WIN AUTH over VPN

[Russ]

I'm developing a windows client app which is able to communicate with web
services in an IIS virtual directory. Current thinking is to secure the
services with Windows Authentication. This is fine if the user is logged
into the Domain on the LAN. What will happen if the user takes the laptop
home, logs in to the local machine and connects to the company VPN? WIll
requests to the web service get authenticated against the VPN domain user, or
the local machine user?

Thanks
Russ

[Keenan Newton]

Re: WIN AUTH over VPN

the credentials used should be the same as the credentials that is
running the windows application. So in this case the account the user
logged in as on his laptop.

[Russ]

Re: WIN AUTH over VPN

Would it be possible to grab the VPN credentials (or store them in a config
and grab them from there) and impersonate that user ?

"Keenan Newton" wrote:
[color=blue]
> the credentials used should be the same as the credentials that is
> running the windows application. So in this case the account the user
> logged in as on his laptop.
>
>[/color]

[Keenan Newton]

Re: WIN AUTH over VPN

Yes it is possible to do that take a look at the
System.Net.Cred entialCache classes

[Russ]

Re: WIN AUTH over VPN

So its possible to pass specific credentials, would you know if its possible
to grab the credentials from the VPN? Possilby a question for a different
group? I'm guessing that it would not be possible - bit of a security issue
;-)

TIA

Russ

"Keenan Newton" wrote:
[color=blue]
> Yes it is possible to do that take a look at the
> System.Net.Cred entialCache classes
>
>[/color]

[Keenan Newton]

Re: WIN AUTH over VPN

No not possile sorry. :)