windows-authentication

Verify that the currently authenticated windows user has delegation rights

可紊 提交于 2019-12-12 12:42:00
问题 Given that I have a WCF service using windows authentication, and I want to impersonate them and call another WCF service, like so: using (ServiceSecurityContext.Current.WindowsIdentity.Impersonate()) { // call another WCF service } I've set all the config settings and it works fine, as long as on the client side,they include the following line: client.ClientCredentials.Windows.AllowedImpersonationLevel = TokenImpersonationLevel.Delegation; But, how do I verify before trying to make the call

How does WCF Windows authentication work without explicitly setting credentials

筅森魡賤 提交于 2019-12-12 10:49:43
问题 I have an asp.net web application that makes calls to several WCF services. The web app is located at www.mydomain.com and the services are at services.mydomain.com. They are hosted from the same server. I've just added secure endpoints (bassicHttpBindings) to the services that use Transport security (https) and Windows authenication: <binding name="WindowsSecuredBinding"> <security mode="Transport"> <transport clientCredentialType="Windows" /> </security> </binding> and configured the client

ASP.NET Windows Authentication Not Working/Not Accepting Credentials

Deadly 提交于 2019-12-12 10:48:39
问题 I've been trying to resolve this question for a couple weeks now via Google and reading SO, and not had much luck, so I thought I'd finally try asking myself. I'm setting up a very, very simple ASP.NET site on our intranet to generate some information for internal users. I'm using Windows authentication, rather than anonymous access, because based on what user hits the site I will be generating different information. Long story short, this works perfectly in testing on my local Windows 7

How to delegate Windows Authentication session when running an app on IIS 8?

。_饼干妹妹 提交于 2019-12-12 10:35:15
问题 I have an intranet application written with c# on the top of ASP.Net MVC 5 Framework. My app is configured to authenticate users via "Windows Authentication" method. This app is running on IIS 8. My app uses a third party SDK to interact with another program I have running on the same domain. This third party app allows the user to login using Windows Authentication also via the provided SDK. Problem However the server where the SDK is communication with is always returning "Invalid user name

User.IsInRole(“fake group”) results in “The trust relationship between the primary domain and the trusted domain failed”

落爺英雄遲暮 提交于 2019-12-12 10:34:01
问题 I have an MVC 3 app, using Windows Authentication with Claims using WIF 4.5. Access to the application is controlled (currently) via membership in an AD group: <deny users="?" /> <allow roles="domain\somegroup" /> <deny users="*" /> In addition to the AD groups, we have custom roles that need to be added. (This app is being converted from Forms to Windows authentication) To support these custom roles (until they are managed in AD), we are adding them as ClaimTypes.GroupSid claims to the user,

How to mix WIF and non-WIF endpoints in a single WCF <service>?

青春壹個敷衍的年華 提交于 2019-12-12 09:09:12
问题 A WIF-based WCF service needs to call method FederatedServiceCredentials.ConfigureServiceHost(), or put the equivalent element <federatedServiceHostConfiguration> in the web.config file, to work. This is a setting on the service level, in other words it applies for all endpoints. According to the method documentation, the ServiceHostBase instance is modified in several WIF-specific ways. For example, the authorization is replaced by a WIF-based authorization class. Now I'd like to have a

Setting Up Windows Authentication for Apache

我只是一个虾纸丫 提交于 2019-12-12 08:50:02
问题 To begin, I've been searching the internet for about an hour trying to find out how to do this with no success - therefore I'm writing this question. I have an intranet site that requires to access the users Windows Username (not the server running Apache, but a user accessing the intranet site). I have installed adLDAP and have it working where a user can log in by that, to check the group that the user is in. But, to have my site more secure I'd rather it access the Windows username. I've

Is it possible to restrict windows authenticated users in an ASPNet app to specific domains?

三世轮回 提交于 2019-12-12 05:39:12
问题 I'm in the process of pulling a classic ASP app into Mvc2. I'll be deploying to an intranet and have been asked to enable support for Windows Authentication. The network I'll be deploying to has a few AD Domains and I'll only need to integrate with one in particular. Is it possible to use Windows Authentication and only allow authentication within a particular domain? Along those same lines, it's not uncommon for a user to have an account in multiple domains (the account names themselves are

Mixing Windows Authentication with SQL Server Custom Authentication MVC3

僤鯓⒐⒋嵵緔 提交于 2019-12-12 05:24:34
问题 I would like authenticate the user based on User.Identity.Name and get the other detail from SQL Server database like Role and last loggedin date, etc. After login i should authorize the same user for subsequent calls without hitting database. However i hit and load the user information at initial login and i stored in session. Here is my SQL Table ApplicationUser UserId -> windows identity name mapping stored here Display Name RoleId LastLoginDate IsActive Login Controller logic public

Access TFS via its API using Windows Authentication

时光总嘲笑我的痴心妄想 提交于 2019-12-12 04:39:13
问题 All, I am using the ASP.Net MVC 4 application. I have enabled Windows Authentication . Till now it is working fine. Now I enhanced the application to connect to TFS via its API. For this, I need to use the windows authentication credentials. I have tried using ICredentialsProvider credential = new UICredentialsProvider(); TfsTeamProjectCollection teamProjectCollection = new TfsTeamProjectCollection(collectionUri, credential); This works great in the development environment. But when I host