Re: Calling NetUserGetInfo from ASP.NET app

Finally! I got it to work by using TranslateName. Go figure.
Thanks for mentioning it though, I didn't know about that api :)

"Michael D'Angelo" <nospamnmdange@xxxxxxxxxxxxxxx> wrote in message
news:ePiASNDgGHA.764@xxxxxxxxxxxxxxxxxxxxxxx

"Joe Kaplan (MVP - ADSI)" <joseph.e.kaplan@xxxxxxxxxxxxxxxxxxxxxxxx> wrote
in message news:%23nuA5VCgGHA.2416@xxxxxxxxxxxxxxxxxxxxxxx
Regarding permissions, that could be. Perhaps there is some DCOM thing
or something? I really don't know. I've never tried to use those APIs
in an architecture like this. In web apps, I mostly do delegation stuff
with HTTP, SQL and and LDAP.

Well I discovered if I put the user in the Pre-Windows 2000 Compatible
group it works. However, the user does have read access to the object in
the tree I'm trying to get info on. It seems to be something else that's
failing, which isn't getting audited in the event log.


Also, when using basic auth, you aren't really using Kerberos delegation
since basic auth performs a local login with plain credentials. There is
only one hop involved there.

Joe K.

--
Joe Kaplan-MS MVP Directory Services Programming
Co-author of "The .NET Developer's Guide to Directory Services
Programming"
http://www.directoryprogramming.net
--




.