|
code
newsgroups
|
|||||||||||||||||||||||
|
|||||||||||||||||||||||
Enabling Windows Authentication from inside Forms Authentication (ASP.NET 2.0)I need the ability to bypass the forms authentication login page when the
user requesting the protected page is running on our corporate network and is also logged into the corporate domain. How do I do this? Thanks, Mike Ober. Thats not easily doable.
the easiest way is to provider two application entry points - one for non-domain users, and a separate app for domain users that converts the windows account details to a forms auth cookie. another option is to modify the pipeline and inject some modules that "bypass" forms auth - this needs some kind of indicator if windows auth should be used or not - like an IP address range for domain users. i described both approaches and trade offs in detail here - but feel free to ask more questions: http://www.microsoft.com/mspress/books/9989.asp --- Dominick Baier, DevelopMentor http://www.leastprivilege.com Show quoteHide quote > I need the ability to bypass the forms authentication login page when > the user requesting the protected page is running on our corporate > network and is also logged into the corporate domain. How do I do > this? > > Thanks, > Mike Ober.
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnaspp/html/mixedsecurity.asp
Show quote Hide quote "Michael D. Ober" <ober***@.alum.mit.edu.nospam> wrote in message
news:%23X4JEeH%23GHA.4320@TK2MSFTNGP02.phx.gbl... >I need the ability to bypass the forms authentication login page when the >user requesting the protected page is running on our corporate network and >is also logged into the corporate domain. How do I do this? > > Thanks, > Mike Ober. > > Jeff,
Thanks for the link. Mike Ober. Show quoteHide quote "Jeff Dillon" <jef***@nowhere.com> wrote in message news:OS9qpWI%23GHA.1220@TK2MSFTNGP04.phx.gbl... > > http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnaspp/html/mixedsecurity.asp > > "Michael D. Ober" <ober***@.alum.mit.edu.nospam> wrote in message > news:%23X4JEeH%23GHA.4320@TK2MSFTNGP02.phx.gbl... >>I need the ability to bypass the forms authentication login page when the >>user requesting the protected page is running on our corporate network and >>is also logged into the corporate domain. How do I do this? >> >> Thanks, >> Mike Ober. >> >> > > Dear Mike
You don't say whether external users have an internal network account but if you opt for Windows authentication in web.config and set Directory Security in IIS to "Integrated Windows" and disable "Anonymous access" then external visitors will be prompted for a username and password. The credentials they supply will be verified by a domain controller in the same manner as in internal corporate network login. Hope that's helpful Phil Hall That won't work. My external users must use Forms Authentication because
they don't have domain accounts (nor am I going to shell out $$$ to M$ for web-enabled CALs for them.) I did solve the problem by mimicking the login control, however. Mike. Show quoteHide quote "Phil H" <goo***@philphall.me.uk> wrote in message news:1162158211.027280.314000@k70g2000cwa.googlegroups.com... > Dear Mike > > You don't say whether external users have an internal network account > but if you opt for Windows authentication in web.config and set > Directory Security in IIS to "Integrated Windows" and disable > "Anonymous access" then external visitors will be prompted for a > username and password. The credentials they supply will be verified by > a domain controller in the same manner as in internal corporate network > login. > > Hope that's helpful > > Phil Hall > Phil,
Sorry about being curt - it's Monday from Hell here. Mike. Show quoteHide quote "Michael D. Ober" <ober***@.alum.mit.edu.nospam> wrote in message news:uEM183C$GHA.2300@TK2MSFTNGP04.phx.gbl... > That won't work. My external users must use Forms Authentication because > they don't have domain accounts (nor am I going to shell out $$$ to M$ for > web-enabled CALs for them.) I did solve the problem by mimicking the > login control, however. > > Mike. > > "Phil H" <goo***@philphall.me.uk> wrote in message > news:1162158211.027280.314000@k70g2000cwa.googlegroups.com... >> Dear Mike >> >> You don't say whether external users have an internal network account >> but if you opt for Windows authentication in web.config and set >> Directory Security in IIS to "Integrated Windows" and disable >> "Anonymous access" then external visitors will be prompted for a >> username and password. The credentials they supply will be verified by >> a domain controller in the same manner as in internal corporate network >> login. >> >> Hope that's helpful >> >> Phil Hall >> > > 
Other interesting topics
only for expert: what's wrong with this code?
ButtonField and Eval asp.net 2.0 gridview controls - bound or unbound? Javascript and asp.net - TextBox backcolor not changing... Gridview sorting event - Gridview Datasource always Null .. why??? WebParts & Highend Portals way to make 2 GridViews line up CustomValidator inside Repeater is ignored javascript and navigateurl a bug in BaseValidator.RegisterValidatorCommonScript() implementat |
|||||||||||||||||||||||
