Re: Impersonate user from ASP.NET - access to network file share

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Paul Clement (UseAdddressAtEndofMessage_at_swspectrum.com)
Date: 12/10/04 

Date: Fri, 10 Dec 2004 09:11:41 -0600

On 9 Dec 2004 12:50:39 -0800, Michelle@bwalk.com wrote:

¤ Hi all!!
¤
¤ I just wanted to let you know that I have conceeded and just put
¤ <identity impersonate="true" userName="accountname" password="password"
¤ /> in the web config. This works perfectly. I origionally didnt' want
¤ to set up impersonation for the whole site, but hopefully my sysadmin
¤ will clear it and all will be well.

That probably works because the user name and password are clear text at the web server and can be
passed in response to authentication challenges from remote resources.

In answer to your other question, delegation is the next step after impersonation when attempting to
access remote resources. If you're using a mechanism where the user ID and password are encrypted
then you need to implement the delegation mechanism w/Kerberos.

If your credentials are clear text at the web server such as in Basic authentication with no SSL
(which of course isn't particularly secure) then those credentials can be used in response to
authentication challenges when access remote resources.

You can find more info at the below link:

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnnetsec/html/SecNetch08.asp

Paul ~~~ pclement@ameritech.net
Microsoft MVP (Visual Basic)

Relevant Pages

  • Re: Accessing a .NET web service from an ATL un managed client through a Proxy.
    ... since you want credentials for the server. ... Microsoft MVP, MCSD ... I tried using authentication schemes as suggested in most of the ... Also if I use only basic authentication and have the user enter his ...
    (microsoft.public.vc.atl)
  • Re: BASIC authentication Issues with IE - Part II - Solved but WHY?
    ... Page2.asp also requires Basic Authentication ... > automatically sends credentials, and I'm giving access. ... Microsoft is ...
    (microsoft.public.inetserver.iis.security)
  • OutlookAnyWhere, NTLM and Basic authentication does not work combi
    ... At the moment everywhere Basic authentication is enabled, ... their credentials, because Windows Authentication is not switched on. ... You would think that this is a matter of enabling Windows Authentication, ... EWS,Public,Autodiscover) my clients outside (using basic authentication) are ...
    (microsoft.public.exchange.setup)
  • Re: Domain Authentication Help
    ... Intregrated authentication should not ask for any credentials if the user is ... logged into the system but I am not sure what Digest Authentication does. ... to use basic authentication in which case I strongly recommend SSL. ...
    (microsoft.public.sharepoint.portalserver)
  • Re: Default credentials
    ... > comes up on my client site requires NTLM or Basic authentication? ... > a web browser - I assume it must be something they have set up ... If your receive a Dialog asking for your creds with NTLM auth ... credentials of the current security context. ...
    (microsoft.public.dotnet.framework.aspnet.webservices)