Ureader.com  
Microsoft software help and Community
   home   |   control panel login   |   archive   |  
 
DotNet
acad.assignment.mngr
academic
adonet
aspnet
aspnet.announcements
aspnet.build.controls
aspnet.caching
aspnet.datagridcontrol
aspnet.mobile
aspnet.security
aspnet.webcontrols
aspnet.webservices
clr
compactframework
component_services
datatools
distributed_apps
drawing
faqs
framework
framework.wmi
general
internationalization
interop
languages.csharp
languages.jscript
languages.vb
languages.vb.controls
languages.vb.data
languages.vb.upgrade
languages.vc
languages.vc.libraries
myservices
odbcnet
performance
remoting
scripting
sdk
security
setup
vjsharp
vsa
webservi.enhancements
webservices
windowsforms
windowsforms.controls
winforms.databinding
winforms.designtime
xml
  
 
date: Fri, 2 May 2008 15:18:21 -0700 (PDT),    group: microsoft.public.dotnet.security        back       


NetworkCredentials between Internet Explorer and ClickOnce.   
Hello,

We have a 2.0 ClickOnce app that is launched from an ASP.Net website.
Basically, the user signs in to the website and can perform business
functions.  For a richer interface for certain fucntions, a ClickOnce
app is launched, but needs to run under the same credentials and
login.  I have IWA turned on and the user has authenticated to the
website then launches the ClickOnce app.  It deploys fine and issues
its own webrequests using
System.Net.CredentialCache.DefaultNetworkCredentials.  I verified via
the IIS logs that these credentials match those that were used to
authenticate to the website, which might not be how the user logged
into the workstation.  The workstation might not even be on the
domain.

My question is, can I find out who that is?  Environment.UserName
holds the user that is logged into the desktop with, not the user that
authenticated through IE (if prompted for credentials).
System.Security.Principal.WindowsIdentity.GetCurrent().Name holds the
user that is logged into the desktop.  Can WMI help me?  I need to
know who the user is so that the ClickOnce app can log into our system
with a user to restrict data.  I dont want it wide open just because
they could auth to IIS and download an app.

Surely there has to be a way to know what context the ClickOnce app
was launched under. I don't want to prompt the user a second time to
login when it comes from the same site.  I see MS has locked down
System.Net.CredentialCache.DefaultNetworkCredentials.UserName to be
blank when viewed but still writeable.  Is there a way around this?

-tia
Kurt
date: Fri, 2 May 2008 15:18:21 -0700 (PDT)   author:   unknown

Google
 
Web ureader.com


    COPYRIGHT 2007, YARDI TECHNOLOGY LIMITED, ALL RIGHT RESERVE  |   contact us