Questions tagged [windows-authentication]

Integrated Windows Authentication is a term associated with Microsoft products that refers to the SPNEGO, Kerberos, and NTLM authentication protocols. Use tag with Windows authentication generally; though it might be best to use one of the more protocol-specific tags (such as Kerberos or NTLM) if the protocol being used is known.

Integrated Windows Authentication () is a term associated with Microsoft products that refers to the , , and authentication protocols with respect to functionality introduced with Microsoft Windows 2000 and included with later Windows NT-based operating systems. The term is used more commonly for the automatically authenticated connections between Microsoft Internet Information Services (), , and other aware applications.

IWA is also known by several names like HTTP Negotiate authentication, NT Authentication, NTLM Authentication, Domain authentication, Windows Integrated Authentication, Windows NT Challenge/Response authentication, or simply Windows Authentication.

Source: http://en.wikipedia.org/wiki/Integrated_Windows_Authentication

3028 questions
6
votes
1 answer

How to allow mixed-mode authentication in IIS 7.0

How do you back-door authenticate Windows users into a website using forms authentication running on IIS 7.0?
Brad
  • 15,361
  • 6
  • 36
  • 57
6
votes
3 answers

How do I get the username of the current user in a Flask app on an IIS server using Windows Authentication?

I have a Flask app (Python 2.7) running on an IIS server in Windows 10. The server is configured to use Windows Authentication. I am using an HttpPlatformHandler in order to execute the Python code. I have verified that the authentication is…
scomes
  • 1,756
  • 14
  • 19
6
votes
1 answer

How to add windows user as a SQL users in windows authentication mode

I want to add windows user to SQL users pragmatically. my problem is that I want to do this on systems that have SQL installed in mixed mode but I don't have username and password , I just know the instance name and I don't know how can I execute my…
Shima.Y
  • 373
  • 4
  • 9
  • 18
6
votes
1 answer

AcceptSecurityContext fails when application is running as a service

I have a simple HTTP server that authenticates clients with Negotiate protocol. It uses SSPI calls to acquire server credentials and establish security context. The server is in domain and is running on behalf of the domain user. Everything works…
username
  • 3,378
  • 5
  • 44
  • 75
6
votes
1 answer

Asp.net and Kerberos Authentication

Im trying to do a Asp.net MVC , using Kerberos authentication. So far i haven't found a good example of how to implement this. How do i implement something like a user getting access to a API server(where i would get the info to display on the…
Thought
  • 5,326
  • 7
  • 33
  • 69
6
votes
1 answer

cntlm proxy with phantomjs

I'm trying to use the cntlm proxy on my windows machine to talk to a local web application on IIS that uses Windows Authentication from PhantomJS. To create the proxy, I'm doing: cntlm -v -u username@domain -p password -l 1456 localhost:80 My app…
itslittlejohn
  • 1,808
  • 3
  • 20
  • 33
6
votes
1 answer

Preventing negotiation handshake on subsequent service calls

I'm calling out to a SOAP service which uses Windows authentication. This is my configuration: new BasicHttpBinding { Security = new BasicHttpSecurity { Mode = BasicHttpSecurityMode.TransportCredentialOnly, Transport = new…
Cory Nelson
  • 29,236
  • 5
  • 72
  • 110
6
votes
2 answers

Time lag in changes to Active Directory security groups and User Roles

I am using Active Directory to assign the roles for users in my web application. However I am finding that there seems to be a long time lag between changing a user security group allocation in AD, and those changes propagating to users who are…
arame3333
  • 9,887
  • 26
  • 122
  • 205
6
votes
3 answers

Visual Studio 2015 vNext and Windows Authentication

How do I configure a project to use Windows Authentication? Now that there are no web.config files, I cannot see how to do this. I see the app.UseIdentity() in Startup, but no idea how to use Windows Auth with IIS Express. When I try to create a…
6
votes
1 answer

With windows authentication, The trust relationship between the primary domain and the trusted domain failed, when calling IsInRole

I have my asp.net web server setup to use windows authentication. It is authenticating just fine with my current logged in user. I can verify this by viewing ... HttpContext.Current.User.Identity.Name And I can verify that I am authenticated by…
yamspog
  • 18,173
  • 17
  • 63
  • 95
6
votes
1 answer

wsHttpbinding with TransportWithMessageCredential and windows authentication

I have an IIS hosted WCF service with the following binding configuration (I removed all the attributes from the binding for space) for wsHttpBinding and TransportWithMessageCredential
6
votes
2 answers

Windows Authentication allow users not working

I am trying to use windows authentication for my application, for the testing I have tried allowing to only myself and deny all rest
Pawan Nogariya
  • 8,330
  • 12
  • 52
  • 105
6
votes
2 answers

What is the effect of in versions of IIS?

I am wondering what the effect of setting in the web.config is in different version of IIS. I believe that in IIS 5, it has little to no effect, as all of that is integrated and controlled by the web server. On IIS 6…
Jonathan Bates
  • 1,835
  • 14
  • 22
6
votes
1 answer

Owin and Windows Auth (mvc5) - using Windows auth as a part of login

I'm trying to have a MVC5 webapp which partially uses Windows Auth. What I mean by that is, it's effectively forms/cookie based auth, but with the requesting user's Windows principal forming a part of their login credentials. For example, the login…
Kieren Johnstone
  • 41,277
  • 16
  • 94
  • 144
6
votes
3 answers

How does SPN with Kerberos works

As I understand it, SPN is an authenticating tool for windows services. Kerberos is a user authentication service SPNEGO-GSSAPI is the third party API to be able to use those services. SSPI : is the Neutral layer to send request from SPNEGO to…
Jonathan L
  • 73
  • 1
  • 1
  • 4