Authenticated username

[cleanair4me46]

I have a request to use Intranet Windows login to view restricted ASP.Net web pages where user doesnt have to log into a restricted site.

I can use IIS authenticated user where the IIS permissions will allow a specific user to with Intranet login account to automatically login (with their Intranet Windows username) to my restricted site. Or I can use LDAP but not familiar with LDAP and what the difference would be?

 

[vicvirk]

You can turn off the anonymous access to your site within IIS security settings and then assign a group with access to the site in your Windows Active Directories.

That groupd you define (i.e. webAccess) will have members which are the users you want to give access to.

When someone tries to access the site, they'll be prompted with a windows modal box that asks for their credentials - this is the best way to do it as the username/password are all controlled in on place.

You can access the name of the user logged in by using the "AUTH_USER" server variable.

There is also a 3rd party compontent called ASPUSER, put out by persits - I've never used that particular one, but their other components are great (jpeg, email, upload, pdf...etc).

http://www.aspuser.com/

TIP: trying googling the answer before posting, you'll find that more times than not someone else somewhere has had the same request and posted an answer online.
----
I have recently been semi-converted to ensuring all my code (well most of it) works in both javascript and non-javascript enabled browsers

 

[cleanair4me46]

Thanks,

I assume using the AUTH_USER you are talking about is different than LDAP and I shouldnt consider using LDAP?

 

[vicvirk]

I've never user LDAP, so I won't give any advice on it one any or another...

I do know that if you have an authenticated user on your network (or site), that <%=request.serverVariables("AUTH_USER") %> will display the authenticated user name of the user.



TIP: trying googling the answer before posting, you'll find that more times than not someone else somewhere has had the same request and posted an answer online.
----
I have recently been semi-converted to ensuring all my code (well most of it) works in both javascript and non-javascript enabled browsers

 

[cleanair4me46]

Thanks, it seems using AUTH_USER on IIS is so much easier (and convenient) than using LDAP from what I read about both.