Products

Solutions

Resources

Partners

Community

Blog

About

QA

Ideas Test

New Community Website

Ordinarily, you'd be at the right spot, but we've recently launched a brand new community website... For the community, by the community.

Yay... Take Me to the Community!

Welcome to the DNN Community Forums, your preferred source of online community support for all things related to DNN.
In order to participate you must be a registered DNNizen

HomeHomeDNN Open Source...DNN Open Source...Provider and Extension ForumsProvider and Extension ForumsAuthenticationAuthenticationAD integration NOT bringing in groupsAD integration NOT bringing in groups
Previous
 
Next
New Post
1/22/2008 3:52 PM
 

I am running DNN 4.6.2 and AD module 1.00.02.

 

I am able to get logged in via AD, but none of the groups are sycing up. I have tried ntering my roles as DOMAIN\AD_GROUP and just AD_GROUP, neither are syncing. I've looked up all of my (pre-windows 2000) and they are all correct as well. Does anyone else out there have any tips/tricks on getting my AD Groups to sync with DNN Roles?

 

Thank you,

 
New Post
1/23/2008 1:04 AM
 

Have you tried adding impersonation to your web.config?

EDIT; Entering the Roles as just the AD_Group name is all you need. No Domain\AD_group. Also, are you adding them as Roles or Role Groups (You want to add them as Roles)?

 
New Post
1/23/2008 8:08 AM
 

I have tried it with <identity impersonate="true" /> AND I have tried <identity impersonate="true" userName="accountname" password="password" /> neither with success. Within the AD module I am using Auth type of delegation and I do get the green OK.

 

Today my goal is to write some custom code to sync the groups on my own on login, but now I have to figure out the best place to write it. My first choice is to modify your WindowsSignIn.aspx but if it redirects before the code completes then I'll have to make my own mpdule where after a successful login it is routed to for the sync to complete and then redirect back to another page. I really was hoping to find somethin in the forums to help fix it, but that doesn't seem to be the case.

Our server is running .NET framework 3.5 and I've seen some posts about an update done to Version 2 caused some peoples AD Groups to stop syncing, so my initial theory is that it's something with 3.5 keeping it from working.

 
New Post
1/23/2008 11:23 AM
 

Adding the code to WindowsSignin.aspx isn't going to do the trick as at that point the user isn't logged in yet. Where the actual synching takes place is deeper into the code. I haven't got the code handy at the moment but the sub is named something AddUsersToRole or CheckRole. I know that eventually it calls SearchNestedGroups. As soon as I can I'll get to the code and post back the exact sub so that you can try to debug the code.

I know that at home on my dev domain there that, for reasons unknown at this point, not all of the users properties are being pulled from the domain but the same code works just fine here at work. I've started doing a complete rewrite of the code to bring it up to reflect changes that were brought about with .NET 2.0 (the code is .NET 1.0 or 1.1 based).

 
New Post
1/24/2008 5:58 PM
 

OK ... I was able to get my code to to retrieve nested groups, but what I want now is when a user clicks the login button (which points to your WindowsSignin.aspx) at that point I'm trying to get your WindowsSignin.aspx page to redirect to my page after yours finishes doing it's trick.

 

How can I get WindowsSignIn.aspx to redirect to another page of my choice instead of return to the HOME page?

 

Here is a snippet of code that I am using to sync my AS Groups and Roles:

On Error Resume Next

            Using HostingEnvironment.Impersonate() <---This was my KEY mine kept using the annonymous user account... now my application pool is using a domain account

                Dim ctx As PrincipalContext = New PrincipalContext(ContextType.Domain, "domain", "DC=domain,DC=com", ContextOptions.SimpleBind)
                Dim u As UserPrincipal = New UserPrincipal(ctx)
                u = UserPrincipal.FindByIdentity(ctx, UserInfo.Username)

                Dim res As Boolean

                Dim objRoles As New DotNetNuke.Security.Roles.RoleController
                Dim Role As New DotNetNuke.Security.Roles.RoleInfo
               

                For Each Role In objRoles.GetPortalRoles(PortalId)

                    If u.IsMemberOf(ctx, IdentityType.Name, Role.RoleName) Then
                        If DotNetNuke.Security.PortalSecurity.IsInRole(Role.RoleName) Then

                        Else
                            objRoles.AddUserRole(PortalId, UserId, Role.RoleID, Null.NullDate)
                        End If
                    End If           
                Next

            End Using

 

This code requires .Net Framework 3.5 using the system.directoryservices.accountmanagement

 
Previous
 
Next
HomeHomeDNN Open Source...DNN Open Source...Provider and Extension ForumsProvider and Extension ForumsAuthenticationAuthenticationAD integration NOT bringing in groupsAD integration NOT bringing in groups


These Forums are dedicated to discussion of DNN Platform and Evoq Solutions.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
  2. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  3. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  4. No Flaming or Trolling.
  5. No Profanity, Racism, or Prejudice.
  6. Site Moderators have the final word on approving / removing a thread or post or comment.
  7. English language posting only, please.
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out