Re: Alternative to username:password@domain

From: Joe Kaplan \(MVP - ADSI\) (joseph.e.kaplan_at_removethis.accenture.com)
Date: 06/15/04 

Date: Mon, 14 Jun 2004 23:41:58 -0500

I'm not really an ASP/VBScript guy (you are posting in a .NET group), but I
can tell you the basic steps to create a standard basic authentication
header. I have no idea how you are going to do the Base64 transform in ASP
(there is probably a component out there that does that though) and I'm not
sure of the syntax for adding a header to a WinInet web request, but that
can't be too hard.

The basic authentication header is called "authorization" and looks like
this:
Basic <base64 encoded string containing username:password>

Thus a header for a use someuser with password somepassword would look like:
Basic c29tZXVzZXI6c29tZXBhc3N3b3Jk

WinInet may also have built-in support for providing credentials and passing
this header without you having to calculate it yourself.

HTH,

Joe K.

"Stanley Stein" <StanleyStein@discussions.microsoft.com> wrote in message
news:762BA2D6-3A65-476E-8746-E4B9A61D75FD@microsoft.com...
> Dear Joe,
>
> How can I use WinINET in ASP to make such Authentication header? Please
help.
>
> Stanley Stein
>
>
> "Joe Kaplan (MVP - ADSI)" wrote:
>
> > If you are using Basic auth, you can set the Basic Authentication header
> > fairly easily and use that to pass credentials. This would be pretty
easy
> > with WinINET I think.
> >
> > Joe K.
> >
> > "Stanley Stein" <Stanley Stein@discussions.microsoft.com> wrote in
message
> > news:2B3138E1-CD3C-4B9E-9089-CD4192D777F9@microsoft.com...
> > > Hi groupmates,
> > >
> > > Before the patch was released, we used the syntax to pre-login our MS
> > products such as Exchange OWA, some websites needing Windows
Authentication.
> > >
> > > However, this syntax is no longer valid. All such programs become
dead.
> > Microsoft KB 834489 suggested to use WinINET functions or Cookies.
> > Nevertheless, WinINET cannot work in ASP while Cookies do not pass Login
> > Dialog made by Windows Integrated Authentication.
> > >
> > > Now I have to make a Login HTML page to replace the pop dialog for
> > Exchange OWA. Might anyone suggest solutions to replace the syntax but
work
> > as the same exactly? Please help.
> > >
> > > -stan
> > >
> >
> >
> >

Relevant Pages

  • Re: Basic Authentication problem
    ... I've written my first attempt at basic authentication and it doesn't ... don't know if it makes a difference - but I normally put the authorization header just before the content type. ... If you're running Firefox, you can get the Live HTTP Headers extension for it. ...
    (comp.lang.php)
  • Re: .NET WS client connecting to Axis WS - credentials problem
    ... Axis developer said that the blank username was appearing in the http header, ... it sets the credentials when Basic authentication or Windows ...
    (microsoft.public.dotnet.framework.webservices)
  • Re: Authorization HTML Header going missing
    ... I also do not want to turn on basic authentication to make it work as I need ... > the Authorization header is sent correctly. ... I'm a bit confused that why you need to manually set the ...
    (microsoft.public.dotnet.framework.aspnet)