Re: Using login alias in Membership Provider

Thanks, but I am not using AD. See above posts.

"Renaud Langis" <RenaudLangis@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:E680872F-052B-4D86-BB99-0D68D52A1268@xxxxxxxxxxxxxxxx
Hello,

If i understand correctly, you want to authenticate a user with either his
userId, his name, shortname, cn....?

You can search through ad using the anr property then get the user's upn.

For this, you need to add some code to perform the search (something like
the following)

ValidateUser(GetUPN(<whatever>),<password>)

Private Function GetUPN(ByVal userId As String) As String
Dim de As DirectoryEntry =
System.DirectoryServices.ActiveDirectory.Domain.GetCurrentDomain().GetDirectoryEntry()
Dim deSearch As DirectorySearcher = New DirectorySearcher()

deSearch.SearchRoot = de
deSearch.Filter = "(&(objectClass=user)(anr=" + userId + "))"
deSearch.SearchScope = SearchScope.Subtree
Dim results As SearchResult = deSearch.FindOne()
If Not (results Is Nothing) Then
Return results(0).Properties("userPrincipalName")
Else
Return Nothing
End If
End Function

You may need additional search properties.

warning: the function may not work as is.

HTH

Renaud

"Stephen Walch" wrote:

I believe that you have misunderstood my question. I am not trying to
add a
"Display Name". Users have only one name ("John Smith/Acme") and that is
the only name that is ever used in access control lists, role membership
lists, etc. and it is the only name that should be displayed.

The problem is that my directory allows users to authenticate with
multiple
versions of their name ("John Smith", "jsmith" jsmith@xxxxxxxx" or even
"John" or "Smith" if those happen to be unique in the organization).
Regardless of how they authenticate, I always want to return the real
name
"John Smith/Acme" to ASP.NET.


"Steven Cheng[MSFT]" <stcheng@xxxxxxxxxxxxxxxxxxxx> wrote in message
news:$ArmYfZ%23GHA.3912@xxxxxxxxxxxxxxxxxxxxxxxx
Hello Stephen,

I think Dominick's suggestion is reasonable. From the requirement you
mentioned, you want to also provide an additional display name when the
user login through their logid. I think the Display name is an
additional
field to the built-in membership provider, the built-in membership
provider
exposs username, password, email, question, answer.... properties.

Therefore, if you want to attache such additional properties, you may
consider extending the default membership provider or use other storage
(such as the Profile properties Dominick mentioned). Would you also
tell
us
how you will use the display name in your application's code (some
pseudo
code will be helpful). We can consider whch approach is better
according
to
your concrete scenario.

Here are some articles about the ASP.NET profile service and memberhip
provider

#ASP.NET Profile Properties
http://msdn2.microsoft.com/en-us/library/at64shx3.aspx

#Defining ASP.NET Profile Properties
http://msdn2.microsoft.com/en-us/library/d8b58y5d.aspx


#ASP.NET 2.0 Membership, Roles, Forms Authentication, and Security
Resources
http://weblogs.asp.net/scottgu/archive/2006/02/24/438953.aspx

Please feel free to let me know if you have any further questions or
ideas.

Sincerely,

Steven Cheng

Microsoft MSDN Online Support Lead



==================================================

Get notification to my posts through email? Please refer to
http://msdn.microsoft.com/subscriptions/managednewsgroups/default.aspx#notif
ications.



Note: The MSDN Managed Newsgroup support offering is for non-urgent
issues
where an initial response from the community or a Microsoft Support
Engineer within 1 business day is acceptable. Please note that each
follow
up response may take approximately 2 business days as the support
professional working with you may need further investigation to reach
the
most efficient resolution. The offering is not appropriate for
situations
that require urgent, real-time or phone-based interactions or complex
project analysis and dump analysis issues. Issues of this nature are
best
handled working with a dedicated Microsoft Support Engineer by
contacting
Microsoft Customer Support Services (CSS) at
http://msdn.microsoft.com/subscriptions/support/default.aspx.

==================================================



This posting is provided "AS IS" with no warranties, and confers no
rights.











.

Relevant Pages

  • Re: Using login alias in Membership Provider
    ... the only name that is ever used in access control lists, role membership ... (such as the Profile properties Dominick mentioned). ... Microsoft MSDN Online Support Lead ... where an initial response from the community or a Microsoft Support ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Using login alias in Membership Provider
    ... the only name that is ever used in access control lists, role membership ... The problem is that my directory allows users to authenticate with multiple ... Microsoft MSDN Online Support Lead ... where an initial response from the community or a Microsoft Support ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • RE: Cant log in user having "must change password" flag set (Forms Au
    ... those useraccount which has been marked with "User must change password on ... you can not get it to login through the membership ... Microsoft MSDN Online Support Lead ... where an initial response from the community or a Microsoft Support ...
    (microsoft.public.dotnet.framework.aspnet)
  • RE: security in windows app
    ... ASP.NET membership & role APIs in winform application(or other non-ASP.NET ... Microsoft MSDN Online Support Lead ... where an initial response from the community or a Microsoft Support ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • RE: Querying Active Directory
    ... How to authenticate against the Active Directory by using forms ... Microsoft Online Community Support ... where an initial response from the community or a Microsoft Support ...
    (microsoft.public.dotnet.general)