We have not been able to get authentication to multiple root domains working.  Basically, we have multiple domains, like us.domain.com, asia.domain.com, europe.domain.com.  These domains are all part of the same AD forest.  We need to be able to have users from any domain in the forest login to dnn using their ad username/password.  We have been able to configure one or the other, but not all.  If we setup us.domain.com, all users in us can auth, but users in asia.domain.com can not.  The reverse is also correct.  So, if there is no way to set this up currently, this is a very important feature to add.  If it is possible, please let me know any implementation tips.

Help has also been requested in the main AD Use forum at:

http://dotnetnuke.com/Community/ForumsDotNetNuke/tabid/795/forumid/89/threadid/64772/scope/posts/Default.aspx

Thanks,

Keehan

Sorry about the delay.  I ended up getting pulled from the DNN project and thrown on to another.  Now I am back on the DNN project and ready to get down to work.  However, I only have a limited amount of time.  I will see what I can knock off the list. 

I will add your suggestions to the Gemni tracker so maybe in the future all will be addressed.

In regards to the the storing of the AD password let me say this.  Back in Dnn 1 and 2 days I rewrote the authentication piece to login against a Novell Directory.  My approach at the time was this; (I am not sure if this is a good way to do this, so I am interested in feedback)

I had the users log into Novell via Ldap.  Once Ldap confirmed them as a user I went ahead and passed their name on to Dnn.  Dnn then took the user and determined their username.  If they didn't exist in Dnn, then they were created based on there usernames and given a generic password that all users got.  Also they were placed into a series of rolls based on ldap attributes. 

If they already existed in DNN then they were simply logged in via username and fake password and roles where resynced  with ldap attributes.  <--All this code is available in the Dotnetnuke area on asp.net.  http://forums.asp.net/2/1066275/ShowThread.aspx

What do you guys think?  Is that a good approach?

Stuart