Re: custom page for user credentials?
From: David Wang [Msft] (someone_at_online.microsoft.com)
Date: 07/08/03
- Next message: Roger Abell [MVP]: "Re: custom page for user credentials?"
- Previous message: Tom Kiame: "IIS and Front Page"
- In reply to: Sven Erik Matzen: "custom page for user credentials?"
- Next in thread: Roger Abell [MVP]: "Re: custom page for user credentials?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Tue, 8 Jul 2003 00:16:52 -0700
You can do custom authentication on IIS, which typically means to use a
custom HTML page to enter username/password, transmit it in some fashion,
and do the verification on IIS. This can certainly be done on Windows 2000
and greater.
I do not understand why if you use SSPI to authenticate, you cannot allow
IIS impersonation. Ultimately, you MUST give at least one impersonation
identity to IIS, and then map all other authenticated users to this
identity. If you do not allow IIS to impersonate, you will end up rewriting
the equivalent of Windows Integrated Authentication everywhere.
If you have IIS6, there's sample code in the IIS6 SDK that does custom
authentication called CustomAuth. It only requires Anonymous access from
IIS, but it is able to use LogonUser to change the user IIS impersonates for
a given request. It should be trivial for you to modify it to use SSPI to
authenticate users and then use some other designated identity for IIS
impersonation.
http://www.microsoft.com/msdownload/platformsdk/sdkupdate/default.htm
The code doesn't work on W2K/WXP, but similar ideas can be implemented.
-- //David This posting is provided "AS IS" with no warranties, and confers no rights. // "Sven Erik Matzen" <sven.matzen@ppepro.com> wrote in message news:O6SuPIFRDHA.3192@tk2msftngp13.phx.gbl... Hi there, I want to use SSPI at the server side to authenticate user logins. I already have routines to do this, but currently I need to transmit the user name, domain and password over the net to make it work. It's not a big problem in my situation (encrypted password, HTTPS and switched LAN) but I want to make it better. My needs: - custom page for entering login credentials (changes from client to client) - support for IE6 greater - support for Windows 2000 and greater - no impersonation of IIS Is there a way to make this work? Can I generate a JScript to tell IE to use specific credentials for a server-login? Sven
- Next message: Roger Abell [MVP]: "Re: custom page for user credentials?"
- Previous message: Tom Kiame: "IIS and Front Page"
- In reply to: Sven Erik Matzen: "custom page for user credentials?"
- Next in thread: Roger Abell [MVP]: "Re: custom page for user credentials?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
