ASP.NET Windows + Database Authentication

Question

I have two text boxes (user and password) and drop-down list (domain) to authenticate user using Adcive Directory and database. Now when user clicks "Login" button his credentials are checked in Active Directory and if its authinticated, next method checks if user exists in database and checs its role. I would like to remove the logon page and enable automatically authentication using Windows authentication. I have changed the web.config file and chenged

<authentication mode="Forms">
  <forms loginUrl="~/LogIn.aspx" timeout="60" name="AuthCookie"/>
</authentication>

to

<authentication mode="Windows"></authentication>
<identity impersonate="true"/>

Now I would like to know how can I check if user exists in the database and check its role?

Thank you for your replies.

Using Windows Authentication will cause your application to query Active Directory, not your existing user database. — Garrison Neely
– Garrison Neely, Commented Sep 30, 2013 at 16:59
You probably don't want to use impersonation. Impersonation makes the worker process run as the logged in user, which means it will try to connect to the database as the windows user. Unless you've defined roles to allow the user to access the database, this probably isn't what you want. — Erik Funkenbusch
– Erik Funkenbusch, Commented Sep 30, 2013 at 17:47
@Mystere Man - I have functional ID which connects to the database. Generally my point is to combine windows authentication with checking if user exists in database. — ironcurtain
– ironcurtain, Commented Sep 30, 2013 at 17:55
I have no idea what you mean by "functional id". The point I was making was that if you use impersonation, then IIS connects to the database using the credentials of whatever user is logged in, not the credentials of the application. — Erik Funkenbusch
– Erik Funkenbusch, Commented Sep 30, 2013 at 19:29

Dai · Accepted Answer · 2013-09-30 19:05:15Z

1

You'll need to implement your own authentication provider that will wrap both an AD backend and your own application's account database. You'll want to disable IIS' built-in Windows Authentication provider because your version will provide the implementation to use.

answered Sep 30, 2013 at 19:05

Dai

157k31 gold badges314 silver badges436 bronze badges

Sign up to request clarification or add additional context in comments.

3 Comments

Dai Over a year ago

@ironcurtain No, not really - I described an approach. The implementation depends on your existing infrastructure, so it would be impossible for me to write any code for it because you haven't provided sufficient detail.

ironcurtain Over a year ago

If you wish I can provide You some details (eg. code I've already wrote). Just let me know what would be the best for you. Thanks

Dai Over a year ago

@ironcurtain You'd have to pay me too, my rate is $120USD/hour :)

Collectives™ on Stack Overflow

ASP.NET Windows + Database Authentication

1 Answer 1

3 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

3 Comments

Your Answer

Sign up or log in

Post as a guest

Related