web-inside wrote
Hi Mike
If an admin add a property (for example : employeeNumber, company, department, etc.), he current provider won't update theses values.
My fix read added properties and update them.
I am not a programer, so I don't understood in which direction sync ocures in web-inisde solution? AD -> DNN or DNN -> AD?
I have similar needs as seen in thread http://www.dotnetnuke.com/Community/Forums/tabid/795/forumid/89/scope/posts/threadid/290261/Default.aspx
As I see AD provider is best when you have an intranet environment (LAN or VPN). When you have a lot of external/internet users, which logs in from
different IP adresses AD provider it is almost useless in my point of view (if someone feels otherwise feel free to correct me ). Lets consider my case. We are non profit organization. From sponsors we get server Win2003 on which I installed DNN, i.e. AD, IIS, SQL and DNN on the same server, which is not very clever nor secure, but we don't have resources nor needs for enterprise security. Although AD is a good way of storing user information. In the future we may deploy other solutions such as mail, which requires authentication too, and we may use AD. Thats why I planned on using AD authentication for DNN website. But only recently Mike clarified that AD provider is one way (see forum link above), i.e. reading form AD and writing to DNN SQL database, no storing in AD (no two way sync). I am not sure what is the reasoning to copy initial AD account info to DNN and then using it locally... It seams DNN is replicating AD funtion, but not fully, only for the current website/portal. In my case I would like users to access the website with AD account, to be able to change password and other info for AD account, because users don't have dirrect access to the server with AD by any other means (at least yet )...
Sumarizing i would offer to make AD provider in the following way:
- If AD provider is used, AD account should not be recreated/copied in DNN SQL database. It just adds additional security/sync difficulties.
- All queries/writes/updates are performed directly to AD
These are just my thoughts comming from my experience and my needs, developers decides, what is really needed.
Thanks
Benediktas