Re: Authentication question

From: David Wang [Msft] (someone_at_online.microsoft.com)
Date: 10/23/04

  • Next message: David Wang [Msft]: "Re: IUSR Account from another machine Logging into my server" 
    Date: Fri, 22 Oct 2004 18:11:39 -0700

    > I have an Windows XP station where i run my ASP .NET apps. I wish users
    > to authenticate them using their current windows usernames and passwords.
    > I have stored my users login names and passwords in SQL database, because
    > I don't wish store an account for every user in my network at my XP
    machine.

    Turn on Integrated Windows Authentication on the web server running ASP.NET
    applications. Users will automatically authenticate using their current
    windows usernames/passwords, and your ASP.NET application will run with that
    credential.

    I do not know why you store user login names/passwords in a separate SQL
    database that can be out-of-sync with the actual remote user's
    name/password.

    If you want to use custom authentication where you store username/password
    in your own user database, then that has nothing to with windows
    username/password because the browser won't understand your custom
    authentication scheme. You will have to cook up your own mechanism (why not
    use ASP.NET Forms Authentication ??? ). 

    -- 
//David
IIS
This posting is provided "AS IS" with no warranties, and confers no rights.
//
"Nikolay Petrov" <johntup2@mail.bg> wrote in message
news:uZKa1FAuEHA.2876@TK2MSFTNGP14.phx.gbl...
Can I authenticate users of my ASP .NET apps, using their windows
credentials, but using a SQL db.
Let me explain a little more.
I have an Windows XP station where i run my ASP .NET apps. I wish users to
authenticate them using their current windows usernames and passwords.
I have stored my users login names and passwords in SQL database, because I
don't wish store an account for every user in my network at my XP machine.
So is it posible to pass windows credential for verification against SQL
database? Or maybe the right question is, can I extract the username and
password as clear text from the passed credentials.
I am not quite shure are there any possibilities.
TIA
  • Next message: David Wang [Msft]: "Re: IUSR Account from another machine Logging into my server"

    Relevant Pages

    • Re: Authentication question
      ... > to authenticate them using their current windows usernames and passwords. ... > I have stored my users login names and passwords in SQL database, ...
      (microsoft.public.dotnet.framework.aspnet)
    • Re: Authentication
      ... how are you accessing the database? ... then you probably should be using a windows ... single sign on system) to authenticate your user. ... methods/properties with the PrincipalPermission attribute. ...
      (microsoft.public.dotnet.languages.csharp)
    • Re: IAS Authentication (RADIUS Server) - using Oracle database
      ... Windows 2000 native mode domains, Windows 2000 mixed-mode domains, Windows ... or Windows 2000 local accounts database for a stand-alone ... IAS server. ... > Using IAS, Can I authenticate a user, whose information is ...
      (microsoft.public.inetserver.iis.security)
    • Re: [ok] [Full-Disclosure] RE: [Full-Disclosure]MS should re-write code with security in mind
      ... almost all Windows users demand backward compatibility. ... > security upgrades available on MS's site. ... > and authenticate all mail transfer. ...
      (Full-Disclosure)
    • Re: 802.1X, Windows supplicant and IAS
      ... I have seen issues with Windows XP SP2 clients trying to authenticate ... via a Cisco 2950 switch and Cisco ACS server. ... "Due to a defect in the Microsoft PEAP supplicant provided in Windows ...
      (microsoft.public.security)
    Loading