Products

Solutions

Resources

Partners

Community

Blog

About

QA

Ideas Test

New Community Website

Ordinarily, you'd be at the right spot, but we've recently launched a brand new community website... For the community, by the community.

Yay... Take Me to the Community!

Welcome to the DNN Community Forums, your preferred source of online community support for all things related to DNN.
In order to participate you must be a registered DNNizen

HomeHomeDNN Open Source...DNN Open Source...Provider and Extension ForumsProvider and Extension ForumsAuthenticationAuthenticationUsers not synching with ADUsers not synching with AD
Previous
 
Next
New Post
12/9/2008 4:46 PM
 

I've installed 1.0.4 of the AD provider on my DNN 4.8 portal.  Users are recognized and registered as I expect, but they're not being added to groups properly.

I added the DNN group "test_group_name" exactly as it appears in Active Directory Users and computers.  I confirmed that the users I'm testing with are members of the AD group. 

I've enabled "synchronize role" in the authentication setup, and I get the "green light" when I update settings. 

When users log on they are not put into the DNN group.  If I explicitly add users to the group, when they log on they are removed from the group. 

I have tried this with and without impersonation.  With impersonation, I don't get the "Green light" in authentication setup, so I've been sticking with impersonation disabled.  I'm at a loss what else to do. 

Any help would be greatly appreciated, thanks!

 
New Post
12/10/2008 10:34 AM
 

They're getting removed? Odd because there's a bug in the .04 release that wasn't removing users from groups.

When you say you try impersonation but don't get the "Green light" does that mean you don't get anything? Do you get an error or absolutely nothing?

 
New Post
12/10/2008 11:36 AM
 

Ok--user error there.  Well, with impersonation, I can get the full green light... I just have to specify the forest, not the domain, otherwise I get errors about not finding the domains.  fair enough. 

However, I still don't get the AD groups sync'ed as expected.  Now if I manually add the user to the group it's not removed (woohoo!), but new users are not getting added automatically to the DNN groups that match their AD groups.

 
New Post
12/10/2008 5:45 PM
 

Is the impersonation account a domain account or a global account good across all the domains? I think what's happening under impersonation is that it's trying to sync roles to roles in the forest rather than the domain. From what I remember from other posters is that the provider only syncs with the top level in the settings (in this case your forest). It's something that I intend to take care of in the future but I don't have a forest to debug against.

 
New Post
12/15/2008 1:02 PM
 

It's a global security group, but I don't think it's good in the other domain in the forest.

 
Previous
 
Next
HomeHomeDNN Open Source...DNN Open Source...Provider and Extension ForumsProvider and Extension ForumsAuthenticationAuthenticationUsers not synching with ADUsers not synching with AD


These Forums are dedicated to discussion of DNN Platform and Evoq Solutions.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
  2. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  3. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  4. No Flaming or Trolling.
  5. No Profanity, Racism, or Prejudice.
  6. Site Moderators have the final word on approving / removing a thread or post or comment.
  7. English language posting only, please.
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out