-----------------------------------------------------------

New Message on BDOTNET

-----------------------------------------------------------
From: PKSPMR
Message 1 in Discussion

 
Hi, 
I stared playing with ASP.NET 2.0 and reading articles on security like setting 
up IIS and determine identity etc. 
We created our new webserver (windows 2003 server) with IIS 6.0. 
My workstation is Windows XP prof with IIS 5.0 
Need to start creating new asp.net 2.0 application.  
We started looking at authentication part. We decided to go with Forms 
Authentication. 
Our requirements wants to do the business processes under one account name. We 
do not want to impersonate logged in user.  
How should we set up IIS:       As Ananymous user with Integrated windows 
authentication        Impersonate fixed domain service account (active 
directory account) say webuser\password in weg config file like <impersonation 
= true username="webuser" password="password"> 
OR 
      Create an application pool in IIS and run that under fixed account 
identity. If we     do this, do we need to impersonate account in web config 
file. Further, can we use forms authentication with this. 
Apart from these, are there any other ways of doing it??? 
Further, I would like to get the details programatically (just for curiocity) 
about the logged in user, the account under which application is running 
(networkservice account or fixed identity account) and the thread under which 
it is running with default properties set, with just impersonation - true and 
impersonation with username and password. 
For default settings: I used 
            Page.User.Identity.Name  (returns my windows machine log in name 
say:nicole 
            System.Security.Principal.WindowsIdentity.GetCurrent().Name 
(returns domainname\nicole) 
How can I get account name (NT Authority\NetworkService or fixed identity 
account) programatically. 
I appreciate your response. 
Thanks, 
Katta 
  
  
 

-----------------------------------------------------------

To stop getting this e-mail, or change how often it arrives, go to your E-mail 
Settings.
http://groups.msn.com/bdotnet/_emailsettings.msnw

Need help? If you've forgotten your password, please go to Passport Member 
Services.
http://groups.msn.com/_passportredir.msnw?ppmprop=help

For other questions or feedback, go to our Contact Us page.
http://groups.msn.com/contact

If you do not want to receive future e-mail from this MSN group, or if you 
received this message by mistake, please click the "Remove" link below. On the 
pre-addressed e-mail message that opens, simply click "Send". Your e-mail 
address will be deleted from this group's mailing list.
mailto:[EMAIL PROTECTED]

Reply via email to