SSPI Server: How to retrieve the username of incoming authentication request

From: "Kevin Smith" <someone@xxxxxxxxxxxxx>
Date: Thu, 21 Feb 2008 15:36:49 -0700

If a client uses current logon session's credentials and send it via SSPI to
the server for mutual authentication, will the server able to deduce the
username from the requests?

For example, I am using the SSPI Workbench sample. In the client side, I
chose NTLM package, Use credentials for current logon session, and Mutual
authentication. I checked the buffers going between the client and the
server and I don't see the username being sent. The domain name and the
machine name are in the buffer though.

Is there a way for the SSPI server to figure out the username of the client?
Thanks.

.

Follow-Ups:
- Re: SSPI Server: How to retrieve the username of incoming authentication request
  - From: DaveMo

Prev by Date: Re: Effect of changing account password when already logged on
Next by Date: RE: Elevate permission of code
Previous by thread: Verify timestamp with CryptoApi
Next by thread: Re: SSPI Server: How to retrieve the username of incoming authentication request
Index(es):
- Date
- Thread

Relevant Pages

Has your problem been resolved
... username not showing in ISA log ... They probably aren't using the proxy server. ... Troubleshooting Client Authentication on Access Rules in ISA Server 2004 ...
(microsoft.public.isaserver)
Re: No username prompt SSHD
... it is the client side. ... The client takes the current user and passes that to the server as the ... To override this you must supply a username to the client in one of two ways: ... $ ssh -l login serveur ...
(SSH)
Re: XP Client Cant Log In To Server After Initial Setup
... username, and the domainname is the netbios name of your domain (you can ... check that on the server). ... "Bob N." ... I logged onto one of the client ...
(microsoft.public.windows.server.sbs)
Re: ISA Server 2000 and Terminal Server 2000
... Does the ISA server ask for username and password when accessing the web ... Do I need to install the ISA Client on the TS? ...
(microsoft.public.isa)
Re: Using NTLM/SSPI with custom username/password scheme
... tickets, complex key management, and a trusted ticket-granting server. ... you can easily do an simplistic NTLM-style authentication. ... The server creates a challenge for the client and sends it back (random ... If you still want to use SSPI, you're going to have to create an unmanaged ...
(microsoft.public.dotnet.security)