Quantcast
Channel: Security
Viewing all articles
Browse latest Browse all 4737

What are the source for the login identities?

$
0
0

At one point all of the following would produce "MY_DOMAIN\MyUserId" when viewing a page in my web.

HttpContext.Current.Request.LogonUserIdentity.Name;
HttpContext.Current.User.Identity.Name;
System.Security.Principal.WindowsIdentity.GetCurrent().Name;
System.Environment.UserName;

Now however something has changed and now "HttpContext.Current.Request.LogonUserIdentity.Name" is showing the Id of the account in the  [Physical Path Credentials] under "Advanced Setting" for the web.

I am a novice when it comes to IIS so forgive my ignorance.

  • The web is set up for Windows Authentication only (users access is then determine in the app by the userId that is logged into the local PC).
  • The webs [Physical Path Credentials] is set to a domain account (well call it mydom\service_account)
  • A Virtual directory is used to which "mydom\service_account" is used to grant access
  • The AppPool for the web is running under "mydom\service_account" as well

I thought that whatever account the apppool was running under would be the account that would provide credentials for everything (running the web, accessing network resources, etc). I didn't even know about the [Physical Path Credentials] under Web and Virtual Directory till the web started malfunctioning. Cause still unknown.

Is this setup weird or what? 

thanks


Viewing all articles
Browse latest Browse all 4737

Latest Images

Trending Articles



Latest Images

<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>