| Author |
Message |
AnalogKid
Butt Sniffer


Joined: 26 Aug 2004 Posts: 1622
|
Posted:
Thu Feb 08, 2007 7:22 am Post subject: Weird .NET issue |
|
I have a .NET web app (c#) that is not working correctly on windows 2000 clients.
We are using windows authentication. When the page loads it prompts them for windows user/pass. I am capturing this using “User.Identity.Name” and passing it to a stored procedure. On a Windows XP client, this works fine, but not 2000. Both are using the latest version of IE 6.
When logging in using XP, there are 2 boxes, one for user name (which is entered ‘domain\username’) and password.
When logging in using 2000, there are 3 boxes, username, password, and domain. In my Sql Server logs, it shows these machines are trying to connect anonymously.
How can I get the same result using 2000 as a client? |
_________________ "It's just like the story of the grasshopper and the octopus: all year long the grasshopper kept burrying acorns for winter, while the octopus mooched off his girlfriend and watched TV, but then the winter came, and the grasshopper died, and the octopus ate all his acorns - and also he got a race car! Is any of this getting through to you?" -FRY
|
|
|
|
|
AnalogKid
Butt Sniffer


Joined: 26 Aug 2004 Posts: 1622
|
Posted:
Thu Feb 08, 2007 11:43 am Post subject: |
|
On second look, it appears to be an authentication issue.
We are using integrated windows security/kerberos. It works fine on XP, just not 2000.
Does anyone here have experience with this? |
_________________ "It's just like the story of the grasshopper and the octopus: all year long the grasshopper kept burrying acorns for winter, while the octopus mooched off his girlfriend and watched TV, but then the winter came, and the grasshopper died, and the octopus ate all his acorns - and also he got a race car! Is any of this getting through to you?" -FRY
|
|
|
|
|
pdk68
Butt Sniffer

Joined: 09 Nov 2000 Posts: 1883
|
Posted:
Thu Feb 08, 2007 9:28 pm Post subject: |
|
AnalogKid wrote:On second look, it appears to be an authentication issue.
We are using integrated windows security/kerberos. It works fine on XP, just not 2000.
Does anyone here have experience with this?
Do the clients put anything int he domain box or are they leaving it blank?
If they are filling in the domain box what are the putting in there? |
|
|
|
|
|
|
AnalogKid
Butt Sniffer


Joined: 26 Aug 2004 Posts: 1622
|
Posted:
Fri Feb 09, 2007 9:14 am Post subject: |
|
pdk68 wrote:AnalogKid wrote:On second look, it appears to be an authentication issue.
We are using integrated windows security/kerberos. It works fine on XP, just not 2000.
Does anyone here have experience with this?
Do the clients put anything int he domain box or are they leaving it blank?
If they are filling in the domain box what are the putting in there?
Even when you put the domain name it does the same thing |
_________________ "It's just like the story of the grasshopper and the octopus: all year long the grasshopper kept burrying acorns for winter, while the octopus mooched off his girlfriend and watched TV, but then the winter came, and the grasshopper died, and the octopus ate all his acorns - and also he got a race car! Is any of this getting through to you?" -FRY
|
|
|
|
|
pdk68
Butt Sniffer

Joined: 09 Nov 2000 Posts: 1883
|
Posted:
Fri Feb 09, 2007 12:33 pm Post subject: |
|
What exactly happens when the 2000 users log in? |
|
|
|
|
|
|
AnalogKid
Butt Sniffer


Joined: 26 Aug 2004 Posts: 1622
|
Posted:
Fri Feb 09, 2007 7:49 pm Post subject: |
|
pdk68 wrote:What exactly happens when the 2000 users log in?
The page is supposed to load with data from the DB. The page itself loads but nothing from the DB.
In looking at the event logs on the DB server it says that the user tried to connect anonymous, which is not allowed via IIS 6.(which is how we want it) |
_________________ "It's just like the story of the grasshopper and the octopus: all year long the grasshopper kept burrying acorns for winter, while the octopus mooched off his girlfriend and watched TV, but then the winter came, and the grasshopper died, and the octopus ate all his acorns - and also he got a race car! Is any of this getting through to you?" -FRY
|
|
|
|
|
Extreme
Big Dog


Joined: 17 Jun 2001 Age: 28 Posts: 4399
Location: Palm Bay, Florida USA
|
Posted:
Fri Feb 09, 2007 9:22 pm Post subject: |
|
What is your application reporting when it captures the user identity with both windows versions?
In windows 2000, does using the Domain\Username format while leaving the domain field blank help at all?
Something has to be going on with the application itself, as you mentioned IIS doesn't allow anonymous access so the users are being authenticated properly.
Also, do you pass the user credentials on to the database for security purposes or do you use a pre-configured ID to pull this data? |
_________________ I ♥ my IT guy, do you?
|
|
|
|
|
|
|