Geek Answers Handbook

Active Directory Login

I want to know how to perform Active Directory authentication.

Here is what I need in more detail -

I have 2 user sets for my site. Internal users and external users

Internal users will have an active directory name attached to them, if the internal user accesses the website, he should not be asked for a login page, since he has already logged into his Windows machine linked to AD using a username and password.

External users are those who access the website from outside (the Windows machine is not in AD), these users must be redirected to the login page in order to authenticate with ADUsername and ADPassword.

I hope I understand.

Request for help

+4
source share
3 answers

I am not sure if there is an easy way to do this. Typically, a website is configured for either Windows authentication or forms authentication.

You may be able to achieve this by installing two websites configured in IIS using the same code base but with a different web.config

For instance:

Internal users are turning to http://internal.application.com , which is configured in IIS to use Windows Authentication. The web.config settings will be installed on Windows.

External users goto http://www.application.com , which is configured in IIS to use anonymous access, and formats for web.config will be set and the login URL specified.

+2
source

See the Anonymous Access and IIS Configuration Authentication section.

0
source

Imagine this scenario:

Set the two IP addresses of the web server network adapter as follows:

192.168.1.100/24

192.168.1.10/24

Create a host or alias DNS record as the following:

Microsoft.com --> 192.168.1.100

Create two sites on your web server (IIS) as follows:

Test0 that works with 192.168.1.100/24

Test00 that works with 192.168.1.10/24

on Test00, disable anonymous authentication and enable Windows authentication (note that when installing IIS, you must note Windows authentication)!

Create a DNS entry on the Internet to your router's public IP-address and your router, set port forwarding TCP/80 to the IP-address 192.168.1.10/24 What is it!

0
source

More articles:


All Articles