Re: advice - spoofing an active directory login?



Is there a way to set values within ASP to make them appear as though
they were posted via a form? (as per your advice below)

Basically I'm going to have info from the user's previous login passed
in and I need to be able to authenticate them against AD without them
entering their login info again.

(sorry if my questions seem elementary - I'm a Coldfusion dev, so AD
and ASP are new to me)


Mark Smith wrote:
> You can only do this with forms base (basic) authentication -- something you
> could actually capture the password with. Integrated (Kerberos) is time
> sensative and won't allow the reuse of the password.
>
>
>
>
> <nikespex@xxxxxxxxxxx> wrote in message
> news:1130544409.872274.182000@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
> >I am working on an application that is protected behind Active
> > Directory. In special cases users will be authenticated elsewhere on a
> > separate system via a web-based login. When they reach my application
> > I need to be able to log the user in automatically without prompting
> > them with a Windows login pop-up (for Active Directory).
> >
> > Example: User visits www.foo.com and successfully logs in as Jane.
> > Jane then visits www.bar.com and because she has already authenticated
> > at foo.com I want to automatically log her in as the Active Directory
> > user "Jane" on my application at bar.com without her seeing the Windows
> > login prompt.
> >
> > Any advice for how this can be accomplished? I'm using class ASP for
> > the UI to the application.
> >
> > Much thanks,
> > Ryan
> >

.



Relevant Pages

  • win form security
    ... I would like to authenticate to windows via a login creen in my application. ... when i do a search I get stuff but on asp. ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: Linux authentication via AD
    ... What I do to integrate with Windows is to use NIS and Samba. ... a way to do this under older AIX) allows people to login authenticating ... authentication is done to the Windows Password Server. ... text passwords authenticate to the Windows Password Server as well. ...
    (comp.os.linux.security)
  • Re: Was told by DSL tech support that
    ... Network Setup Wizard"? ... PPPoE does not in itself require a login and password. ... PBI/SBC/AT&T wants the user to authenticate. ...
    (alt.internet.wireless)
  • Re: Linux authentication via AD
    ... Primarily I need to integrate Linux ... servers, but I do have a few OpenBSD servers. ... > a way to do this under older AIX) allows people to login authenticating ... > text passwords authenticate to the Windows Password Server as well. ...
    (comp.os.linux.security)
  • not authenticating when redirected from another page
    ... target page, it first checks to see if the user/browser is authenticated. ... the page I wanted after a successful login. ... authenticate, it sends the login page back again. ... even though I'm using the same browser window. ...
    (microsoft.public.dotnet.framework.aspnet)