Instead of using standard "Windows" authentication, I would like to use "Forms" based authentication (web.config) -- specifically so that I can use ActiveDirectory to authenticate. Right now, I am following along with an example on MSDN's site here to employ the ActiveDirectoryMembershipProvider:
http://msdn.microsoft.com/en-us/library/ff648345.aspx
At Step 2, it shows changing part of the web.config file. What surprised me is the requirement of a ConnectionUsername and ConnectionPassword and that the password is stored "in the clear" (in the web.config file)
This seems broken to me. Shouldn't this ActiveDirectoryMembershipProvider be using the login and password of the user logging in to authenticate?
Would it be difficult for me to create my own ActiveDirectoryMembershipProvider?
Also, if I go back to "Windows" based authentication, do I lose the ability to use Roles?
...
Go to the complete details ...