Re: Windows Authentication question

From: Natan (nvivo.misc_at_mandic.com.br)
Date: 03/24/05 

Date: Thu, 24 Mar 2005 12:24:32 -0300

Nicole Calinoiu wrote:

> That's still possible even if you use integrated Windows authentication. If

Yes, but i don't want to use it. I want just to check username and
password against Active Directory user base. My fault to put "windows
authentication" in the subject.

> 1. The user presumably already has at least some access to your file,
> database, e-mail, print, etc. servers. Is intranet access somehow an even
> worse risk than accessing these other resources?

Yes.

> 2. Users will likely be able to instruct their browsers to cache their
> credentials even when logging in via an HTML form, so you won't be gaining
> any real protection by using a forms-based approach.

Yes, i will.

Relevant Pages

  • Re: Windows Authentication question
    ... I want just to check username and ... password against Active Directory user base. ... My fault to put "windows ...
    (microsoft.public.dotnet.framework)
  • Problem with logins
    ... I'm stuck and was wondering if someone could help me? ... my wifes computer, and while I was away there was a fault or something ... the old part of the drive, we can see the username, and she has logged ...
    (uk.comp.homebuilt)