Products

Solutions

Resources

Partners

Community

Blog

About

QA

Ideas Test

New Community Website

Ordinarily, you'd be at the right spot, but we've recently launched a brand new community website... For the community, by the community.

Yay... Take Me to the Community!

Welcome to the DNN Community Forums, your preferred source of online community support for all things related to DNN.
In order to participate you must be a registered DNNizen

HomeHomeDNN Open Source...DNN Open Source...Provider and Extension ForumsProvider and Extension ForumsAuthenticationAuthenticationWindows & Anonymous AuthenticationWindows & Anonymous Authentication
Previous
 
Next
New Post
3/17/2008 3:33 PM
 

After going through a lot of work trying to get AD up and running, I have been told that AD wont work for our DNN solution. We have another department that has their own network and domain. They can connect to us through a proxy, but don't have a trust relationship with our domain. This department needs access to our website to read stuff, and download files. They don't need to log into the site.

I'm wondering if there's a way I can still allow the users on our domain log into DNN through the AD provider, and users not on our domain can still view the DNN portal anonymously?

 
New Post
3/17/2008 4:43 PM
 

Liam you don't say which version of the provider you're using but I'll assume it's 01.00.00. In any case, if you comment out the <add name="Authentication" ..../> in the <httpModules> section of your web.config. This will allow the users from the other department to browse your website without getting the IIS Login popup but unfortunately it'll also stop your domain users from automatically logging in. What I used to do with the 01.00.00 version of the provider is I put links on pages where the user's needed to be authenticated that pointed to /DesktopModules/AuthenticationsServices/ActiveDirectory/WindowsSignin.aspx (you can see what I mean on http://www.bus.nait.ca/main under Resources->I Drive).

Another possibility depending on how your company handles IP addresses is to use the 01.00.03 version of the provider (available at http://dnn.gmss.org until it is released from the DNN Release Tracker). In the provider settings section there's an option of setting what IP addresses automatically login. So if your domain gets one range of IP address and the other domain gets a completely different range you could put the range for yours in so that your users would be logged in while the other users would be able to browse the site anonymously.

 
New Post
3/18/2008 3:37 PM
 

Thanks for the help Mike.

I decided to follow your 2nd piece of advice and go with the 1.00.03 AD provider. I thought I would test it out on a test installation first. 

I installed DNN 4.08.00, and got that up running. 
Then installed the 1.00.03 AD provider which I got from your site. 
In the Authentication settings I enabled AD, entered my domain info, and entered in the IP ranges for auto-loggin. Update Successful.
I then log out from the Host account, delete all cookies, and hit the refresh button in IE. I get this error:

Server Error in '/DNNTest' Application.


Object reference not set to an instance of an object.

Description: An unhandled exception occurred during the execution of the current web request. Please review the stack trace for more information about the error and where it originated in the code.

Exception Details: System.NullReferenceException: Object reference not set to an instance of an object.

Source Error:

An unhandled exception was generated during the execution of the current web request. Information regarding the origin and location of the exception can be identified using the exception stack trace below.


Stack Trace:

 
[NullReferenceException: Object reference not set to an instance of an object.]
   DotNetNuke.Authentication.ActiveDirectory.ADSI.ADSIProvider.GetUser(String LoggedOnUserName) +69
   DotNetNuke.Authentication.ActiveDirectory.AuthenticationController.AuthenticationLogon() +247
   DotNetNuke.Authentication.ActiveDirectory.WindowsSignin.Page_Init(Object sender, EventArgs e) +100
   System.Web.UI.Control.OnInit(EventArgs e) +2117356
   System.Web.UI.Page.OnInit(EventArgs e) +9
   System.Web.UI.Control.InitRecursive(Control namingContainer) +321
   System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) +692

 

 

 
New Post
3/18/2008 3:48 PM
 

You might need to add impersonation to your web.config. How to do it is detailed in the documentation (the 01.00.02 documentation on my site is valid for 01.00.03, I just haven't renamed it).

 
Previous
 
Next
HomeHomeDNN Open Source...DNN Open Source...Provider and Extension ForumsProvider and Extension ForumsAuthenticationAuthenticationWindows & Anonymous AuthenticationWindows & Anonymous Authentication


These Forums are dedicated to discussion of DNN Platform and Evoq Solutions.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
  2. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  3. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  4. No Flaming or Trolling.
  5. No Profanity, Racism, or Prejudice.
  6. Site Moderators have the final word on approving / removing a thread or post or comment.
  7. English language posting only, please.
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out