Hello,

I have an intranet site currently running DNN 4.9.4, working well with AD authentication provider. forms authentication is specified in web.config, since we need to allow both domain users and DNN users (for example at host level), and impersonation is enabled:

<forms name=".DOTNETNUKE" protection="All" timeout="525600" cookieless="UseCookies" slidingExpiration="true" />
      </authentication>
<identity impersonate="true" userName="domain\intranetuser" password="pwdpwd" />

Question is: shouldn't users inherit this profile when accessing the file system?

Problem: in a custom module I  need to access some files on a remote server; I have a line of code that gets a list of files via SMB, and then displays them:

Dim filesList() As String = IO.Directory.GetFiles("\\server\path\userfolder")

This is working perfectly when current user is an administrator, but I get access denied errors for normal domain users. However, SMB path points to folders for which permissions are given for each user: if I open the same path in Windows Explorer I can see the files. So why is this failing from code?
I verified that both HttpContext.Current.User.Identity.Name and System.Threading.Thread.CurrentPrincipal.Identity.Name show the currently logged-on user (DOMAIN\Username -  with impersonation enabled I'd say I should see the user I put in web.config here, but this is not -), which should be ok since permissions are given for that user. But I get access denied.

 Can anybody tell where's my error?

Thank you,

al.

Hi Mike,

thanks for answering. I didn't find anything useful: nothing in IIS logs, and nothing from the remote server (an AS400). The strange thing is  the user account being used apparently is the logged-on user, who does have permissions on the remote folder (which he can actually navigate via windows explorer)... but permissions are not granted when accessing the remote folder by my code.

I had to find a quick solution and then gave up with this, reverting to an FTP call: I did not understand the problem, but I tought this could eventually depend on the AS400 and the way it handles security checks via SMB: only doing suppositions anyway.

Don't think there's much people here interested in DNN talking with an AS400, but if there's somebody... feel free to mail me to share info.
Thanks.

al.

Guybrun, do you get logged in if you go link directly to http://<yourdnnsite>/desktopmodules/authenticationservices/activedirectory/windowssignin.aspx?