NT User Authentication?

[Junior1544]

I am building a web app for the first time(I've been tasked with it not long ago)...

What I am looking at now is securing the web app... I have been required to use nt authentication...

How will I be able to use the current users user name in code?? I have been programming with vba for ms access and in that I use:
currentuser()
Is there some thing close to that I can use??

--James
junior1544@jmjpc.net
Life is change. To deny change is to deny life.

 

[Alcar]

James,

there are alot of walkthroughs and tutorials about this. You are looking for ASP.NET Form Authentication.
With the right settings in your web.config file and the right settings in the IIS, you will be able to use an object such as:

[c#]
WindowsPrincipal wp = new WindowsPrincipal(WindowsIdentity.GetCurrent());
strUserName = wp.Identity.Name;


ref:

http://samples.gotdotnet.com/quickstart/aspplus/

good luck! Daren J. Lahey
Just another computer guy...
If you are unsure of forum etiquette check here FAQ796-2540

 

[link9]

Be sure to set up your directory security properly, too.

Turn off anonymous, and turn on Basic & Integrated

This will give you access to the user name of the logged in NT user via:

request.servervariables("auth_user&quot

or

User.Identity.Name

This is, of course, assuming you want to use windows authentication. Alcar's demo there is a forms authentication example (which is arguably better -- if it works for you)

 

[Junior1544]

the main problem as i see it is this.

I will just be in charge of the web pages... a sys admin/web master for the etire organization is in charge of security and the site maintanence and backup's... I just need to write the pages and design the table structure...

Unforunatly it's taking me a while to be able to talk to the web master directly... soon i hope...

--James
junior1544@jmjpc.net
Life is change. To deny change is to deny life.

 

[Alcar]

Well, when it comes to authentication and security, you will need the web server sys admin. It's a team task. My best suggestion is to find enough documentation to foward to the sys admin with your explanation attached to it.

good luck! Daren J. Lahey
Just another computer guy...
If you are unsure of forum etiquette check here FAQ796-2540