Hello all,
I'm facing a problem and after countless hours of googling did nothing, here's what's happening (and missing). The whole thing is an Asp.Net WebForms project (the AD authentication will be done by a WCF service on the same machine using the NTLM data)
User goes to website, get a 401 (launched via my code) and I ask for NTLM or Negociate authentication.
User enter his domain user/pass, everything is sent to the server. I catch the Authorize header (with NTLM data)
Now I have the NTLM data and I need to validate it against AD. <-- This is where I am stuck now
I know that IIS can do all that via the Windows Authentication Auth, but that's what I need to avoid currently. I'm aware of the SSPI API but writing a wrapper around it would take too long for the time I have.
Any suggestion?
...
Go to the complete details ...