New Community Website

Ordinarily, you'd be at the right spot, but we've recently launched a brand new community website... For the community, by the community.

Yay... Take Me to the Community!

Welcome to the DNN Community Forums, your preferred source of online community support for all things related to DNN.
In order to participate you must be a registered DNNizen

HomeHomeDNN Open Source...DNN Open Source...Provider and Extension ForumsProvider and Extension ForumsAuthenticationAuthenticationRole SychronizationRole Sychronization
Previous
 
Next
New Post
12/23/2009 5:25 PM
 

Mike,

I am really hoping you can help me out as I have been racking my brain and trying everything to get role sych happening.

First off I have DNN 5.1.4 and 5.0.2 of the AD Provider configured

Login works a treat and my users are auto added when loggin in with AD credentials pklus it is auto loggin in without a problem for internal users when site is set to intranet.  I have ticked synch roles and I get a green tick when updating ad auth screen and it recognised my domain.  I have used ldapbrowser from the portal box on our DMZ to ensure that it can read AD anyway just to be sure I can see all attribuites group memberships etc as well

What is not happening is that user roles are not sychronising and I have tried Impersonate plus anything else I can find when people have suggested.

I get no error messages and the event viewer shows nothing.  The roles are named exactly as the pre windoes 2000 name in AD but still not luck

is there any way I can find out why its not working for me to at lease see why the roles arent syching?

any help would be very appreciated

 
New Post
12/29/2009 4:59 PM
 

Ok so I believe I have solved my problem after reading some other posts.

Essentially what I had to do is to set my security groups in AD to Universal to have synchronization work for me.

A bit of background on my setup may help with future development so my AD environment consists of 1 domain with 2 child domains with the synch groups that I wanted residing in the primary domain

eg      (names changed for obvious reasons)

  • domain.local
    • child1.domain.local
    • child2.domain.local

I would suggest that whatever code is iterating through the groups is not picking up domain local groups when the domain is part of a multi domain AD structure.

 
New Post
1/8/2010 11:31 AM
 

Thanks for the tidbit Barry. Unfortunately I don't currently have access to a multi-domain setup so I can't debug the code to verify that this indeed is what is happening but I'll keep it in mind if I do.

 
Previous
 
Next
HomeHomeDNN Open Source...DNN Open Source...Provider and Extension ForumsProvider and Extension ForumsAuthenticationAuthenticationRole SychronizationRole Sychronization


These Forums are dedicated to discussion of DNN Platform and Evoq Solutions.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
  2. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  3. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  4. No Flaming or Trolling.
  5. No Profanity, Racism, or Prejudice.
  6. Site Moderators have the final word on approving / removing a thread or post or comment.
  7. English language posting only, please.