Re: custom page for user credentials?

From: Roger Abell [MVP] (mvpNoSpam_at_asu.edu)
Date: 07/08/03 

Date: Tue, 8 Jul 2003 00:48:56 -0700

Sven,

I am not fully catching what you mean by
the requirement "no impersonation of IIS"

Is what you are after, in the end, is to have a valid
Windows token/credentials, which may vary based
on the browsing identity but not necessarily be the
browsing identity nor any account used by IIS ?
If so, you may want to look into "protocol transitioning"
feature (which is not available in W2k, it is W2k3 only). 

-- 
Roger
"Sven Erik Matzen" <sven.matzen@ppepro.com> wrote in message
news:O6SuPIFRDHA.3192@tk2msftngp13.phx.gbl...
> Hi there,
>
> I want to use SSPI at the server side to authenticate user logins. I
already
> have routines to do this, but currently I need to transmit the user name,
> domain and password over the net to make it work. It's not a big problem
in
> my situation (encrypted password, HTTPS and switched LAN) but I want to
make
> it better. My needs:
> - custom page for entering login credentials (changes from client to
client)
> - support for IE6 greater
> - support for Windows 2000 and greater
> - no impersonation of IIS
>
> Is there a way to make this work? Can I generate a JScript to tell IE to
use
> specific credentials for a server-login?
>
> Sven
>
>

Relevant Pages

  • Re: HTTPWebRequest.request.GetResponse fails: remote server returned error: (401) unauthorized.
    ... "IIS appears to prevent access" because even if IIS prevents access, ... Do you want authenticated user credentials from the client ASP.Net ... authentication protocols as they should be. ... Impersonation is achieved in the Client applications by using the ...
    (microsoft.public.inetserver.iis.security)
  • Re: IIS 6.0 cgi process not running as same user as worker process?
    ... It warns that it's inteneded for IIS 4 &5... ... > elevate privileges (through impersonation), but any other code can only ... it is configurable to have IIS launch CGI as either ... This will make your CGIs launch as app pool identity. ...
    (microsoft.public.inetserver.iis)
  • Re: IIS 6.0 cgi process not running as same user as worker process?
    ... It warns that it's inteneded for IIS 4 &5... ... > elevate privileges (through impersonation), but any other code can only ... it is configurable to have IIS launch CGI as either ... This will make your CGIs launch as app pool identity. ...
    (microsoft.public.inetserver.iis.security)
  • Re: IIS6 - How? Force Anonymous and impersonation
    ... >I'm not sure what settings you are talking about, but IIS ... >much just like IIS 5 with regard to impersonation. ... >> possible to force all Users to authenticate as ... >> the User with a specified User account which is not ...
    (microsoft.public.inetserver.iis.security)
  • Re: IIS Folder and file security. Impersonation does not work.
    ... Custom URL navigation. ... First -- what you want to do does NOT need the impersonation DLL at all. ... Second -- you are muddling HTML and IIS concepts together and hoping for the ... Now, with IIS6, we have a custom authentication sample ISAPI that should ...
    (microsoft.public.inetserver.iis)