Re: Authentication question

From: richlm (rich_lm_at_h0tmai1.com)
Date: 10/25/04

  • Next message: richlm: "Re: Writing a simple firewall in C#"
    Date: Mon, 25 Oct 2004 21:20:32 +0200
    
    

    Need more information about your infrastructure to provide a sensible
    answer. Here are some 'leading' questions to make sure we're on the same
    track:
     - are you looking for single-sign-on?
     - when you are talking windows credentials does that imply AD & domain user
    accounts - or is this network a workgroup with just local machine accounts?

    Also a couple of pointers/ideas:
     - Generally you don't store passwords - you only ever store a hash of the
    password. After the hash of the password is verified, the password itself is
    discarded.
    If you do store passwords this is a BIG security risk.
     - Have you considerd ADAM (Active Directory Application Mode) as a possible
    alternative to SQL server?
    see
    http://www.microsoft.com/downloads/details.aspx?FamilyId=9688F8B9-1034-4EF6-A3E5-2A2A57B5C8E4&displaylang=en


  • Next message: richlm: "Re: Writing a simple firewall in C#"

    Relevant Pages

    • Re: Authentication question
      ... Need more information about your infrastructure to provide a sensible ... accounts - or is this network a workgroup with just local machine accounts? ... After the hash of the password is verified, ... If you do store passwords this is a BIG security risk. ...
      (microsoft.public.dotnet.framework.aspnet)
    • Re: Authentication question
      ... Need more information about your infrastructure to provide a sensible ... accounts - or is this network a workgroup with just local machine accounts? ... After the hash of the password is verified, ... If you do store passwords this is a BIG security risk. ...
      (microsoft.public.inetserver.iis.security)
    • Re: Authentication question
      ... Need more information about your infrastructure to provide a sensible ... accounts - or is this network a workgroup with just local machine accounts? ... After the hash of the password is verified, ... If you do store passwords this is a BIG security risk. ...
      (microsoft.public.dotnet.framework.aspnet.security)
    • Re: Authentication question
      ... Need more information about your infrastructure to provide a sensible ... accounts - or is this network a workgroup with just local machine accounts? ... After the hash of the password is verified, ... If you do store passwords this is a BIG security risk. ...
      (microsoft.public.dotnet.languages.vb)