IIS Server Security - RE: passing NTLM authentication to another virtual site on same II

This is Interesting: Free IT Magazines  
Home > Archive > IIS Server Security > July 2004 > RE: passing NTLM authentication to another virtual site on same II





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author RE: passing NTLM authentication to another virtual site on same II
Bart

2004-07-19, 2:51 am

Thanks Steven

"Steven Cheng[MSFT]" wrote:

> Hi Bart,
>
> As for the retriveing the user credential in one application and use pass
> it to another web applicaiton you mentioned, yes, you're right, only basic
> or keberos is possible to do so and NTLM is not capable of this. In
> addition, if you're using the WebRequest class to post the request and want
> to pass the credential via the NetworkCredential class, I'm afraid only the
> basic authenticaiton is ok (keberos is also not work), because the
> NetworkCredential class need us to provide the username and password, but
> in asp or asp.net web application, we can't retrieve the password info if
> we're not using the basic authentication in IIS. Keberos won't provide
> password, it only provide a authenticated token which is mantained by
> client for sequence request. So the basic authentication is the only means
> that we can retrieve both the username and password of the client user in
> our web application,
> Thanks.
>
> Regards,
>
> Steven Cheng
> Microsoft Online Support
>
> Get Secure! www.microsoft.com/security
> (This posting is provided "AS IS", with no warranties, and confers no
> rights.)
>
> Get Preview at ASP.NET whidbey
> http://msdn.microsoft.com/asp.net/whidbey/default.aspx
>
>

Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com