Custom auth using domain username

19 Dec 2006 5:16 AM

kerry

Hi, I need to authenticate my users against a central security server using
their domain logon. Windows Integrated Authentication doesn't seem to fit as
that uses ACLS and the like, what other alternative do I have - the users
shouldn't need to enter their username or password, it should pick them up
automatically.

19 Dec 2006 10:33 AM

Ken Schaefer

"kerry" <ke***@discussions.microsoft.com> wrote in message
news:6267C9BA-11EA-4C5F-8ECE-7F8B9E76DA78@microsoft.com...
> Hi, I need to authenticate my users against a central security server
> using
> their domain logon. Windows Integrated Authentication doesn't seem to fit
> as
> that uses ACLS and the like,

Windows Integrated Authentication is for *authentication*

ACLs are for *authorization*

Those are two different concepts. You can still using Integrated Windows
Auth (IWA) without setting any special ACLs (you could leave the ACL as
"Everyone: RX")

> what other alternative do I have - the users
> shouldn't need to enter their username or password, it should pick them up
> automatically.

In a HTTP conversation, it is up to the browser to send credentials to the
server. there is no "magic" way that the server can somehow get the user's
credentials without the user's (or the user's browser's) co-operation.

IE can be made to attempt an auto-logon if you can meet the relevant
requirements:
http://support.microsoft.com/?id=258063

Cheers
Ken

--
My IIS Blog: www.adOpenStatic.com/cs/blogs/ken