ASP login -- inetserver asp components

Jason
10/8/2003 9:13:42 AM

Thanks, Tom! I'm gonna try it out.

[quoted text, click to view]

Jason
10/8/2003 9:41:40 AM

Tom,
The script is authenticating everything (even bogus
username/password combinations)

any advice?

here is the result I get when I input a bogus user account
(user:ddd password: ddd) -

Authenticating...

USER AUTHENTICATED!
Currently viewing object at WinNT://VSDPC/testserver
Class is Computer

[quoted text, click to view]

Ray at <%=sLocation%
10/8/2003 11:47:41 AM

Easiest thing to do is turn off anonymous access to your site.

Ray at work

[quoted text, click to view]

Tom Kaminski [MVP]
10/8/2003 11:52:19 AM

[quoted text, click to view]

<html>
<head>
</head>
<body>
<form action=authad.asp method=post>
Username: <input type=text name=strUserName> 
Password: <input type=password name=strPassword> 
<input type=submit name=btnSubmit>
</form>
<%
If Request.Form("strUsername") <> "" Then
Dim strADsPath
strADsPath = "WinNT://yourdomain"

'userid =
strUserName = "yourdomain\" & Request.Form("strUserName")
strPassword = Request.Form("strPassword")

if (not strADsPath= "") then 'if and ADS Object path has been provided
proceed with authentication

' bind to the ADSI object and authenticate Username and password
Dim oADsObject
Set oADsObject = GetObject(strADsPath)
response.write "Authenticating... "
Dim strADsNamespace
Dim oADsNamespace
strADsNamespace = left(strADsPath, instr(strADsPath, ":"))
set oADsNamespace = GetObject(strADsNamespace)
Set oADsObject = oADsNamespace.OpenDSObject(strADsPath, strUserName,
strPassword, 0)
' we're only bound if err.number = 0
if not (Err.number = 0) then
Response.Write "Authentication has
failed..."
'Response.Write "Failed to bind to object " & strADsPath & " "
'response.write err.description & ""
'Response.write "Error number is " & err.number & " "
Session("Auth") = "NO"
else
Response.Write "USER AUTHENTICATED! "
'Response.Write "Currently viewing object at " & oADsObject.ADsPath &
" "
'Response.Write "Class is " & oADsObject.Class & " "
Session("Auth") = "YES"
end if
'response.write ""
end if
End If
%>
</body>
<html>

--
Tom Kaminski IIS MVP
http://www.iistoolshed.com/ - tools, scripts, and utilities for running IIS
http://mvp.support.microsoft.com/
http://www.microsoft.com/windowsserver2003/community/centers/iis/

Tom Kaminski [MVP]
10/8/2003 1:23:32 PM

I'm not sure what to tell you, it works fine for me. Did you substitute in
your correct domain name?
You also need to throw in "on error resume next" as the first line of ASP
code.

--
Tom Kaminski IIS MVP
http://www.iistoolshed.com/ - tools, scripts, and utilities for running IIS
http://mvp.support.microsoft.com/
http://www.microsoft.com/windowsserver2003/community/centers/iis/

[quoted text, click to view]

Got something to say? Click here to post a reply to this thread.

Don't see what you're looking for? Try a search.

View other messages about inetserver asp components

inetserver asp components : ASP login