitewith a different port ... The "double-login" issue is a very common problem when using windows ... there different sharepoint pages when they login. ... IsinRole method and then they get prompted with a LOGON windows Auth ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: connection options to yukon
    ... Windows auth is still somewhat recommended because of the security aspect I ... Win2k3 is a bit better because it uses kerberos tickets - ... >> But if it's a local account, that kinda assumes that all your servers are ...
    (microsoft.public.dotnet.framework.adonet)
  • Re: Folder and File Permissions
    ... If you want to control the access on files and directories using windows ... accounts then easiest would be to use windows auth and impersonation. ... You need a mapping between your user account (one that was used to login ... I am using System.IO GetDirectoriesmethod and GetFiles method to ...
    (microsoft.public.dotnet.framework.aspnet)