Forms Authentication with Active Directory



I have a number of remote users that connect to the domain through a VPN
device. I need a simple process for them to be able to change their passwords
- some of them only have http bookmarks. The VPN is configured to
authenticate users with the Active Directory.
I found this article: http://msdn2.microsoft.com/en-us/library/ms998360.aspx
& followed along - I can do a little hacking, but I'm primarily a system/db
admin.

I can run the web page in the designer & it works fine, however, when I
attempt to run it on the server, from another server in the domain, or from a
bookmark on the VPN, I get an web.config configuration error, & the following
line is highlighted:

<authentication mode="Forms">

I don't understand what's wrong. Is the web.config file case sensitive? Do
the entries need to be in a specific order?

If it will help, here is my entire web.config:
<?xml version="1.0"?>
<!--
Note: As an alternative to hand editing this file you can use the
web admin tool to configure settings for your application. Use
the Website->Asp.Net Configuration option in Visual Studio.
A full list of settings and comments can be found in
machine.config.comments usually located in
\Windows\Microsoft.Net\Framework\v2.x\Config
-->
<configuration>
<appSettings/>
<connectionStrings>
<add
connectionString="LDAP://MyDomain.local/CN=Users,DC=MyDomain,DC=local";
name="ADConnectionString"/>
</connectionStrings>
<system.web>
<!--
Set compilation debug="true" to insert debugging
symbols into the compiled page. Because this
affects performance, set this value to true only
during development.
-->
<compilation debug="true"/>
<!--
The <authentication> section enables configuration
of the security authentication mode used by
ASP.NET to identify an incoming user.
-->
<authentication mode="Forms">
<forms
name=".ADAuthCookie"
timeout="10" />
</authentication>
<authorization>
<deny users="?" />
<allow users="*" />
</authorization>
<membership defaultProvider="MyADMembershipProvider">
<providers>
<add
name="MyADMembershipProvider"
type="System.Web.Security.ActiveDirectoryMembershipProvider,
System.Web, Version=2.0.0.0,
Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a"
attributeMapUsername="sAMAccountName"
connectionStringName="ADConnectionString"
connectionUsername="MyDomain\AdminUser"
connectionPassword="LotsaLuck99$"/>
</providers>
</membership>
<!--
The <customErrors> section enables configuration
of what to do if/when an unhandled error occurs
during the execution of a request. Specifically,
it enables developers to configure html error pages
to be displayed in place of a error stack trace.

<customErrors mode="RemoteOnly"
defaultRedirect="GenericErrorPage.htm">
<error statusCode="403" redirect="NoAccess.htm" />
<error statusCode="404" redirect="FileNotFound.htm" />
</customErrors>
-->
</system.web>
</configuration>

Thanks in advance





.



Relevant Pages

  • Re: Forms Authentication with Active Directory
    ... VPN device. ... the Website->Asp.Net Configuration option in Visual Studio. ... The <authentication> section enables configuration ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Forms Authentication with Active Directory
    ... Dominick Baier ... VPN device. ... the Website->Asp.Net Configuration option in Visual Studio. ... The section enables configuration ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • mpd configure and route issues
    ... configuration, and therefore, slightly different problems. ... not enough of them show the network layout, along with the configuration, so ... firewall and gateway, I'm good, just no joy with the VPN yet. ... And my route table now has this added on: ...
    (FreeBSD-Security)
  • Re: Setting up VPN+IPSec+Racoon
    ... I meant that port, the binary called racoon there, too. ... The serv will connect to the SMS server and get the received SMSes, but the connection to the SMS server is only allowed via VPN. ... I've installed ipsec-tools, and tried to configure it, but I can't start racoon and I get a configuration file parse error. ... # "padding" defines some padding parameters. ...
    (freebsd-questions)
  • Configuring router for VPN passthrough
    ... to VPN requests, and have the laptop configured to connect as a VPN ... The connection made from inside the firewall (directly to the ... I think it has to be the router configuration for VPN ...
    (comp.security.firewalls)