User authentification on web applications

[Junky]

Hi folks,

well, I've read some articles on authentification, but somehow I can't
get along with what I need.

I need to get the login name from the OS to check if this person is
even able to start the application. If so, the person should get login
window for the web application that is checked against a user
database.
I tried to use "Windows" and "Forms" authentification, but it doesn't
do what I need! Every time I try to get the username of the windows
user, I get either this damn ASPNET user or some other stuff.

I understand that the client logs on the the IIS as ASPNET, but how
can I get the currently logged in on the OS?

Thanks in advance,
Junky

 

[Peter Jausovec]

Hi,

Did you use <identity impersonate="true" /> in your web.config file ?

 

[Guest]

Like Peter said you can use identity impersonate to force ASPNET to log on to
IIS as the windows user. But it's better to let it just operate as itself -
and make the user type their username, if there's any security considerations
whatsoever. It's more secure generally that way. You can set it so that
cookies remember what user it is, and log them in automatically.