Building Secure ASP.NET Applications - People Search Directory

340
Building Secure ASP.NET Applications
}
[WebMethod]
public string GetHttpContextUserIdentity()
{
return HttpContext.Current.User.Identity.Name;
}
More Information
● For a list of all security related Knowledge Base articles
● For a list of security related articles that deal with frequently seen error messages,
use the following link go to the Microsoft Knowledge Base and use the
following search keywords:
prb kbsecurity kbaspnet
Determining Identity in a Visual Basic 6 COM Object
The following method can be used to return the identity of a Visual Basic 6 COM
object. You can call Visual Basic 6.0 COM objects directly from ASP.NET applications
through COM interop. The following method can be helpful when you need to
troubleshoot access denied errors from your component when it attempts to access
resources.
Private Declare Function GetUserName Lib "advapi32.dll" _
Alias "GetUserNameA" (ByVal lpBuffer As String, nSize As Long) As Long
Public Function WhoAmI()
Dim sBuff As String
Dim lConst As Long
Dim lRet As Long
Dim sName As String
lConst = 199
sBuff = Space$(200)
lRet = GetUserName(sBuff, lConst)
WhoAmI = Trim$(Left$(sBuff, lConst))
End Function
.NET Remoting
If a remote object is hosted in ASP.NET, and is configured for Windows
authentication, you must specify the credentials to be used for authentication
through the credentials property of the channel. If you do not explicitly set
credentials, the remote object is called without any credentials. If Windows
authentication is required, this will result in an HTTP status 401, access denied
response.