Integrated Windows Authentication >> web.config?

[Kevin Yu]

we have setup a web server to host asp.net app and I need to authenticate
user at the integrated windows authentication level, all users have a NT
user/pwd on another server (PDC server), how can I go about and config the
web.config to point the authentication process to the PDC? thx

Kevin

[Eric Garza]

Hi Kevin

Just change the following line:

<authentication mode="None">

to:

<authentication mode="Windows">

--
Regards,
Eric Garza
Microsoft .NET MVP
Project manager
AMI GE

"Kevin Yu" <k...@nrcan.gc.ca> wrote in message
news:#gQTtbubCHA.1492@tkmsftngp11...

[Eric Garza]

Kevin,

What you need is custom Impersonation.

To impersonate your user on the PDC you'll need to:

Catch the AuthenticateRequest event of the Application object in the
Global.asax file.
There you will have access to HttpContext.Current.User for information on
the requesting user.
Then, follow the sample located in the help under
WindowsIdentity.Impersonate that has unmanaged code to logon a user.
Last, call the Impersonate method on the result of
WindowsIdentity.GetCurrent() (not sure if required but you might as well
overwrite the HttpContext.Current.User with a new WindowsPrincipal).

hth

--
Regards,
Eric Garza
Microsoft .NET MVP
Project manager
AMI GE

> -----Original Message-----
> From: Yu, Kevin [mailto:k...@NRCan.gc.ca]
> Sent: Tuesday, October 08, 2002 1:03 PM
> To: 'ega...@mvps.org'
> Subject: Re: Integrated Windows Authentication >> web.config?
>
>
> I knew that already, but I think you misunderstood my
> question or I didn't make myself clear. if simple change the
> mode to "Windows", the page just simple validate the sure on
> the local server, what I want is validating the user at a
> remote server(the PDC),see now my web.config look something like
> this:
>
> <configuration>
> <system.web>
> <compilation debug="true"/>
> <pages smartNavigation="true"/>
> <authentication mode="Windows"/>
> <identity impersonate="true"/>
> <authorization>
> <allow roles="BUILTIN\Administrators,BUILTIN\Users" />
> <deny users="*" />
> </authorization>
> </system.web>
> </configuration>
>
> what tag I can use to point to a remote the PDC user groups?
>
> thx

"Eric Garza" <ega...@amige.NOSPAM.com> wrote in message
news:u2a9MKvbCHA.508@tkmsftngp12...