I would like to make a web application available to users outside of the LAN, but I also want to use NTLM when the user is on the LAN.
I was thinking that I could write a custom handler to do this?
Basically, my idea is to remove anonymous access to some file, and then use a webrequest to try to read the file.
If the webrequest can read it (they are on the LAN), I can then authenticate them against AD and pass back the principal, otherwise I would redirect them to a login page, which would present a login form, whose credentials would be authenticated against an AD store.
Does this sound like it might be feasible?