Domain Authentication - Please help me

[Extreme_Coder]

Hi all,
I am making one client / server application. My server runs on all workstations in a domain, controlled by a domain controller. My client program runs from other computer and contacts the server. To authenticate the client, my server program will accept the username and password from the client and authenticates with the domain controller. I have tried using LogonUser, but not working out. please help me out. I have got stucked with this stage.

[Sef]

Hi all,
I am making one client / server application. My server runs on all workstations in a domain, controlled by a domain controller. My client program runs from other computer and contacts the server. To authenticate the client, my server program will accept the username and password from the client and authenticates with the domain controller. I have tried using LogonUser, but not working out. please help me out. I have got stucked with this stage.

Why isn't "LogonUser()" working? The most likely causes is that on Win2000 you need the SE_TCB_NAME privilege to use this and only administrators normally have it. This isn't an issue on WinXP and Win2003 however. The function isn't available at all however on older versions of Windows such as Win95, Win98 and Windows Millenium. What is the exact problem then. Also have a look at MSFT KB article 180548 (found here at this writing http://support.microsoft.com/default...b;EN-US;180548)

[Sef]

Why isn't "LogonUser()" working? The most likely causes is that on Win2000 you need the SE_TCB_NAME privilege to use this and only administrators normally have it. This isn't an issue on WinXP and Win2003 however. The function isn't available at all however on older versions of Windows such as Win95, Win98 and Windows Millenium. What is the exact problem then. Also have a look at MSFT KB article 180548 (found here at this writing http://support.microsoft.com/default...b;EN-US;180548)

BTW, the user you're logging on also requires the appropriate logon right on the machine you're logging them onto. That is, if you pass LOGON32_LOGON_SERVICE to "LogonUser()" for instance, then the user you're logging on requires the "Log on as a service" right on the host machine. Fortunately, in client server applications, you should typically log the user on using LOGON32_LOGON_NETWORK and this right is granted to all principals by default (though you can't access network resources using this logon type but this is typically the safest route to go)