Re: ActiveDirectoryMembershipProvider - IsInRole problem



right - and i think it is a pretty heavy limitation that there is no AD role provider...

it is on my todo list - but i haven't found time so far...


You have to fetch them manually - joe knows at least 3 ways to do that :)

---------------------------------------
Dominick Baier - DevelopMentor
http://www.leastprivilege.com

ps - the use case for this authentication method is all users are in
AD, but some use firefox or opera as their browser.

"Dominick Baier [DevelopMentor]" wrote:

is the problem on the other thread resolved??

There is no ActiveDirectoryRolesProvider - the roles are not
populated from AD...thats why IsInRole fails.

---------------------------------------
Dominick Baier - DevelopMentor
http://www.leastprivilege.com
Hi;

For forms/ActiveDirectoryMembershipProvider authentication, I get an
authenticated user but IsInRole fails. I am getting a FormsIdentity
where authentication-"Forms" and name="dave". I do have to enter my
domain password for it to login.

web.config:
<roleManager enabled="true"/>
<authentication mode="Forms">
<forms name=".ADAuthCookie" loginUrl="login.aspx">
</forms>
</authentication>
<authorization>
<deny users="?"/>
</authorization>
<membership defaultProvider="MyProvider">
<providers>
<clear/>
<add name="MyProvider"
type="System.Web.Security.ActiveDirectoryMembershipProvider,
System.Web, Version=2.0.0.0, Culture=neutral,
PublicKeyToken=b03f5f7f11d50a3a"
connectionStringName="ADService"
attributeMapUsername="SAMAccountName"
/>
</providers>
</membership>


.



Relevant Pages