I'm using windows authentication on an intranet to identify users to the application. I'm having the following problems:
1. When someone accesses the web site, a logon dialog box shows up. I thought if the user is already logged on, this shouldn't happen.
2. Even if I type my user name and password into the dialog box, the web site lets me in but shows somebody else's user name. It's as if the web site remembers the last person that accessed it.
I have session state disabled for this virtual directory in IIS.
I have both Integrated Windows authentication and Digest authentication enabled in IIS.
My web.config looks like this:
<authentication mode="Windows" />
<identity impersonate="true" />
I am retrieving the user name in the web application in a standalone class:
using System;
using System.Configuration;
using System.Web;
using System.Web.Security;
using System.Text;
namespace timesheets
{
/// <summary>
/// Summary description for RoleCheck.
/// </summary>
public class RoleCheck
{
private static string _userid = "";
public static string UserID()
{
if (_userid == "")
{
string name = HttpContext.Current.User.Identity.Name;
int slash = name.IndexOf("\\");
if (slash >= 0)
name = name.Substring(slash + 1);
_userid = name;
}
return _userid;
}
}
}