HighTechTalks DotNet Forums  

User Control in IE (authentication)?

Dotnet Security microsoft.public.dotnet.security


Discuss User Control in IE (authentication)? in the Dotnet Security forum.



Reply
 
Thread Tools Search this Thread Display Modes
  #1  
Old   
Mantas Miliukas
 
Posts: n/a

Default User Control in IE (authentication)? - 02-25-2005 , 11:16 AM






Hi,

I have a "little" problem with authentication from user control (written in
..NET c#) that
is displayed in HTML page using Internet Explorer. Its possible using
<object classid=....> tag.

Lets say i have logged in as user A to my computer.
Then i launch my browser (IE) and open website that requires authentication
(Windows Integrated).
So I log in as user B. The page that is displayed for me contains the
user control. This user control is run under user A privileges.

So my question:

IS THERE ANY solution somehow to get the credentials of the user B?
I want to connect to webservices located on the same website, and pass
the same credentials.

Thanks for any advice.

---
Mantas Miliukas




Reply With Quote
  #2  
Old   
Nicole Calinoiu
 
Posts: n/a

Default Re: User Control in IE (authentication)? - 02-25-2005 , 04:24 PM






No, it's not possible. It would be a pretty big security hole in IE if it
were. See
http://groups-beta.google.com/group/...fb3fbbe4b1aa4/
for another thread on the same topic. If you would like suggestions for an
alternate approach, it would help if you could provide some detail
concerning your desired end result.


"Mantas Miliukas" <mantas (AT) raktas (DOT) net> wrote

Quote:
Hi,

I have a "little" problem with authentication from user control (written
in
.NET c#) that
is displayed in HTML page using Internet Explorer. Its possible using
object classid=....> tag.

Lets say i have logged in as user A to my computer.
Then i launch my browser (IE) and open website that requires
authentication
(Windows Integrated).
So I log in as user B. The page that is displayed for me contains the
user control. This user control is run under user A privileges.

So my question:

IS THERE ANY solution somehow to get the credentials of the user B?
I want to connect to webservices located on the same website, and pass
the same credentials.

Thanks for any advice.

---
Mantas Miliukas






Reply With Quote
  #3  
Old   
Mantas Miliukas
 
Posts: n/a

Default Re: User Control in IE (authentication)? - 02-26-2005 , 05:02 AM



10x thanks for your response (help)

"Nicole Calinoiu" <calinoiu REMOVETHIS AT gmail DOT com> wrote

Quote:
No, it's not possible. It would be a pretty big security hole in IE if it
were. See
http://groups-beta.google.com/group/...fb3fbbe4b1aa4/
for another thread on the same topic. If you would like suggestions for
an alternate approach, it would help if you could provide some detail
concerning your desired end result.


"Mantas Miliukas" <mantas (AT) raktas (DOT) net> wrote in message
news:Ov0MwV1GFHA.1528 (AT) TK2MSFTNGP09 (DOT) phx.gbl...
Hi,

I have a "little" problem with authentication from user control (written
in
.NET c#) that
is displayed in HTML page using Internet Explorer. Its possible using
object classid=....> tag.

Lets say i have logged in as user A to my computer.
Then i launch my browser (IE) and open website that requires
authentication
(Windows Integrated).
So I log in as user B. The page that is displayed for me contains the
user control. This user control is run under user A privileges.

So my question:

IS THERE ANY solution somehow to get the credentials of the user B?
I want to connect to webservices located on the same website, and pass
the same credentials.

Thanks for any advice.

---
Mantas Miliukas








Reply With Quote
Reply




Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off



Powered by vBulletin Version 3.5.4
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.