Home/ Questions/Q 6206161
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-24T05:24:08+00:00

i’m developing an Asp.Net application who try to connect to an active directory to

  • 0

i’m developing an Asp.Net application who try to connect to an active directory to login. I know i’m not using the “best practice” to do this, so i attach my source code inside the “Default.vb”:

Dim User As System.Security.Principal.IPrincipal

Dim username As String

User = System.Web.HttpContext.Current.User

username =User.Identity.Name

If User.Identity.IsAuthenticated Then
‘ok do something

else
‘do someothers

end if

When i use Chrome and Internet Explorer is all ok: automatically the user is signed as “logged”. But if i open Firefox it ask username and password with his “internal” inputbox … i don’t know how to explain… firefox ask for a user and a password: if i enter my active directory username and password (for example, i enter user: MYCOMPANYDOMAIN\stighy) , then i enter…

So .. i’m doing something wrong ?

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    It’s because of the implementation of NTLM in Firefox.

    When you connect to a site using integrated auth, the server first responds with a 401 and a authenticate header identifying what auth methods it supports. Your browser can react to this in a number of ways. With integrated auth, there are actually 2 methods that do the same thing in slightly different ways.

    IE uses Kerberos, because, well it’s Microsoft. This is method uses only 1 round trip. Your browser responds to the challenge it got above with a token. This token is all the server needs to figure you out and let you in.

    In Firefox they use the older, but better documented NTLM. Firefox asks the server for a challenge which the server responds to. Firefox then needs your username & password to asnswer this callenge and the only way to get this is to ask the user.

    It then responds to the challenge using an encrypted value based on your username & password. If this matches the challenge the server was expecting, you get authenticated.

    I guess Chrome uses a method similar to IE so doesn’t need to prompt you. Bottom line is you’re not doing anything wrong & it’s just the way it works. I would suggest reading up on Challenge/Response passwords if you want to find out more.

    Simon

    • 0