How to determine if the request is coming from a particular windows domain

Question

I am developing a web application with MVC-3

I want to give the users of a particular windows domain some special privileges; therefore I have to determine whether the request is coming from that particular domain.

Please note that I am using Forms authentication.

I know that I can do this by tracking the IP address of the user. But is there a way to directly get the domain name?

For example, if the user is logged in as ADomain\AUsername in a windows machine, is there a way to get ADomain?

[How to Use Forms Authentication with Active Directory in Multiple Domains](http://msdn.microsoft.com/en-us/library/ff650307.aspx) — Robert Harvey, Aug 08 '12 at 05:29
@RobertHarvey: It says *"This content is outdated and is no longer being maintained...."*. Should I continue with this? — Mohayemin, Aug 08 '12 at 05:32
@RobertHarvey - the techniques described there don't work in IIS7 or greater. — Erik Funkenbusch, Aug 08 '12 at 05:33

score 2 · Accepted Answer · answered Aug 08 '12 at 05:32

The answer is, maybe and sometimes. First, only Internet Explorer passes credentials through to the server. Second, the server must be on the same domain as the client, third there can't be any proxies or other things in between. Both computer and client must be on the same network as well.

Even with all that, it still only works sometimes. What version of IIS? If it's IIS7 or greater, then there are other issues where you can't combine forms authentication and windows authentication. If you're using IIS6, then it might be able to be done, but it's a huge pain.

In practice, I wouldn't bother.. it's just too much effort for saving the users from typing in their username and password.

*it's just too much effort for saving the users from typing in their username and password.* Yes, yes it is. I think I should simply avoid it. — Mohayemin, Aug 08 '12 at 05:37

score 2 · Answer 2 · answered Sep 06 '13 at 18:30

2

You can get domain name using UrlReferrer of the request object.

string Domain Name = Request.UrlReferrer.Host;

Also if you want to check in your application that whether the request is coming from different domain or not then please try to verify the hostname of the URL referrer with the hostname of your own application URL. Please use the below code

(if Request.Url.Host != Request.UrlReferrer.Host)
{
}

answered Sep 06 '13 at 18:30

Sreekanth P

21
1

Not what the OP is asking for. – Jordan Dec 11 '18 at 13:58

How to determine if the request is coming from a particular windows domain

2 Answers2