Re: Using WindowsTokenRoleProvider with Forms Authentication ...

You might want to check out Ryan Dunn's LDAP-based AD role provider on
CodePlex. It works as a nice compliment to the AD membership provider.

Another option is to use protocol transition logon (new
WindowsIdentity(upnString)) to generate a token for the authenticated user
using their UPN and then perform role checks against that. However, that
requires 2003+ web servers and a 2003 native mode AD forest.

Joe K.

--
Joe Kaplan-MS MVP Directory Services Programming
Co-author of "The .NET Developer's Guide to Directory Services Programming"
http://www.directoryprogramming.net
--
"Dominick Baier" <dbaier@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
message news:8e6a913a1b66b8ca218b69669fc0@xxxxxxxxxxxxxxxxxxxxx
thats true.


-----
Dominick Baier (http://www.leastprivilege.com)

Developing More Secure Microsoft ASP.NET 2.0 Applications
(http://www.microsoft.com/mspress/books/9989.asp)

Hi:
Has anybody managed to do this? We have setup forms authentication
to
validate against AD. We'd like to use AD for roles based
authorization.
The documentation on ASP.NET leads me to believe
WindowsTokenRoleProvider is possible only if I use Integrated Windows
Authentication?

Thank you for your help.

Cheers,
-Naraen
http://naraen.spaces.live.com




.

Relevant Pages

  • Re: LDAP - Error Obtaining Group Names
    ... plug that back into the role provider framework in order to compliment the ... membership provider. ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ... The technique they show for authentication does not scale ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Using WindowsTokenRoleProvider with Forms Authentication ...
    ... Joe Kaplan-MS MVP Directory Services Programming ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ... We have setup forms authentication ... WindowsTokenRoleProvider is possible only if I use Integrated Windows ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Authentication help.
    ... Your best bet is to use A Membership or Role Provider and Forms ... Authentication in your application. ... ASP.Net Framework, can work from a custom database back-end, and manages ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Forms Authentication - Active Directory
    ... WindowsTokenAuthenticationProvider does'nt works for Forms ... Authentication as Dominick pointed, and I couldn't managed to get ... AuthorizationStoreProvider to work (ended up getting some weird ... I developed my own role provider which accesed the active ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Forms Authentication - Active Directory
    ... WindowsTokenAuthenticationProvider does'nt works for Forms ... Authentication as Dominick pointed, and I couldn't managed to get ... AuthorizationStoreProvider to work (ended up getting some weird ... I developed my own role provider which accesed the active ...
    (microsoft.public.dotnet.framework.aspnet.security)