Products

Solutions

Resources

Partners

Community

Blog

About

QA

Ideas Test

New Community Website

Ordinarily, you'd be at the right spot, but we've recently launched a brand new community website... For the community, by the community.

Yay... Take Me to the Community!

Welcome to the DNN Community Forums, your preferred source of online community support for all things related to DNN.
In order to participate you must be a registered DNNizen

HomeHomeDNN Open Source...DNN Open Source...Provider and Extension ForumsProvider and Extension ForumsAuthenticationAuthenticationDomain user without domain name?Domain user without domain name?
Previous
 
Next
New Post
9/8/2008 10:37 AM
 

We have over 1000 users already in our DNN portal and have been using a different method of automatically logging our users in but wanted to start looking at potentially using the AD provider (because of linked documents, etc).  The problem is our users do not have the domain prepended (ie., MyDomain\MyUser; ours is just MyUser).  So now, on our staging site if I access it it creates a new login for my using "MyDomain\Me" and I still have another login as "Me".  Obviously this is bad since I have literally hundreds of records on the intranet linked to my userid from "Me". 

Now I realize that I could solve this simply by running a SQL command to go through and add "MyDomain\" to the beginning of all logins on the portal except for our host and admin accounts, but I'm not exactly in love with that idea.

Thoughts?


-- Jon Seeley
DotNetNuke Modules
Custom DotNetNuke and .NET Development
http://www.seeleyware.com
 
New Post
9/9/2008 1:10 AM
Accepted Answer 

I know where you're coming from but with the current code there's no way around it unless you want to change the source. The code for stripping the domain off the user is already in the code but was never fully implemented because if potential after effects that, frankly, I couldn't really think of a way around. Because of the way you're already starting out I don't see a problem with your using it. 

Email me at mhorton@telus.net and I can let you know what needs to be changed.

 

 
New Post
9/9/2008 9:31 AM
 

That makes sense and I can understand the possible repercussions.  As a suggestion it could be a feature that an end user could turn on or off, and you could allow "wildcard" stripping (like anything that begins with someDomain* or regex stripping, etc).  Maybe even only strip the domain if the user is coming from a certain range of IP addresses?

As I started thinking about the problem we were facing here at work and possible solutions I actually came up with a solution to our problem that wouldn't require switching authentication providers.  The SW.AutoLogon module has a Windows/AD mode (which we've been using) but our problem was linking to secured tabs/files via newsletters/emails.  Then it occurred to me (and it was a complete DUH! moment) that we should create our own login page, drop the Account Login module on there (just in case) and an instance of the SW.AutoLogon module; any attempts to access protected content without a login would redirect to that page, the SW.AutoLogon would pick it up, log them in, and redirect back to the requested page.  Same theory would of course apply with the core DNN AD Provider.

Anyway, since we were already using the SW.AutoLogon and only missing that minor piece it was easy to put that on there and fix it.  The SW.AutoLogon module can handle domain stripping (along with the wildcarding I mentioned above) so it worked out good for us.

Additionally we perform an import every week from our HR software to pull in new users and changes for old users (including department transfers, terminations, etc; import contains all sorts of employee data that other custom modules feed from).  Our import module handles all the security roles (because our AD roles are completely different from our DNN roles and we want to keep it that way), etc., so it makes for a great combination. 

I dunno, we may still want to switch for the auto creation of users just in case somebody tries to access the intranet before HR imports them (which has happened on several occasions).  I think I'll email you direct to talk about the domain stripping.  BTW, the source download doesn't appear to actually have source in it. :)

*EDIT* The source is in the source package, as a SourceFiles.resources.  I just wasn't expecting to find it packaged that way and overlooked that file.  Oops!


-- Jon Seeley
DotNetNuke Modules
Custom DotNetNuke and .NET Development
http://www.seeleyware.com
 
Previous
 
Next
HomeHomeDNN Open Source...DNN Open Source...Provider and Extension ForumsProvider and Extension ForumsAuthenticationAuthenticationDomain user without domain name?Domain user without domain name?


These Forums are dedicated to discussion of DNN Platform and Evoq Solutions.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
  2. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  3. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  4. No Flaming or Trolling.
  5. No Profanity, Racism, or Prejudice.
  6. Site Moderators have the final word on approving / removing a thread or post or comment.
  7. English language posting only, please.
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out