Intranet Authentication 1

[SpiderBear6]

I have an asp.net intranet web site that I would like to set up security on. The site can be accessed through a dns and basically I would like everyone to have access to the site but I need to know if the user comes from a particular domain as these users will have access to a greater number of features. The web server (Windows Server 2003) is not the domain controller (Novell client - Windows 2000 Server). I was thinking I need to use Windows Authentication and allow all users. Then in the code I could check the domain of the user.

I started by setting the Authentication mode to Windows in the web config file of the web app. I then disabled the anonymous user access and enabled Integrated Windows in IIS. The web site still works. Then to test if it was working properly, I denied my user name. But I can still access the site. What am I doing wrong?

Does the web server have to be the domain controller for Windows authentication to work? Does anyone have any ideas about how I can determine where the user came from?

Thanks for any help provided.

Cheers.

--------------------------------------
"We are star-stuff. We are the universe made manifest trying to figure itself out."
-- Delenn in Babylon 5 - "A Distant Star"

 

[crazyboybert]

Hi SpiderBear

The web server does not need to be a domain controller for windows authentication. The steps you have followed sound to me like they should work.

Check out this link it should clear this up for you as well as demonstrating a few .NET methods of getting the user account details.

http://www.dnzone.com/ShowDetail.asp?NewsId=504

Of course you could always use the classic ASP method of Request.ServerVariables["LOGON_USER"]

hth

Rob

Go placidly amidst the noise and haste, and remember what peace there may be in silence - Erhmann 1927

 

[SpiderBear6]

I think my problem is the Novell netware software can not validate the user. I have decided to go forms based and store a list of valid user names, then use the LogonUser api to valid the password entered with that of the user's current password.

Thanks for replying crazyboybert. A star for you!.

--------------------------------------
"We are star-stuff. We are the universe made manifest trying to figure itself out."
-- Delenn in Babylon 5 - "A Distant Star"