Home | Contact Us | FAQ | Search & Site Map | Link to Us
Sign In | Join | Other 45 Sites in Network
HomeAnnouncementsFree MagazinesWhite PapersSubmit Content
Discussion GroupsASP.NETWindows FormsLanguages.NET FrameworkVisual Studio.NET
Articles.NET FrameworkASP.NETToolsWindows Forms
.NET DirectoryOpen Source ProjectsUser GroupsWeb Resources
Related Topics
Visual Basic 6SQL ServerMS AccessOther DB ProductsMS Server ProductsMore Topics ...

.NET Forum / ASP.NET / Security / November 2003

Tip: Looking for answers? Try searching our database.

q: asp.net: changing logon time to get LOGON32_LOGON_NETWORK_CLEARTEXT ?

Thread view: 
Enable EMail Alerts  Start New Thread
Thread rating: 
Juri Zenkevitch - 26 Nov 2003 12:55 GMT
Hi All !

I get into the problem... My web application, which uses authentication
mode="Windows", so the app will impersonate under the user, which access
it's pages. In the application, I do use
"Microsoft.Win32.RegistryKey.OpenRemoteBaseKey", which fails, because the
app identity was (probably) logged on w/out the NETWORK_CLEARTEXT flag
(LogonUser).

So, the question is: can I change that flag somehow for current application
identity ? I can not do the LogonUser, because my server-side code do not
have the password for user, only it's identity (token) in Principal
object...

Any ideas ?

Thank you,

Yury.
Juri Zenkevitch - 26 Nov 2003 15:15 GMT
Err, I meant to say "logon type" in subject :)

> Hi All !
>
[quoted text clipped - 15 lines]
>
> Yury.
Brian C - 27 Nov 2003 02:27 GMT
Yury,
mode="Windows"  will not insure that the the app will
impersonate under the user. However, this will:

<identity impersonate="true" />

It is likely that the users are using the local ASPNET
user.

Brian

>-----Original Message-----
>Err, I meant to say "logon type" in subject :)
[quoted text clipped - 21 lines]
>
>.

Free Magazines

Get these publications absolutely FREE for up to 12 months. There are no hidden fees and no obligation. Simply choose a title, complete the application form and submit it. Read more ...

Oracle MagazineNetwork ComputingComputer WorldBio-IT WorldeWeekInformation WeekInfosecurity
 
Sign In
Join
My Latest Posts
My Monitored Threads
My Blog
My Photo Gallery
My Profile
My Homepage

Start New Thread
Enable EMail Alerts
Rate this Thread



©2008 Advenet LLC   Privacy Policy - Terms of Use
This website includes both content owned or controlled by Advenet as well as content owned or controlled by third parties.