login screen

[Guest]

Hello,
I need to create a login page in my asp.net application. UserId and password
should be active directory userid and password. How can I do that?
Thanks,
Jim,

 

[Cowboy \(Gregory A. Beamer\)]

Internet or Intranet? For Intranet, turn off anonymous access and let
Windows take over. It is, by far, easier, than coding this. For Internet,
you have a bigger issue, as you normally have a mix of AD users and Internet
users. If this is not the case, go back to the idea of no anon access.

For Internet cases where a portion is user login, you can make a "subweb"
that is no anon access.

Yes, there are ways to programatically solve this, but it is much easier to
make a project that has no anon access and protect the pages you desire in
this project than it is to authenticate forms auth to AD. In addition, you
are more likely to program a security hole than Microsoft, and one can see
the attacks against the MS OSs.

--
Gregory A. Beamer
MVP; MCP: +I, SE, SD, DBA

*************************************************
Think outside the box!
*************************************************

 

[Guest]

Hi,
you can use the System.DirectoryServices namespace to work with your task


Nishith

 

[Nick Malik]

Haven't tried, but here is how I'd do this.

1) Create a login page that is in the base directory.
2) Create a subdirectory that only members of your AD group have access to.
3) When a user visits the login page, get the userid and password. Then
create a credential using that userid and password. Apply the credential
(which fails if the user isn't known).
4) redirect to the subdirectory.

There's probably a nice way to merge this with forms auth... I'll see if I
can look into this and come up with a nice answer. However, here's a link
that may help.

http://msdn.microsoft.com/library/d...de/html/cpconaspnetwebapplicationsecurity.asp
--- Nick