|
|
You're in the
dotnet security
group:Windows Authentication in VB.Net Application
dotnet security:
I have an application that requires a user name and password so no one
sits down at anyone else's desk and runs the application as that user. I don't want to create a database to store user names and passwords. All I want to do is prompt the user for their Windows user name and password and verify it against the domain and not their local system. This is so users can run the application on other user's systems without having to log in to that system. This is necessary so that managers and supervisors can access the application at any workstation. I haven't found any nice code examples demostrating an effective way to check user credentials in a windows forms application. Does anyone have any thoughts, suggestions? Thanks.
You can basically either use the LogonUser API (which has a wrapper
documented in the code sample for the WindowsImpersonationContext class) or you can use SSPI directly, which is normally done using the NegotiateStream class. In order to provide the UI, you should probably use CredUIPromptForCredentials. Joe K. -- Joe Kaplan-MS MVP Directory Services Programming Co-author of "The .NET Developer's Guide to Directory Services Programming" http://www.directoryprogramming.net -- [quoted text, click to view] "Rocky Neurock" <jneurock@gmail.com> wrote in message news:1156945423.034903.260650@i42g2000cwa.googlegroups.com... >I have an application that requires a user name and password so no one > sits down at anyone else's desk and runs the application as that user. > I don't want to create a database to store user names and passwords. > All I want to do is prompt the user for their Windows user name and > password and verify it against the domain and not their local system. > This is so users can run the application on other user's systems > without having to log in to that system. This is necessary so that > managers and supervisors can access the application at any workstation. > > I haven't found any nice code examples demostrating an effective way to > check user credentials in a windows forms application. Does anyone > have any thoughts, suggestions? Thanks. >
I looked into the example for the WindowsImpersonationContext class and
it said that it would only work with XP and we use 2K. I tried it anyway and I could not get it to work. I also looked for NegotiateStream and that said it was part of the 2.0 framework and we are working with the 1.1 framework. Any other ideas? [quoted text, click to view] Joe Kaplan wrote:
> You can basically either use the LogonUser API (which has a wrapper > documented in the code sample for the WindowsImpersonationContext class) or > you can use SSPI directly, which is normally done using the NegotiateStream > class. > > In order to provide the UI, you should probably use > CredUIPromptForCredentials. > > Joe K. > > -- > Joe Kaplan-MS MVP Directory Services Programming > Co-author of "The .NET Developer's Guide to Directory Services Programming" > http://www.directoryprogramming.net > -- > "Rocky Neurock" <jneurock@gmail.com> wrote in message > news:1156945423.034903.260650@i42g2000cwa.googlegroups.com... > >I have an application that requires a user name and password so no one > > sits down at anyone else's desk and runs the application as that user. > > I don't want to create a database to store user names and passwords. > > All I want to do is prompt the user for their Windows user name and > > password and verify it against the domain and not their local system. > > This is so users can run the application on other user's systems > > without having to log in to that system. This is necessary so that > > managers and supervisors can access the application at any workstation. > > > > I haven't found any nice code examples demostrating an effective way to > > check user credentials in a windows forms application. Does anyone > > have any thoughts, suggestions? Thanks. > >
Thanks Dominick, that solved my problem. I hope everyone else with the
same problem checks this post. [quoted text, click to view] Dominick Baier wrote:
> On w2k you need very high privileges to call LogonUser - i found Keith's > old SSPI Verififer that works on w2k as a normal user. > > http://www.develop.com/technology/resourcedetail.aspx?id=ee929f0b-1f9d-4a2a-92a1-911706bd7b52 > > --- > Dominick Baier, DevelopMentor > http://www.leastprivilege.com > > > I looked into the example for the WindowsImpersonationContext class > > and it said that it would only work with XP and we use 2K. I tried it > > anyway and I could not get it to work. I also looked for > > NegotiateStream and that said it was part of the 2.0 framework and we > > are working with the 1.1 framework. Any other ideas? > > > > Joe Kaplan wrote: > > > >> You can basically either use the LogonUser API (which has a wrapper > >> documented in the code sample for the WindowsImpersonationContext > >> class) or you can use SSPI directly, which is normally done using the > >> NegotiateStream class. > >> > >> In order to provide the UI, you should probably use > >> CredUIPromptForCredentials. > >> > >> Joe K. > >> > >> -- > >> Joe Kaplan-MS MVP Directory Services Programming > >> Co-author of "The .NET Developer's Guide to Directory Services > >> Programming" > >> http://www.directoryprogramming.net > >> -- > >> "Rocky Neurock" <jneurock@gmail.com> wrote in message > >> news:1156945423.034903.260650@i42g2000cwa.googlegroups.com... > >>> I have an application that requires a user name and password so no > >>> one sits down at anyone else's desk and runs the application as that > >>> user. I don't want to create a database to store user names and > >>> passwords. All I want to do is prompt the user for their Windows > >>> user name and password and verify it against the domain and not > >>> their local system. This is so users can run the application on > >>> other user's systems without having to log in to that system. This > >>> is necessary so that managers and supervisors can access the > >>> application at any workstation. > >>> > >>> I haven't found any nice code examples demostrating an effective way > >>> to check user credentials in a windows forms application. Does > >>> anyone have any thoughts, suggestions? Thanks. > >>>
On w2k you need very high privileges to call LogonUser - i found Keith's
old SSPI Verififer that works on w2k as a normal user. http://www.develop.com/technology/resourcedetail.aspx?id=ee929f0b-1f9d-4a2a-92a1-911706bd7b52 --- Dominick Baier, DevelopMentor http://www.leastprivilege.com [quoted text, click to view] > I looked into the example for the WindowsImpersonationContext class > and it said that it would only work with XP and we use 2K. I tried it > anyway and I could not get it to work. I also looked for > NegotiateStream and that said it was part of the 2.0 framework and we > are working with the 1.1 framework. Any other ideas? > > Joe Kaplan wrote: > >> You can basically either use the LogonUser API (which has a wrapper >> documented in the code sample for the WindowsImpersonationContext >> class) or you can use SSPI directly, which is normally done using the >> NegotiateStream class. >> >> In order to provide the UI, you should probably use >> CredUIPromptForCredentials. >> >> Joe K. >> >> -- >> Joe Kaplan-MS MVP Directory Services Programming >> Co-author of "The .NET Developer's Guide to Directory Services >> Programming" >> http://www.directoryprogramming.net >> -- >> "Rocky Neurock" <jneurock@gmail.com> wrote in message >> news:1156945423.034903.260650@i42g2000cwa.googlegroups.com... >>> I have an application that requires a user name and password so no >>> one sits down at anyone else's desk and runs the application as that >>> user. I don't want to create a database to store user names and >>> passwords. All I want to do is prompt the user for their Windows >>> user name and password and verify it against the domain and not >>> their local system. This is so users can run the application on >>> other user's systems without having to log in to that system. This >>> is necessary so that managers and supervisors can access the >>> application at any workstation. >>> >>> I haven't found any nice code examples demostrating an effective way >>> to check user credentials in a windows forms application. Does >>> anyone have any thoughts, suggestions? Thanks. >>>
Don't see what you're looking for? Try a search.
|
June 2004
July 2004
August 2004
September 2004
October 2004
November 2004
December 2004
January 2005
February 2005
March 2005
April 2005
May 2005
June 2005
July 2005
August 2005
September 2005
October 2005
November 2005
December 2005
January 2006
February 2006
March 2006
April 2006
May 2006
June 2006
July 2006
August 2006
September 2006
October 2006
November 2006
December 2006
January 2007
February 2007
March 2007
April 2007
May 2007
June 2007
July 2007
August 2007
September 2007
October 2007
November 2007
| home · blog · groups | Questions? Comments? Contact the dn |