Advertisement
3_2004-2005 Security #147239

IIS Authentication

Requests users to login to website with NT Account.

AI

KI-Zusammenfassung: This codebase represents a historical implementation of the logic described in the metadata. Our preservation engine analyzes the structure to provide context for modern developers.

Quellcode
original-source
Dim ObjSite
Call Authenticate(ObjSite)
Sub Authenticate(ByRef pObjSite)
	
	Dim lLngInstanceID
	Dim lStrMetabasePath
	Dim lBlnContinue
	Dim lBlnLoginFailure
	
	On Error Resume Next
	lLngInstanceID = Request.ServerVariables("INSTANCE_ID")
	
	' Programmers Notes ...
	'
	' Metabase Path											Key Type 
	' /LM/W3SVC												IIsWebService 
	' /LM/W3SVC/N											IIsWebServer 
	' /LM/W3SVC/N/ROOT										IIsWebVirtualDir 
	' /LM/W3SVC/N/ROOT/WebVirtualDir						IIsWebVirtualDir 
	' /LM/W3SVC/N/ROOT/WebVirtualDir/WebDirectory			IIsWebDirectory 
	' /LM/W3SVC/N/ROOT/WebVirtualDir/WebDirectory/WebFile	IIsWebFile 
	'
	' N = lLngInstanceID
	'
	'
	
	lStrMetabasePath = Request.ServerVariables("APPL_MD_PATH")
	lStrMetabasePath = Replace(lStrMetabasePath, "/LM/", "IIS://LOCALHOST/", 1, vbTextCompare)
	
	'
	'
	'
	Set pObjSite = GetObject(lStrMetabasePath)
	If Err = &H800401E4 Or Err = 70 Then
		Response.Status = "401 access denied"
		BlnContinue = False
		BlnLoginFailure = True
	Else
		If Err = 0 Then
			lBlnContinue = True
		Else
			lBlnContinue = False
			lBlnLoginFailure = False
		End If
	End If
		
	If lBlnLoginFailure Then
		Response.Write "Login Failure.<BR>"
		Response.End
	End If
	If Not lBlnContinue Then
		Response.Write "Can not continue.<BR>"
		Response.End
	End If
End Sub
Originalkommentare (3)
Wiederhergestellt von der Wayback Machine