Re: Smartcard authentication in a multi-tier application
- From: DaveMo <david.mowers@xxxxxxxxx>
- Date: Mon, 14 Apr 2008 15:56:51 -0700 (PDT)
On Apr 14, 6:31 am, mj1977 <manu.ja...@xxxxxxx> wrote:
Hi,
We have a multi-tier intranet application. The users of this
application are windows users. We have a login screen on the client
side where the user enters the username and password and on the server
we use the function LogOnUser() to authenticte this user. We get the
SID of this user and the SID plays a major part in the businees
context of the application.
We are planning to allow the user to use the smart card as well in the
new version. I was just wondering how to go about with the
implementation as we need the domain username and password of the PIN-
authenticated smartcard user.
Generally what is the best design to use smartcard in a multi-tier
application which needs to be authentiacted on the server side?
Any suggestion on implementing this would be of great help.
Thanks
Why do you have the user enter their user name and password? Do the
users log on to their desktop/laptop computers with Active Directory
credentials? If so, then the user can authenticate to the server with
the credentials associated with the logon session.
If you are going the smartcard route then this works equally as well
since SC authentication on the Windows client results in a Kerberos
ticket which can then be used to authenticate to the server.
Unless there is some mitigating circumstance, having users type a
username/password on a Windows client that is part of an Active
Directory domain is just plain wrong and probably evil :)
HTH,
Dave
.
- Follow-Ups:
- References:
- Smartcard authentication in a multi-tier application
- From: mj1977
- Smartcard authentication in a multi-tier application
- Prev by Date: Re: SHFileOperation Problem
- Next by Date: C_Initialize frozen into the called CardAcquireContext function
- Previous by thread: Smartcard authentication in a multi-tier application
- Next by thread: Re: Smartcard authentication in a multi-tier application
- Index(es):
Relevant Pages
|
