RE: User authentification on web applications

From: Bonj (Bonj_at_discussions.microsoft.com)
Date: 11/17/04 

Date: Wed, 17 Nov 2004 08:16:02 -0800

Like Peter said you can use identity impersonate to force ASPNET to log on to
IIS as the windows user. But it's better to let it just operate as itself -
and make the user type their username, if there's any security considerations
whatsoever. It's more secure generally that way. You can set it so that
cookies remember what user it is, and log them in automatically.

"Junky" wrote:

> Hi folks,
>
> well, I've read some articles on authentification, but somehow I can't
> get along with what I need.
>
> I need to get the login name from the OS to check if this person is
> even able to start the application. If so, the person should get login
> window for the web application that is checked against a user
> database.
> I tried to use "Windows" and "Forms" authentification, but it doesn't
> do what I need! Every time I try to get the username of the windows
> user, I get either this damn ASPNET user or some other stuff.
>
> I understand that the client logs on the the IIS as ASPNET, but how
> can I get the currently logged in on the OS?
>
> Thanks in advance,
> Junky
>

Relevant Pages