Novell 网络上的 Windows 身份验证
我目前正在为一位偏好从 Windows 进行单点登录但在 Novell Netware 6 环境（WinXP 桌面）中运行的客户构建 .NET 3.5 应用程序。
我是否正确地认为这排除了在 .NET 应用程序中使用集成 Windows 身份验证作为避免提示用户输入凭据的方法？
尽管它们位于 Novell 网络（带有 eDirectory）上，但客户还维护一个可用于应用程序身份验证的 Active Directory 实例，并且由于应用程序将具有 WinForms 组件，因此我希望最好利用客户端应用程序服务来进行身份验证广告。 这将允许针对所有表示层使用相同的安全模型，并且还提供可能需要的离线身份验证。
但是，我不确定用于检索用户在台式电脑上登录的凭据的选项是什么。 如果无法使用 Windows 身份验证，是否有其他方法可以检索凭据并将其传递给客户端应用程序服务？
I'm currently architecting a .NET 3.5 application for a customer with a preference for Single Sign-On from Windows, but whom is running in a Novell Netware 6 environment (WinXP desktops).
Am I correct in thinking that this rules out the use of Integrated Windows Authentication inside a .NET application as a way of avoiding prompting the user for credentials?
Although they're on a Novell network (with eDirectory) the customer also maintains an Active Directory instance which can be used for application authentication, and as the application will have a WinForms component I'd like ideally to utilise Client Application Services to authenticate to AD. This will allow the same security model against all presentation layers, and also provides offline authentication which may be required.
However I'm not sure what my options are for retrieving a user's logged in credentials on the Desktop PC. If Windows Authentication is out of the question, is there another way of retrieving and passing the credentials through to Client Application Services?
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（1）
您需要回答的问题是工作站是否加入域，从而用户进行双重登录。 一次到域，一次到 eDirectory。
借助 eDirectory 和基本的 Zenworks 入门套件，他们可能部署了动态本地用户策略 (DLU)，一旦成功处理 eDirectory 登录，就会动态生成本地 Windows 帐户，从而允许他们访问本地计算机，而无需预先存在的本地帐户。
如果是前一种情况，那就没问题了。 如果是后者 (DLU)，那么您可能需要进一步调查。
The question you need to answer is whether the workstations are joined to the domain, and thus the users do a dual login. Once to the domain, once to eDirectory.
With eDirectory, and the basic Zenworks starter kit, they might have deployed a Dynamic Local User Policy (DLU) that once a successful eDirectory login is processed, generates a local Windows account on the fly, thus allowing them access to the local machine, without a preexisting local account.
If it is the former case, you are fine. If the latter (DLU) then you may have to investigate further.