I have been having a problem with AD Authentication   it throws error but otherwise seems to work.

My Environment

DNN 5.6.7

ADAuth

Server 2008

IIS 7.5    name gis.marinpublic.com  is in a different domain than the LDAP server in missxx.co.marin.ca.us

My AD domain name is ADMIN

This site is 1 of 3 but the only one using Window Authentication.

These are the settings I use  and have used it  on a internal intranet  system  without logging any errors.

I’m using my own name password but have another ID/password that can read the AD server.  I verify it using ADExplorer.  It give the same

Provider	ADSIAuthenticationProvider
Authentication Type	Delegate
Root Domain:
User Name:
Password:
Confirm Password:
Email Domain:
Default Domain
Auto-login IP Address (Optional):
Allowed Search Bots

An error has occurred.
Error: is currently unavailable.

I get a 3 errors in the Event Log   The first 2 are the same

 ExceptionGUID: ef0a536c-ca94-4bd3-a086-2f9b3a583478
InnerException: Logon failure: unknown user name or bad password.
FileName:
FileLineNumber: 0
FileColumnNumber: 0
Method: System.DirectoryServices.DirectoryEntry.Bind
StackTrace:
Message: System.DirectoryServices.DirectoryServicesCOMException (0x8007052E): Logon failure: unknown user name or bad password. at System.DirectoryServices.DirectoryEntry.Bind(Boolean throwIfFail) at System.DirectoryServices.DirectoryEntry.Exists(String path) at DotNetNuke.Authentication.ActiveDirectory.ADSI.Configuration..ctor()

 Maybe using the wrong domain??? 

(I’m very  sure  the username and password are correct

An then I get the following error

InnerException: Object reference not set to an instance of an object.
FileName:
FileLineNumber: 0
FileColumnNumber: 0
Method: DotNetNuke.Authentication.ActiveDirectory.ADSI.Utilities.AddADSIPath
StackTrace:
Message: DotNetNuke.Services.Exceptions.ModuleLoadException: Object reference not set to an instance of an object. ---> System.NullReferenceException: Object reference not set to an instance of an object. at DotNetNuke.Authentication.ActiveDirectory.ADSI.Utilities.AddADSIPath(String Path, Path ADSIPath) at DotNetNuke.Authentication.ActiveDirectory.ADSI.Utilities.GetRootEntry(Path ADSIPath) at DotNetNuke.Authentication.ActiveDirectory.ADSI.ADSIProvider.GetNetworkStatus() at DotNetNuke.Authentication.ActiveDirectory.AuthenticationController.NetworkStatus() at DotNetNuke.Authentication.ActiveDirectory.Settings.UpdateSettings() --- End of inner exception stack trace ---

 But the peculiar thing is it does seem to authenticate OK through the Integrated login  at

https://gis.marinpublic.com/DNN/Deskt...

I would be more confident if I did not see any errors.    

The actual root domain is  OU=County,dc=co,dc=marin,dc=ca,dc=us.  I am sure the users are in that container

• OU=County,dc=co,dc=marin,dc=ca,dc=us
• dc=co,dc=marin,dc=ca,dc=us
• co.marin.ca.us
• dc=marinpublic,dc=com

 I mentioned that I was able to get the ADAuth to work on a internal server ( inside firewall) . 

Does the ADSIAuthenticationProvider  require any specific  firewall setting ie a open  protocol gate Like LDAP?
 

Unfortunately My windows account got locked out . so I won't be able to try any thing till Monday.