Products

Solutions

Resources

Partners

Community

Blog

About

QA

Ideas Test

New Community Website

Ordinarily, you'd be at the right spot, but we've recently launched a brand new community website... For the community, by the community.

Yay... Take Me to the Community!

Welcome to the DNN Community Forums, your preferred source of online community support for all things related to DNN.
In order to participate you must be a registered DNNizen

HomeHomeDNN Open Source...DNN Open Source...Provider and Extension ForumsProvider and Extension ForumsAuthenticationAuthenticationQuick AD Auth run down - What works for meQuick AD Auth run down - What works for me
Previous
 
Next
New Post
5/18/2006 8:14 AM
 

KC9900,
Thank yo for detailed description. I have a few comments.
1. From my experiance fields Domain,Username,Password,Email (5-8) are optional. I left them empty and didn't see any issues.
2. Setting File Permissions for DNNsite\admin\security\WindowsSignin.aspx (Step 3) is also optional, but can be handy to add extra control which groups are allowed to have Windows Authentication.

3. "Cons: To autologin, you have to use this link instead of the regular DNN login link: http://dnnsite/admin/security/windowssignin.aspx"
I am using the mixed authentication approach(see here) based on  Richard Dudley's  post  "How I Made Windows Authentication and Forms Authentication Work Together".I've described some changes that I had to do to support it in DNN here.

4.  Password storage. I agree with you that storing copy of AD passwords in DNN table is not a good idea. And I  think that it is possible always use AD to check password. 

5. Also your link to the script to auto-add the domainname\  doesn't work. The link to SnoMan post is http://forums.asp.net/thread/1121026.aspx 


Michael Freidgeim http://geekswithblogs.net/mnf
 
New Post
5/26/2006 4:19 AM
 
Best tutorial on AD ever !

Please help me to move forward : We'll install this portal on a server wich resides on DMZ and we need a way to tell to DNN wich server is the domain controller for that directory. Is this configurable or we need to recompile the code ?

Regards,
Daniel
 
New Post
6/23/2006 11:48 AM
 

This is an excellent tutorial, and it worked for me with version 4.0.1.

 

I recently installed the latest version (4.3), which was suppose to fix a bunch of users/membership problems, but I haven't seen anything new - in fact, more problems have arisen.  I've done all the steps above, but it just won't work - it always redirects to the login page, no matter what.  I did everything above, and that's all it does. *sigh*
The AD authentication certainly was a good idea...

 
New Post
7/2/2006 1:46 AM
 

Go compare your membership tables between a 4.3 version and 4.0 version and you will see several differences.  They've dumbed it down and moved most of this to DNN specific tables - which makes it a lot easier IMHO.  I have a 4.3.0 version up for testing - which is using AD authentication.  So yes it does work, with the only issue I have is getting the login to be automatic within my LAN (we're testing auto-login to see if it is worth having vs. having users go to the login page). 

Did you get the full green light on teh Windows Auth settings page?  Did you see any authentication events in the logs? 

 
New Post
7/11/2006 3:29 PM
 

What doesn't seem to work:

AD Authentication on multiple portals.  The AD Authentication wants to add a new user instead of recognizing that one exists and adding on to the UserPortals table instead.

AD Passwords.  Security never seems to authenticate a user by passing in the username and password from AD in my environment.  I've had to detect which authentication type is being used and only authenticate username and password for Forms security.

I've worked around both of these by editing the source code, but would like to see them fixed in DNN.

One other item which I haven't been able to compare to the working of a Forms authentication environment is to redirect the user to where they were attempting to go before being sent through the login process.  This was one of the items which was slated to be fixed (under forms authentication) but doesn't seem to work with AD authentication.

 
Previous
 
Next
HomeHomeDNN Open Source...DNN Open Source...Provider and Extension ForumsProvider and Extension ForumsAuthenticationAuthenticationQuick AD Auth run down - What works for meQuick AD Auth run down - What works for me


These Forums are dedicated to discussion of DNN Platform and Evoq Solutions.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
  2. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  3. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  4. No Flaming or Trolling.
  5. No Profanity, Racism, or Prejudice.
  6. Site Moderators have the final word on approving / removing a thread or post or comment.
  7. English language posting only, please.
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out