Remote authentication of user using NTLM?

From: cmg_cobra (cglasnap_at_vt.edu)
Date: 02/25/05


Date: 24 Feb 2005 17:03:25 -0800

I'm attempting to use NTLM SSP via SSPI to authenticate users. I want
the user to type in his username/password when the application starts
because their login info will not be the same as their Windows logon.
Users will be added to the Local Users and Groups on the server. To
implement this I pass a *SEC_WINNT_AUTH_IDENTITY with the
username/password entered by the user to the AcquireCredentialsHandle
function on the client side.

If I run the client application on the server, it all works fine.
Authentication works like a charm.

The problem arises when I run the client application on another machine
that's not even part of domain the server is in: When I call
AcceptSecurityContext on the server, it always returns a
SEC_E_LOGON_DENIED error.

Any ideas why it would work in the one case but not the other?
Help is very much appreciated.
Thanks,
-cmg_cobra



Relevant Pages

  • Re: OLAP Client connectivity
    ... Was finally able to login to OLAP from the client. ... They only pass their username/password to ... > the domain when adding users in SQL Server 2000. ...
    (microsoft.public.sqlserver.olap)
  • Pass-through authentication from desktop to remote server
    ... I'm trying to set up some client workstations currently running XP to ... act as if they were thin clients connecting to SBS2003 server. ... prompted for username/password, they are immediately logged on to ... to mstsc, but again, this would happen on the user level GP rather ...
    (microsoft.public.windows.terminal_services)
  • Re: Pass-through authentication from desktop to remote server
    ... ThinClient Server is the best one. ... Type in their username/password and go straight to the TS. ... Windows Server - Terminal Services ... > I'm trying to set up some client workstations currently running XP to ...
    (microsoft.public.windows.terminal_services)
  • Re: IE prompts for username password when saving excel file opened
    ... challenge for username/password when required to authenticate -- it is up to ... the client to know how to satisfy that requirement without popping up the ... I'm having a problem with IIS server. ... it opens in IE and if I try save the document ...
    (microsoft.public.inetserver.iis.security)
  • Re: What doesnt lend itself to OO?
    ... >> proxy and instructs the server to constuct the real object. ... rather than client code. ... If 'clock' is instantiated in the server, ... > for the server interface at the OOA level. ...
    (comp.object)