Velocity Reviews - Computer Hardware Reviews

Velocity Reviews > Newsgroups > Programming > ASP .Net > ASP .Net Security > Windows Authentication without providing a password

Reply
Thread Tools

Windows Authentication without providing a password

 
 
Zhenzhong Xu
Guest
Posts: n/a
 
      02-08-2006
Is it possible for a web application to authenticate user in Active Directory
without having them to provide a password associated with the account name.

What I meant is after user logged into windows from the domain, is it
possible for a web application to authenticate the user just like SQL server
windows authentication (it is not acceptable even if we only need the user to
type in the password once)? Does it need to have a secure channel? Is NTLM
capable for doing this job?

Please let me know what technology I should be looking into, and if
possible, some links and code samples are greatly appreciated.

Zhenzhong
 
Reply With Quote
 
 
 
 
Ken Schaefer
Guest
Posts: n/a
 
      02-08-2006
Yes.

In IIS, just disable "allow anonymous authentication" and enable one of the
other authentication mechanisms. In all cases, the user (or their browser)
has to supply credentials. The browser can be configured to supply the
credentials automatically without user intervention, e.g. for IE see:
http://support.microsoft.com/?id=258063

(Firefox also has a similar setting when NTLM is being used)

Cheers
Ken


"Zhenzhong Xu" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
: Is it possible for a web application to authenticate user in Active
Directory
: without having them to provide a password associated with the account
name.
:
: What I meant is after user logged into windows from the domain, is it
: possible for a web application to authenticate the user just like SQL
server
: windows authentication (it is not acceptable even if we only need the user
to
: type in the password once)? Does it need to have a secure channel? Is NTLM
: capable for doing this job?
:
: Please let me know what technology I should be looking into, and if
: possible, some links and code samples are greatly appreciated.
:
: Zhenzhong


 
Reply With Quote
 
 
 
 
Dominick Baier [DevelopMentor]
Guest
Posts: n/a
 
      02-08-2006
Hi,

this is all done by configuration -

if the client is logged on to the domain, IE can do single-sign-on

a) IIS has to be configured for integrated auth
b) IE only sends the credentials to the Intranet zone by default - as soon
as there is a "." in the server name - Internet zone is assumed
if you browse to the web site where you want to do SSO - which zone does
IE show? You can add sites to the intranet zone in the IE zone settings

---------------------------------------
Dominick Baier - DevelopMentor
http://www.leastprivilege.com

> Is it possible for a web application to authenticate user in Active
> Directory without having them to provide a password associated with
> the account name.
>
> What I meant is after user logged into windows from the domain, is it
> possible for a web application to authenticate the user just like SQL
> server windows authentication (it is not acceptable even if we only
> need the user to type in the password once)? Does it need to have a
> secure channel? Is NTLM capable for doing this job?
>
> Please let me know what technology I should be looking into, and if
> possible, some links and code samples are greatly appreciated.
>
> Zhenzhong
>



 
Reply With Quote
 
 
 
Reply

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
How to reset Windows 7/Vista/XP/2000 password if you forgot or lost windows password passwings Software 4 11-17-2011 06:52 AM
Lost Windows login Password? 6 Ways to Recover and Recover windows Password jamesstevn General Computer Support 0 03-10-2010 03:18 AM
Change a users password without knowing the old password nor the answer to the password question AAaron123 ASP .Net 1 01-16-2009 02:56 PM
Changing a users password without knowing the old password nor the answer to the password question AAaron123 ASP .Net 2 01-16-2009 02:08 PM
Providing Credential without login screen TJO ASP .Net 4 05-05-2007 05:45 PM



Advertisments