Products

Solutions

Resources

Partners

Community

Blog

About

QA

Ideas Test

New Community Website

Ordinarily, you'd be at the right spot, but we've recently launched a brand new community website... For the community, by the community.

Yay... Take Me to the Community!

Welcome to the DNN Community Forums, your preferred source of online community support for all things related to DNN.
In order to participate you must be a registered DNNizen

HomeHomeDNN Open Source...DNN Open Source...Provider and Extension ForumsProvider and Extension ForumsAuthenticationAuthenticationServer 2008/IIS 7 IssuesServer 2008/IIS 7 Issues
Previous
 
Next
New Post
8/10/2010 11:40 AM
 
I cannot get this working for anything and am about to give up integrating AD in my install unless someone has a simple solution:

Dnn 5.4.4
AD Provider 5.0.2
Windows 2008 sp2 w/iis7

I have verified that all the appropriate IIS6 compatability parts are installed in IIS7 per previous posts. I have tried a local account on the server added to the administrators group on the server as well as my domain login to the administrators group on the local box and modified the web config file to turn impersonation on and provide the username and password of the account added to the admin group.  Neither works. 

as a side note, In the admin --> extensions AD configure control I have the following message at the bottom of the fields of the control before the information area about the control.

DotNetNuke.Services.Exceptions.ModuleLoadException: Access is denied. ---> System.Runtime.InteropServices.COMException (0x80070005): Access is denied. at System.DirectoryServices.DirectoryEntry.Bind(Boolean throwIfFail) at System.DirectoryServices.DirectoryEntry.Bind() at System.DirectoryServices.DirectoryEntry.get_IsContainer() at System.DirectoryServices.DirectoryEntries.ChildEnumerator..ctor(DirectoryEntry container) at System.DirectoryServices.DirectoryEntries.GetEnumerator() at DotNetNuke.Authentication.ActiveDirectory.Settings.CheckPipelineMode() at DotNetNuke.Authentication.ActiveDirectory.Settings.Page_Load(Object sender, EventArgs e) --- End of inner exception stack trace ---

When Impersonation is on and site set to classic asp.net mode the following error is displayed.

This site is currently Unavailable
The Active Directory Provider requires the site to be running
under Full Trust and/or in Classic mode in IIS 7.0
Commenting out the line:

in your web.config will allow you to get the site running until it meets the above requirements

I have verified that the permissions are set correctly on the Signon form in the AD folder on Desktop Modules..etc.  The user does get the windows login box when visiting the site but login does not happen and if they select windows login from the DNN login page, the login fails. 

Thoughts?

 
New Post
8/24/2010 3:03 PM
 
Mike, Had you had any luck getting around #3 from the opening post of this thread? The only way I was able to get AD Authentication to work was to impersonate a local admin. What exactly are the permissions that local admins have that are required to run AD Authentication? thanks, Jake
 
New Post
3/8/2011 1:43 PM
 
Doug, I found a way to resolve this AD configuration error from popping up.  For the AppPool which your website is configured for, setup it's identify to run under a domain user.  I set this for a normal domain user (no special credentials) and the error disappeared.

After configuring it for the domain user, I recycled the AppPool just to make sure all was well and there wasn't any issues.
 
New Post
3/10/2011 12:58 PM
 
According to all of the Authentication help blogs/forums. And even the documentation for the Authentication of AD (http://www.dotnetnuke.com/LinkClick.a...) say's to use the Admin>>Authentication page. That page does not exist on my portal. Version 5.06.01, How do I get that page or where was the functionality of that page moved to?
 
New Post
3/10/2011 1:25 PM
 
I am not exactly sure which page you are referring to.

1) Essentially, you need to install AD Provider first. Here is how to do that:

Host->Extensions->Scroll Down->Install Available Extensions->Scroll Down->Select ActiveDirectory (05.00.02)->Install Selected Extension. If installation is successful, ActiveDirectory (05.00.02) should disappear from this page. If it's still there it means you haven't enabled Full Trust

2) After AD Provider is successfully installed, go to Admin->Extensions->DNN_ActiveDirectoryAuthentication->Click on pencil icon to edit.

Ash Prasad
Director of Engineering
DNN Corp.
 
Previous
 
Next
HomeHomeDNN Open Source...DNN Open Source...Provider and Extension ForumsProvider and Extension ForumsAuthenticationAuthenticationServer 2008/IIS 7 IssuesServer 2008/IIS 7 Issues


These Forums are dedicated to discussion of DNN Platform and Evoq Solutions.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
  2. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  3. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  4. No Flaming or Trolling.
  5. No Profanity, Racism, or Prejudice.
  6. Site Moderators have the final word on approving / removing a thread or post or comment.
  7. English language posting only, please.
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out