user rights question

[Guest]

Hi,

I'm currently writing a .net (VB) windows forms application that consumes a
(also VB) .net webservice. The access to this webservice shall be secured by
SSL and authentification - and here I encounter a problem:

How can I use/retrieve the local user's credentials (user name and password)
to authentificate as a client to the webservice? And how is it possible to
retrieve the username of the currently consuming client in my webservice code?

(The key is to deliver the same information by the webservice to any
computer a specific user logs on given that my software is installed).

Any ideas or hints?

Best wishes,

Andreas

 

[Peter Huang [MSFT]]

Hi Andreas,

If we are using Windows NTLM authentication, the password is strored after
hashed.
That is to say, even if the Administrator can not retreive back the
password, he can only reset the password for you if you forgot your
password.

So in the Web applcation, we can only retrieve current user's name but not
password.
HttpContext.User Property

Because at the serverside, if the server can not get the user's name and
password pair, he can do anything based on the user's identity which will
cause security leak.

For your concern, that pass through the user credentials to another web
site. That is called Single-Sign-On technology.
Here is link for your reference about how to implement Single-Sign-On.
Apply Single-Sign-On to your application
http://www.codeproject.com/dotnet/LDAPSSO.asp

Apply Single-Sign-On to Your Application
http://www.aspfree.com/c/a/ASP/Apply-Single%98Sign%98On-to-Your-Application/

Best regards,

Peter Huang

Microsoft Online Community Support
==================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
==================================================
This posting is provided "AS IS" with no warranties, and confers no rights.