I have tried for several days unsuccessfully to get this to work and the documentation is so fragmented that I'm not sure what to believe/read any more. So here goes:

I'm rolling out an intranet for a company that has a domain controller on a different machine than the site. I have set the following:
Sync Role: Yes please
Provider: ADSIAuthenticationProvider
Authentication Type: Delegation
Root domain: 'Acmenet' (NETBIOS name of DC)
User name: 'Acmenet\Administrator'
These settings gave the green flag of being OK.

Second step: The company roles were added to DNN as SomeRole and Acmenet\SomeRole. Why there is no documentation on this part is beyond me. It seems quite critical for this to work after going through the various posts. I understand that DNN does not import the roles, only the user once he/she logs on. Hmmm.

Third step: Then I uncommented the part under httpModules in the web.config.
Fourth step: I deselected the 'Anonymous Access' of the WindowsSignin.aspx. Note that, again, documentation is conflicting here as some suggested doing this for the whole site. Furthermore, no-one notes that just deselecting 'Anonymous Access' will leave your site useless. You'll need to select another form of authentication. You'll find 'basic authentication', 'integrated windows authentication', and 'digest authentication for windows domain servers'. It seems integrated windows authentication is probably the best bet. Note that when things don't work I'm left guessing whether it was this setting that might have been wrong.

So far so good. Now for step five: Then a user calls up the site and logs on (we're still in forms authentication but that should make no difference as that concerns another level, right). The user is added to the Users table and is only assigned the public roles. None of the AD roles (or groups as they are called there ... great for more confusion) were added. Moreover, the Users Accounts module stopped working when asked to display all users throwing the following error:

System.NullReferenceException: Object reference not set to an instance of an object. at DotNetNuke.UI.WebControls.TextColumnTemplate.GetValue(DataGridItem container) at DotNetNuke.UI.WebControls.TextColumnTemplate.Item_DataBinding(Object sender, EventArgs e) at System.Web.UI.Control.OnDataBinding(EventArgs e) at System.Web.UI.Control.DataBind(Boolean raiseOnDataBinding) at System.Web.UI.Control.DataBind() at System.Web.UI.Control.DataBindChildren() at System.Web.UI.Control.DataBind(Boolean raiseOnDataBinding) at System.Web.UI.Control.DataBind() at System.Web.UI.Control.DataBindChildren() at System.Web.UI.Control.DataBind(Boolean raiseOnDataBinding) at System.Web.UI.Control.DataBind() at System.Web.UI.WebControls.DataGrid.CreateItem(Int32 itemIndex, Int32 dataSourceIndex, ListItemType itemType, Boolean dataBind, Object dataItem, DataGridColumn[] columns, TableRowCollection rows, PagedDataSource pagedDataSource) at System.Web.UI.WebControls.DataGrid.CreateControlHierarchy(Boolean useDataSource) at System.Web.UI.WebControls.BaseDataList.OnDataBinding(EventArgs e) at System.Web.UI.WebControls.BaseDataList.DataBind() at DotNetNuke.Modules.Admin.Users.UserAccounts.BindData(String SearchText, String SearchField) at DotNetNuke.Modules.Admin.Users.UserAccounts.Page_Load(Object sender, EventArgs e)

So it cannot display the users any longer, nor do people get assigned roles. Nor do we see the person's name at the top of the screen.

Does anyone know how to get this mechanism to work? I gather from other posts that there are some successful installations, so I'm baffled why I'm running into all this. I've even tried to replace the dlls as per fix on http://dnn.gmss.org/

Cheers,

Peter

---

Peter Donker

http://www.bring2mind.net Home of the Document Exchange, the professional document management solution for DNN