Re: ASP.NET with ADirectory role based authentication

From: Joe Kaplan \(MVP - ADSI\) (joseph.e.kaplan_at_removethis.accenture.com)
Date: 08/26/04

  • Next message: Mike: "RedirectFromLoginPage, use location.replace instead?" 
    Date: Thu, 26 Aug 2004 12:35:40 -0500

    Additionally, you can use Google groups to find some other examples of doing
    the group lookup properly. The example in the article provided by Paul is
    okay, but it has a few flaws in it that could cause you trouble. I've
    written about it here pretty extensively. Until I am successful at getting
    the PAG guys to update the article with better code, you'll have to find it
    via other sources. TokenGroups is the keyword.

    Joe K.

    "Paul Clement" <UseAdddressAtEndofMessage@swspectrum.com> wrote in message
    news:dn5si0pv1ngp9f944btlm7lptf0fo5ktbc@4ax.com...
    > On Thu, 26 Aug 2004 02:51:59 -0700, naijacoder naijacoder
    <naijacoder@toughguy.net> wrote:
    >
    > ¤ Thanks very much for the reply and for the article but
    > ¤ i have made a form authentication already with ADirectory and its
    > ¤ working FINE!
    > ¤ But what i want to do now is to authenticate against a particular GROUP
    > ¤ for example Security in Active Directory.
    > ¤ For example a USER A logs in and he is not in the group called security
    > ¤ he shouldn't have access and if he is in the GROUP Security then he
    > ¤ should be authenticated.
    > ¤ I was thinking about using ROLES in Active Directory but my Question is
    > ¤ that can i have roles created in Windows 2000 server Active
    > ¤ Directory?And if i can can i use form authentication directly to the
    > ¤ ROLES in Actice Directory!!.
    > ¤ Thnaks in advance and all ideas are welcome.
    > ¤
    >
    > The link posted by Mohamed has a subtopic link (in the Contents section)
    to a function that
    > enumerates the user's group membership:
    >
    > Develop LDAP Group Retrieval Code to Look Up the User's Group Membership
    >
    http://msdn.microsoft.com/library/default.asp?url=/library/en-us/secmod/html/secmod16.asp
    >
    >
    > Paul ~~~ pclement@ameritech.net
    > Microsoft MVP (Visual Basic)

  • Next message: Mike: "RedirectFromLoginPage, use location.replace instead?"

    Relevant Pages

    • Re: ASP.NET with ADirectory role based authentication
      ... For example a USER A logs in and he is not in the group called security ... I was thinking about using ROLES in Active Directory but my Question is ... Directory?And if i can can i use form authentication directly to the ... Develop LDAP Group Retrieval Code to Look Up the User's Group Membership ...
      (microsoft.public.dotnet.framework.aspnet.security)
    • RE: ASP.NET with ADirectory role based authentication
      ... i have made a form authentication already with ADirectory and its ... For example a USER A logs in and he is not in the group called security ... I was thinking about using ROLES in Active Directory but my Question is ... Directory?And if i can can i use form authentication directly to the ...
      (microsoft.public.dotnet.framework.aspnet.security)
    • Re: Cant remove old server from server list in active Directory
      ... Thanks Paul, I have just found the right stuff on the CD ... to install and at last the defunct server is gone. ... >> Active Directory Domains and Trusts ...
      (microsoft.public.win2000.active_directory)
    • Re: LDAP Security
      ... Follow Paul W's advice. ... > Our Active Directory stores customer user accounts. ... > permissions, any customer can query our Active Directory and obtain a list ...
      (microsoft.public.windows.server.active_directory)
    • Some users can log on, and other cannot
      ... Bill can log in just fine, but Paul cannot. ... Active Directory Users and Computers and took a look at both of them, ... have), whereas Paul is a member of "Domain Users", "Providers" and another ...
      (microsoft.public.dotnet.framework.aspnet)