Installation and deployment
Version 7.x > Installation and deployment > Windows Authentication View modes: 
User avatar
Member
Member
Ando - 11/7/2012 11:43:31 PM
   
Windows Authentication
Hii,

We are looking into implementing Windows Authentication for our staff, whilst our external users would use Form Authentication - so mixed mode authentication.

Our setup has the DB Server within the LAN (behind firewall), whilst the Web Server within the DMZ and is not connected to the domain.

Just wondering if this is possible to use Windows Authentication when the Web Server is not allowed to connect to the domain controller directly? Any ideas/suggestions?

Cheers
Ando

User avatar
Kentico Support
Kentico Support
kentico_jurajo - 11/7/2012 11:56:18 PM
   
RE:Windows Authentication
Hi,

The web server has to have some access to the domain - active directory so the authentication can be done and the user can be authenticated against AD. You need to allow it in your firewall. Even if you will create custom security handler - it has to have a way to connect to the domain controller to verify the user credentials and authenticate the user.

Best regards,
Juraj Ondrus

User avatar
Member
Member
Ando - 11/8/2012 12:18:44 AM
   
RE:Windows Authentication
Thanks Juraj for your reply and confirmation - it's what we had thought, with our dev. team verifying this too.

Just looking to see if we had any possibility to work around as any domain access or custom security handler won't be possible (security reasons) unfortunately.

User avatar
Kentico Support
Kentico Support
kentico_jurajo - 11/8/2012 3:28:08 AM
   
RE:Windows Authentication
Hi,

In this case, if there is no access, the application is unable to verify the user and then authenticate it since the information about the user is not accessible. I am not aware of any workarounds available in this case.

Best regards,
Juraj Ondrus