windows-authentication

ASP.NET MVC and Windows Authentication with custom roles

孤街浪徒 提交于 2019-11-27 04:02:40
问题 I am trying to implement windows authentication in my ASP.NET MVC2 application. I've followed all the steps suggested by the official documentation: <authentication mode="Windows" /> <authorization> <deny users="?" /> </authorization> I've specified NTLM Authentication. So far so good. Everything works fine. I would like to check the users logged-in against my database. I would like to fetch roles from my table and then manage the authorization using a custom attribute. I don't want to use

IIS7: Setup Integrated Windows Authentication like in IIS6

…衆ロ難τιáo~ 提交于 2019-11-27 03:42:41
This is for IIS 7 on a Windows Server 2008 that is not part of an AD domain. I would like to password protect a website, where people have to enter a username/password (a windows account for example) to view the website. The website would then use its own authentication method (forms) to handle user accounts and decide whether or not to show member specific pages, etc. With IIS6, we just disabled anonymous access and enabled integrated windows authentication. IIS7 behaves differently and when I enter the windows username/password to view the site, the site comes up fine but redirects to the

Asp.Net core MVC application Windows Authentication in IIS

ぐ巨炮叔叔 提交于 2019-11-27 03:23:43
问题 My Asp.Net Core mvc web application requires Windows Authentication. In developpement, on IIS Express, everything works fine thanks to this setting launchSettings.json "iisSettings": { "windowsAuthentication": true, "anonymousAuthentication": false, "iisExpress": { "applicationUrl": "http://localhost:61545/", "sslPort": 0 } } When deploying to IIS, I get a blank page. The Request to my site get a 500 error code. I tried to add this configuration to Startup.cs, as explained here , without

Integrated Windows Authentication (NTLM) in a Java/WebLogic app?

醉酒当歌 提交于 2019-11-27 02:59:55
问题 Our team built a WebLogic intranet site. Users currently must type in their Active Directory login/password to access the site. Since most of our users are already logged in to the domain, we would like to use Integrated Windows Authentication so users do not have to re-type their login password. I have done this with .NET applications hosted on Windows/IIS. However, this app is built in WebLogic/Java and is hosted on RedHat Linux. Is there a step-by-step guide or prototype application

ASP.NET MVC - Authenticate users against Active Directory, but require username and password to be inputted

余生颓废 提交于 2019-11-27 02:42:00
I'm developing a MVC3 application that will require a user to be authenticated against an AD. I know that there is the option in MVC3 to create an Intranet Application that automatically authenticates a user against an AD, but it uses Windows Authentication and automatically logs them on. This application may be accessed on 'Open' workstations where the user will need to enter their Domain Username and Password. Any examples or online tutorial would be great. An example project would be exceptional. Khepri You can use the standard Internet application template with forms authentication and

Windows authentication in asp.net 5

眉间皱痕 提交于 2019-11-27 01:45:21
I am building an intranet application in ASP .NET 5, MVC 6. I want to know how to enable Windows Authentication.? The default project template supports only Individual User Accounts. zemien Mark's answer is still valid in ASP.Net RC1. There are some additional steps to tie it all together (I don't have enough reputation to comment on his solution): Install WebListener from NuGet Add the following usings to Startcup.cs: using Microsoft.AspNet.Http.Features; using Microsoft.Net.Http.Server; Add Mark's code snippet in the Configure method before app.UseMvc: // If we're self-hosting, enable

Windows authentication failing in IIS 7.5

社会主义新天地 提交于 2019-11-27 00:59:27
问题 I'm building a simple internal application for my company, and it requires Windows Authentication for security. All other authentication modes are disabled. I'm stuck in a situation where internet explorer prompts for credentials 3 times, then fails with this error: Not Authorized HTTP Error 401. The requested resource requires user authentication. I then created a bare-bones website to test this out. I created a new site in IIS, put it on its own port (:8111, chosen at random), put one

Client-server authentication - using SSPI?

我们两清 提交于 2019-11-27 00:59:01
问题 I'm working on a client-server application and I want the client to authenticate itself to the server using the user's logon credentials, but I don't want the user to have to type in their user name and password. I certainly don't want to be responsible for securely handling passwords. I only need the user to prove to me that they are who they say they are, and then my server can go ahead and grant/deny commands as it pleases. My users are part of a domain, and so I want to be able to use the

ASP.NET MVC How to create a custom role provider

断了今生、忘了曾经 提交于 2019-11-27 00:58:16
问题 Being relatively new to ASP MVC, I'm unsure which would better suit my needs. I have built an intranet site using Windows authentication and I'm able to secure controllers and actions using the Active Directory roles, e.g. [Authorize(Roles="Administrators")] [Authorize(Users="DOMAIN\User")] public ActionResult SecureArea() { ViewBag.Message = "This is a secure area."; return View(); } I need to define my own security roles independent of the AD roles. The desired functionality is that

'Login as another user' MVC 4 Windows Authentication

こ雲淡風輕ζ 提交于 2019-11-27 00:47:57
问题 I have an intranet project written in MVC 4 which uses Windows Authentication to authorise and authenticate users. I need to add a 'Login as another user' functionality. After some searching I found this solution which suggests returning a 401, and created the following Action (which is called using a form): // // POST: /Home/LogOut [HttpPost] [ValidateAntiForgeryToken] public ActionResult LogOut() { return new HttpUnauthorizedResult(); } The Action gets called, and the browser pops up a