Re: newbie help - Active Directory Membership Provider

On May 21, 12:14 am, "Joe Kaplan"
<joseph.e.kap...@xxxxxxxxxxxxxxxxxxxxxxxx> wrote:
Basically, I was just trying to say that there is no role provider that
comes with ASP.NET that works with AD groups by default except for the
WindowsTokenRoleProvider, but that provider requires that you use
Windows/IIS for authentication instead of forms auth.

...

If you don't need the AD group for authorization, then you can use whatever
role provider you want.

I hope that clarifies what I was trying to say.  :)

not sure yet! i guess what i'm trying to understand is whether one can
use *both* of these:

1) the user's AD group, which im getting automatically now from the
Integrated Windows Authentication's User object --
User.IsInRole("MyHighLevelGroup") -- as a rudimentary authororization
role. and then

2) another db-based membership provider, for my app-specific roles;
such as "ReadOnly", "SearchOnly", "FullAccess", etc..

...in this way I can do rudimentary filtering out based on AD group,
and perform more granular control w/i my app's custom roles, which i
can store in our app db.

make sense?


thanks,
sm
.

Relevant Pages

  • RE: ActiveDirectory and user page Access
    ... ASP.net has three role management providers: ... WindowsTokenRoleProvider ... AuthorizationStoreRoleProvider. ... This is a read-only provider that retrieves role information for a Windows ...
    (microsoft.public.vsnet.general)
  • Re: ASP.NET 2.0 WindowsTokenRoleProvider Local Groups Broken
    ... but meanwhile i came to the conclusion that all the optimization is also done by the LSA - so i really not see the point of this provider at all. ... If I run with RoleManager enabled in ASP.NET (<roleManager ... If I add myself to a BUILTIN group, and change the ... RoleManager enalbed for the WindowsTokenRoleProvider, ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Web Site Configuration for remote users
    ... My site uses Accounts, Roles etc and I'd like to rip out my custom ... A proper method to distribute this to my provider (a .net hosting ... Authentication ... Also, on a brand new WS2003 machine, the Config site is there, but ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Defining Groups with AD users
    ... For ASP.NET authentication and role based authorization, ... you can configure the membership to use AD ... membership provider and Rolemanager to use SQL server provider. ... Microsoft MSDN Online Support Lead ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: ASP.NET 2.0 Authentication pattern
    ... > - create custom IIdentity for additional user information ... You need to think about authentication as a seperate "silo" of functionality ... The provider architecture handles these ... areas out into its own provider and backing data store. ...
    (microsoft.public.dotnet.framework.aspnet.security)