windows-authentication

windows server 2016 identity group

谁都会走 提交于 2020-06-01 05:37:05
问题 I opened active directory users and computers, selected builtin and I created a group called Employee, and added my own current user to it. However when checking my groups in code like this I cannot see the Employee group WindowsIdentity identity = WindowsIdentity.GetCurrent(); var myPrincipal = new WindowsPrincipal(identity); identity.Groups.Select(x => "NTAccounts - " + x.Translate(typeof(NTAccount)).ToString() ` and this is all I get, am I doing something wrong ? all I need is to have a

Get authenticated user's groups from Active Directory in Node

非 Y 不嫁゛ 提交于 2020-05-27 11:54:19
问题 We were asked to move our NodeJS app to run under IIS (Windows Server 2012R2) and integrate with an existing Active Directory. We were requested to remove the login page, and instead use Windows Authentication to get the (already authenticated) user's ID, and the use the groups he/she belongs to, to control their authorization level within the app. I've installed iisnode to run my app under IIS, and figured I'll use either passport-windowsauth, or node-activedirectory to get the group

Kerberos Authentication for validating card ID on windows 2012/2016 server

浪子不回头ぞ 提交于 2020-05-17 06:09:07
问题 I would like to perform windows domain authentication using kerberos (AS request) but all I have is a cardID provided by client. I do have username but no password. How to validate the card user as kerberos needs username and password. Any mechanisms to validate card ID using kerberos mechanism on windows 2012/2016 server ? 来源: https://stackoverflow.com/questions/61769720/kerberos-authentication-for-validating-card-id-on-windows-2012-2016-server

ASP.net-core 3.0 - Is it possible to return custom error page when user is not in a policy?

北城以北 提交于 2020-05-16 07:51:50
问题 I'm creating an intranet website and I'm having some trouble with the authentication part. I would like to limit the access for a controller to users in a specific Active Directory Roles. If the user is not in the specified Roles, then it should redirect him to a custom error page. Windows authentication is enabled. I've tried the following solutions : I created a custom policy in my ConfigureServices method inside my Startup.cs : ... services.AddAuthorization(options => { options.AddPolicy(

Why asp.net core app uses different user than AppPool identity for Windows Authentication when connecting to SQL Server?

人盡茶涼 提交于 2020-04-07 07:36:29
问题 I have deployed asp.net core 2.2 web app as a WebSite to IIS. I've set the application pool identity to ApplicationPoolIdentity: [ I can see that System.Security.Principal.WindowsIdentity.GetCurrent() returns IIS APPPOOL\MyCustomAppPool But when I try to connect to SQL Server using connection string: Server=localhost;Database=MyDadatabse;Trusted_Connection=True; I get following error (ignore the german): SqlException: Fehler bei der Anmeldung für den Benutzer "CompanyDomain\ComputerName$".

Windows authentication in linux docker container

纵然是瞬间 提交于 2020-04-07 05:31:20
问题 i am trying to use windows authentication in linux docker container under kubernetes. I am following this settings: https://docs.microsoft.com/en-us/aspnet/core/security/authentication/windowsauth?view=aspnetcore-3.1&tabs=visual-studio#kestrel App is in .net core3, with nuget Microsoft.AspNetCore.Authentication.Negotiate and running in kestrel I have added the services.AddAuthentication(Microsoft.AspNetCore.Authentication.Negotiate.NegotiateDefaults.AuthenticationScheme).AddNegotiate(); as

Saving a Windows login without saving password (like Kerberos ticket)

核能气质少年 提交于 2020-03-25 18:42:13
问题 I would like to automate some administrative tasks in a C# program, and for that I need to acquire credentials (username and password of a domain user with the required rights, for example an Administrator). Then I want to store "the login" securely, so I don't have to ask for it for every task I want to perform. I know multiple official ways to ask for credentials (for example CredUIPromptForWindowsCredentials , or Powershell's Get-Credential ), but these return the username and password in

Saving a Windows login without saving password (like Kerberos ticket)

Deadly 提交于 2020-03-25 18:40:34
问题 I would like to automate some administrative tasks in a C# program, and for that I need to acquire credentials (username and password of a domain user with the required rights, for example an Administrator). Then I want to store "the login" securely, so I don't have to ask for it for every task I want to perform. I know multiple official ways to ask for credentials (for example CredUIPromptForWindowsCredentials , or Powershell's Get-Credential ), but these return the username and password in

Intermittent '401: Unauthorized' exceptions from server

泪湿孤枕 提交于 2020-02-25 05:30:07
问题 I have a web service that is hosted in a clustered environment. The web application that is calling this service is also hosted in a clustered environment, but on a different set of IIS6 servers. Hence, the application servers are appserv1 and appserv2 and the service servers are svcserv1 and svcserv2. We don't control which servers are accessed since we typically just refer to them as either appserv or svcserv, respectively. The service is a WCF Service but has been created to be compatible

Intermittent '401: Unauthorized' exceptions from server

亡梦爱人 提交于 2020-02-25 05:29:07
问题 I have a web service that is hosted in a clustered environment. The web application that is calling this service is also hosted in a clustered environment, but on a different set of IIS6 servers. Hence, the application servers are appserv1 and appserv2 and the service servers are svcserv1 and svcserv2. We don't control which servers are accessed since we typically just refer to them as either appserv or svcserv, respectively. The service is a WCF Service but has been created to be compatible