ISAPI-LDAP-Authentication-Filter : System User Required ?

From: Björn Andersen (bjoern.dot.andersen.at.premiere.de_at_nospam.org)
Date: 04/28/04 

Date: Wed, 28 Apr 2004 12:52:25 +0200

Hello Group,

I'm working on the "IIS ISAPI LDAP Authentication Module" from
http://www.inflectioncorp.com/download/.
Purpose is to have IIS to authenticate against LDAP (ADAM) without the need
to set up system- or domainusers.

Going in the Code, I realised that an auth-modul only alters the auth
information passed with the "SF_NOTIFY_AUTHENTICATION" notify event. After
that, IIS seems to do the Auth as well - with new user data, perhaps, but it
seems to need an systemuser to authenticate.

If I let the module pass an default user after auth (e.g. the IIS anonymous
user), all works as expected, but many applications behind the IIS (ASP,
PHP, JSP, ...) rely on this user information (HTTP_AUTHENTICATED_USER or
so).

Is this right ? Or can I get IIS to take the LDAP-User as "Authenticated"
without runing against the system- or domain-userDB again ?
Have you got a better solution/module for this Problem ?

Thanks for your help 

--
Bjoern Andersen

Relevant Pages

  • ISAPI-LDAP-Authentication-Filter : System User Required ?
    ... I'm working on the "IIS ISAPI LDAP Authentication Module" from ... Purpose is to have IIS to authenticate against LDAP without the need ...
    (microsoft.public.inetserver.iis)
  • Re: IIS Challenge for Password. WinXP authenticates differently th
    ... What IIS version. ... Integrated Authentication is going to require a domain. ... What if I want the users to authenticate as username and the domain is ... > When you have this configured, users just log onto their machines using ...
    (microsoft.public.inetserver.iis.security)
  • Re: Active Directory LDAP Authentication Fails in IIS 6
    ... in IIS 5.1) were: ... It seems you can't Authenticate using the Active Directory thats why you ... Public Function IsAuthenticated(ByVal domain As String, ... Dim entry As DirectoryEntry = New DirectoryEntry(_path, ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: ADSI Problem
    ... I suggest posting to IIS groups as well because if IIS will cause it to ... causing the script to stop working after it has been working. ... I have written a script to authenticate Active Directory users via ADSI ... Dim strUserName ...
    (microsoft.public.windows.server.active_directory)
  • Re: Authentication from a SAM base / IIS
    ... how are the ACLs in your web directory? ... which IIS version / which ASP.NET version? ... why FormsAuthentication API if you are doing Windows auth? ... authenticate against local or domain windows accounts. ...
    (microsoft.public.dotnet.framework.aspnet.security)