How to check user name and password using Windows authentification?

Question

0.00/5 (No votes)

See more:

My application is created using ASP.net and the authentication is using Windows authentication.Its confusing me,
here they have used WCF for checking user name.Am very new to this WCF.
So i just want to know how they are checking the user name and password from WCF application via windows authentication?
Which one is usual method??
I want to analyze the code and make the report so please help me.

Posted 4-Dec-12 3:02am

Am Gayathri

Updated 4-Dec-12 3:54am

v2

Add a Solution

2 solutions

Add a Solution

Add your solution here

Treat my content as plain text, not as HTML

Preview 0

…

Existing Members

Sign in to your account

...or Join us

Download, Vote, Comment, Publish.

Your Email
Password
Forgot your password?

Your Email
This email is in use. Do you need your password?
Optional Password

I have read and agree to the Terms of Service and Privacy Policy
Please subscribe me to the CodeProject newsletters

When answering a question please:

Read the question carefully.
Understand that English isn't everyone's first language so be lenient of bad spelling and grammar.
If a question is poorly phrased then either ask for clarification, ignore it, or edit the question and fix the problem. Insults are not welcome.
Don't tell someone to read the manual. Chances are they have and don't get it. Provide an answer or move on to the next question.

Let's work to help developers, not make them feel stupid.

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

Pascal-78 · Answer 1 · 2012-12-04T05:55:00

I know 2 ways a web application can do Windows Authentication :

First one : with IIS, if the page is stored in a directory with restricted access (using NTFS access rights for example), the client will be prompted to enter login and password.
The server will receive those (encrypted or not, depending of the IIS configuration) and the ASP.NET object will be called using those credentials (if access granted).

Second one : no server right management, every thing done in the application. In this case, the application may call the Windows function to login to an other account (like in impersonation)

C#

[DllImport("AdvApi32.dll")]
extern static bool LogonUser(string username, string password, string domain, UInt32 LogonType, UInt32 LogonProvider, ref IntPtr hToken);

Then you can use the System.Security.Principal.WindowsIdentity to manage the account in C# and do the impersonate if necessary.

Akbar Ali Hussain · Answer 2 · 2012-12-04T14:53:00

You can use PrincipalContext class to validate user credentials. Get domain, userid and password using a login window and validate as follows.

//Add this reference
using System.DirectoryServices.AccountManagement;

//Use this code for authentication
PrincipalContext pc = new PrincipalContext(ContextType.Domain, txtDomain.Text);
bool bResult = pc.ValidateCredentials(txtUserId.Text, txtPassword.Text);

How to check user name and password using Windows authentification?

2 solutions

Solution 1

Solution 2

Add your solution here

Preview 0