Authentication Question

Tech-Archive recommends: Fix windows errors by optimizing your registry



I have a service and asp.net application that both attempt to
authenticate supplied user credentials to get access to my Active
Directory server.

At the time of the authentication:
1. The service is running under the local system account NT
AUTHORITY\SYSTEM.
2. The asp.net application is running under local machine ASPNET
account.
..ps (I worked this out by querying the
System.Security.Principal.WindowsIdentity.GetCurrent().Name property)

When authenticating, if the user name is fully qualified (e.g
MyDomain\Administrator):
1. ASPNET application authenticates ok.
2. Server authenticates ok

If the user name is the unqualified (e.g Administrator):
1. ASPNET application authenticates ok.
2. Server fails to authenticate returning 'The authentication mechanism
is unknown'.

Both applications use the exact same mechanism for authenticating:

DirectoryEntry dirEntry = new DirectoryEntry ( ldapADSPath, Username,
Password,
AuthenticationTypes.Secure );
object obj = dirEntry.NativeObject;

I know I can work around this by setting the service logon account to a
network account rather than local system, but I really want the reason
why there is this difference between ASPNET and the local system
account as I understood neither had network access?

.



Relevant Pages

  • Re: AD Sites and Services Question
    ... Tested the set logonserver and it is showing the DC on the remote site. ... I had one old NS record that I deleted for a server that no longer ... Network A exists at my main office ... authenticates with Network A DC's, but continues to go across out T1 ...
    (microsoft.public.windows.server.active_directory)
  • Re: domain change now pop3 and imap users cant connect anymore . Frank
    ... imap authenticates again. ... > alias names are also named same as account names. ... >> changed domain from a nt 4.0 to win server 2003 ad domain. ... >>> where we should look on the Exchange Server to remove this NTLM ...
    (microsoft.public.exchange.admin)
  • Matching design pattern for class wrapping?
    ... I am in search of a design pattern which fits my problem. ... This server has multiple ... Authenticates - AuthenticationUser ... Interacts - InteractionUser ...
    (comp.software.patterns)
  • WSE 3.0, kerberos
    ... WS/IIS and AD on the Windows 2003 server ... Here is the error messages: ... The client gets a session ticket from the KDC + a copy ... Then the client authenticates to the web service by providing the ...
    (microsoft.public.dotnet.framework.webservices.enhancements)
  • Re: DirectoryEntry.NativeObject slow with ASP.Net, but fast in exe
    ... The path should either specify no server name or the DNS name of the server ... > NativeObject. ... Just two lines, create DirectoryEntry and call ... > If the user authenticates, logs out and authenticates again, the login is ...
    (microsoft.public.dotnet.framework.aspnet.security)