Re: Does 'IsInRole()' check against Active Directory groups?

From: Joe Kaplan \(MVP - ADSI\) (joseph.e.kaplan_at_removethis.accenture.com)
Date: 08/30/05

  • Next message: Joe Kaplan \(MVP - ADSI\): "Re: dynamically requesting windows authentication on a resource" 
    Date: Mon, 29 Aug 2005 23:11:10 -0500

    Yes, definitely use the built in stuff if you can.

    Generally, people do forms auth against AD if there is a technical or policy
    problem with making the web server a domain member or someone really wants
    forms auth and wants to torture their devs. The Ldap-based
    MembershipProvider thing in .NET 2.0 should simplify this more though.

    Joe K.

    "Craig Vedur" <CraigVedur@discussions.microsoft.com> wrote in message
    news:7B224F7E-EFE1-44D8-A1AE-72469411E086@microsoft.com...
    > Thanks Joe, this worked. I have another question.
    >
    > Initially, i had a login page on my app and used
    > System.DirectoryServices.dll to query AD to authenticate a user / pass.
    >
    > However, it appears that .NET handles this all for me if i disable
    > anonymous
    > access and use the integerated windows auth. Is this true?
    >
    > My app poped up a login screen for user / pass / domain.
    >
    >
    >
    > "Joe Kaplan (MVP - ADSI)" wrote:
    >
    >> Yes. It depends on how users are being authenticated by IIS and how you
    >> have ASP.NET configured, but if your web server is a member of a domain
    >> that
    >> can authenticate users in your target domain and you have ASP.NET
    >> configured
    >> for Windows authentication, IsInRole will answer true/false for the
    >> user's
    >> domain groups.
    >>
    >> Joe K.
    >>
    >> "Craig Vedur" <CraigVedur@discussions.microsoft.com> wrote in message
    >> news:A0DE7A20-1473-4EF8-A550-977974314D94@microsoft.com...
    >> >I need to build in some role authentication for a web app... so,
    >> >going
    >> >to
    >> > use the web.config to build my rules for the location files.
    >> >
    >> > my question is.. does anyone know?
    >> >
    >> > on my development box (out of work), i'm out XP Pro... and i've
    >> > created
    >> > some groups and users to test it...
    >> >
    >> > in the real deal, it's going to be Win 2003 Server using Active
    >> > Directory..... Obviously, i dont have AD on XP Pro..... Is it the
    >> > same
    >> > thing? Will it work the same?
    >> >
    >> > Will web.config be able to recognize the groups that a user belongs to
    >> > to
    >> > correctly authorize viewing a page based on role authentication?
    >> >
    >> >
    >> > So, will IsInRole() check against groups created in Active Directory on
    >> > Win2003 Server?
    >>
    >>
    >>

  • Next message: Joe Kaplan \(MVP - ADSI\): "Re: dynamically requesting windows authentication on a resource"

    Relevant Pages

    • Re: LDAP user authentication error with VBScript from ASP
      ... ADSI code has this error. ... Windows authentication instead of forms auth in the first place. ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ... I've been using the below code in my ASP page to authenticate users ...
      (microsoft.public.windows.server.active_directory)
    • Re: Is is possible to have Active Directory use a different LDAP server for logging in users?
      ... Thanks Joe, I think that will help out a lot and will look into it. ... LDAP isn't a good auth mechanism and isn't an auth ... Joe Richards Microsoft MVP Windows Server Directory Services ... Author of O'Reilly Active Directory Third Edition ...
      (microsoft.public.windows.server.active_directory)
    • Re: Authentication? Forms without Anynymous access
      ... If you want to keep using that system and forms auth, ... If you really want to use Windows auth, then you can still do role-based ... If your app needs to authenticate users ... >> If the need is for your app to authenticate users in the domain, ...
      (microsoft.public.dotnet.security)
    • Re: URL Authorzation Problem
      ... Serves me right... ... > Hello Joe, ... >> What I'm not totally sure about is whether the forms auth module will ... >> I'm not really that much of a forms authentication expert as it is. ...
      (microsoft.public.dotnet.framework.aspnet.security)