Velocity Reviews

Velocity Reviews (http://www.velocityreviews.com/forums/index.php)
-   ASP .Net Security (http://www.velocityreviews.com/forums/f62-asp-net-security.html)
-   -   ASP.NET Impersonation fails on IIS (http://www.velocityreviews.com/forums/t767120-asp-net-impersonation-fails-on-iis.html)

serre 02-07-2005 03:04 PM

ASP.NET Impersonation fails on IIS
 
Hi,

I built an ASP.NET Web application with impersonation. This works
fine, my login is recognized. Now I want to get access to a certain
folder on an UNC file share. I have the rights with my login, but when
I test my application on the web server I get an error message that
the access is denied.

Please help, thanks

Joe Kaplan \(MVP - ADSI\) 02-07-2005 03:54 PM

Re: ASP.NET Impersonation fails on IIS
 
If you are using Windows Integrated Authentication in IIS, then this is
likely failing because your account cannot be delegated to a different
server. This is called a double hop issue. Do a search for double hop and
Kerberos Delegation to find out what you need to do to get this working.

Joe K.

"serre" <tobias_wohllaib@web.de> wrote in message
news:b5bd2aa6.0502070704.1abb53b@posting.google.co m...
> Hi,
>
> I built an ASP.NET Web application with impersonation. This works
> fine, my login is recognized. Now I want to get access to a certain
> folder on an UNC file share. I have the rights with my login, but when
> I test my application on the web server I get an error message that
> the access is denied.
>
> Please help, thanks




Paul Clement 02-07-2005 08:11 PM

Re: ASP.NET Impersonation fails on IIS
 
On 7 Feb 2005 07:04:08 -0800, tobias_wohllaib@web.de (serre) wrote:

¤ Hi,
¤
¤ I built an ASP.NET Web application with impersonation. This works
¤ fine, my login is recognized. Now I want to get access to a certain
¤ folder on an UNC file share. I have the rights with my login, but when
¤ I test my application on the web server I get an error message that
¤ the access is denied.

The other way around this, if you need to delegate credentials, is to use Basic authentication. This
would be fine if your app is confined to an Intranet. Otherwise, with NTLM (Integrated Windows
Authentication) you need to implement Kerberos, as Joe mentioned.


Paul ~~~ pclement@ameritech.net
Microsoft MVP (Visual Basic)


All times are GMT. The time now is 11:58 AM.

Powered by vBulletin®. Copyright ©2000 - 2013, vBulletin Solutions, Inc.
SEO by vBSEO ©2010, Crawlability, Inc.


1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57