The only change that is "required" for mixed-mode is to leave the http authentication line commented out.  But then, that is not really a change as it is commented out by default, so in essence no changes are necessary at all!  *grin*

The <identity> line changes are only necessary if it doesn't work with the default settings.

So, try it with the settings straight from the release.config.  If that doesn't work, mess with the <identity> settings.

Hi again.

I'm back on this subject after some days "out of office" (because from sunday, I'm the father of a wonderful little girl ).

Actually, identification with AD users is operational (Yeah !).

But, of course, I have new questions.

1. Actually, for A.D. identification, the username must be DOMAIN\userID. I would like suppress the "DOMAIN\" and just use the UserID. Is it possble by confiiguration or is it necessary to change the page's sourcecode.

2. I have a problem with "Security roles delegation". 
My understanding of the correct usage is : If I define security roles with exactly the same name as AD groups and if I give some rights in DNN for that group, users member of the group in AD are affected by the security role.

My problem is... that's not functionning : for testing, I've defined a security Role "Domain Users" and I've resticted the view rights on a module for that group only. When I log on with a Domain user, I don't see my page. Have you any suggestion for me ?

Thank you in advance (and sorry for my poor english )

Etienne