Products

Solutions

Resources

Partners

Community

Blog

About

QA

Ideas Test

New Community Website

Ordinarily, you'd be at the right spot, but we've recently launched a brand new community website... For the community, by the community.

Yay... Take Me to the Community!

Welcome to the DNN Community Forums, your preferred source of online community support for all things related to DNN.
In order to participate you must be a registered DNNizen

HomeHomeDNN Open Source...DNN Open Source...Provider and Extension ForumsProvider and Extension ForumsAuthenticationAuthenticationSame Username Different Domains Same ForestSame Username Different Domains Same Forest
Previous
 
Next
New Post
9/8/2010 2:43 PM
 
AD Auth works like a champ for almost all our users.  We have isolated the problem to being when we have the same username in different domains.  At that point both users get Login denied.  Example: Jim  Smith is DomA\JSmith and Judy Smith is DomB\JSmith. I have isolated the problem by creating my username in another domain in the forest and locked out my account until I removed the semi-duplicate name.  Error displayed is the default login unsuccesful nothing related was found in the logs.  Any ideas on how to get the ADSI to use the full DOM\User nomenclature to distinguish these users and log them insuccessfuly?
 
New Post
9/9/2010 11:56 AM
 
Hi Dan

This is a first. I've only got single domains to test against and I've never had anyone ask or mention the problem you're having. My initial reaction is that it should work as the usernames  are different when they get entered into the db seeing as they go in as DomA\JSmith and DomB\JSmith. That said, I'd have to step through the code to see where it's going sideways. Because I don't have multiple domains to work with that's impossible for me to do at the moment.
 
New Post
11/19/2010 4:35 PM
 
Anything new? Any suggestions for things I can do to isolate this in a way that helps the project?

We keep finding colliding usernames and even had a major user start coliding after another domain added a user with the same username.
 
New Post
12/3/2010 11:36 AM
 
Found it...kind of. When the domain name(s) are entered in uppercase it works. 

I see a ToUpper in the code for handling the domain part of username@dom logins but not for handling the domain part of dom\username logins.
 I have yet to succeeded in fixing the code itself on my site(s).

Since AD Domain names are not case sensitive, I'm not sure why it matters, but it apparently ADSI expectes capitaliation does someplace deeper in the code.

Message:
System.NullReferenceException: Object reference not set to an instance of an object. at DotNetNuke.Authentication.ActiveDirectory.ADSI.Utilities.AddADSIPath(String Path, Path ADSIPath) at DotNetNuke.Authentication.ActiveDirectory.ADSI.Utilities.GetDomainByBIOSName(String Name) at DotNetNuke.Authentication.ActiveDirectory.ADSI.Utilities.GetUserEntryByName(String Name) at DotNetNuke.Authentication.ActiveDirectory.ADSI.ADSIProvider.GetUser(String LoggedOnUserName, String LoggedOnPassword)

 

 
New Post
12/4/2010 11:14 AM
 
Hmmm okay. I think I know where to look for it but I don't have my code handy to tell you where to fix it. The ToUpper in the code was for a string compare that was failing if the case was different.

Edit: Can you enter this as a bug in Codeplex please?
 
Previous
 
Next
HomeHomeDNN Open Source...DNN Open Source...Provider and Extension ForumsProvider and Extension ForumsAuthenticationAuthenticationSame Username Different Domains Same ForestSame Username Different Domains Same Forest


These Forums are dedicated to discussion of DNN Platform and Evoq Solutions.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
  2. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  3. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  4. No Flaming or Trolling.
  5. No Profanity, Racism, or Prejudice.
  6. Site Moderators have the final word on approving / removing a thread or post or comment.
  7. English language posting only, please.
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out