AD Setup Instructions - Authentication Providers [Lead: Mike Horton]

Forum DotNetNuke® Pro... Authentication ... AD Setup Instructions

6/6/2007 9:33 AM

	Mike Horton
2672 posts
dnn.gmss.org

AD Setup Instructions

Here's a couple of links with instructions on getting Active Directory Authentication working on your site. Either set of instructions "should" work in most cases but with the myriad of ways that your organizations infrastructure can be setup it's impossible to guarantee that they'll work.

http://www.getyourowntots.com/Blog/tabid/57/EntryID/218/Default.aspx

http://www.dotnetnuke.com/Community/ForumsDotNetNuke/tabid/795/forumid/89/threadid/53005/scope/posts/Default.aspx

I used the second link when I setup our site but also had to uncomment <identitiy impersonate=true/> and change it to <identity impersonate=true userName="domain\username" password="password" />

6/6/2007 11:01 AM

	andyvm
2 posts

Re: AD Setup Instructions

Thanks Mike.

This was written at the time of 4.5.3.

I think it is also important to note that AD Group synchronization is based on the user being a direct member of the group NOT a member of a group that is a member of the group you're trying to sync.

For example:

UserA
UserB

UserA is a member of GroupA
UserB is a member of GroupB
GroupA is a member of GroupB

When you setup GroupA and GroupB to sync with DotNetNuke you will get the following results:
GroupA = UserA
GroupB = UserB

Notice GroupB did not include UserA, even though UserA is a member of GroupA which is a member of GroupB. Reason being, UserA is not a DIRECT member of GroupB.

I'm sure with future revisions of DNN this logic will be modified but for now it is an important note.

Thanks,
Andy

7/2/2007 11:13 PM

	Adrian Scott-Day
40 posts

Re: AD Setup Instructions

The fact that DotNetNuke does not detect the membership of users in nested AD groups is currently a major issue for my portal.

I have a 4.5.3 DotNetNuke portal being used in an intranet environment with over 1000 pages of content which is currently in a limited release phase to only a fraction of our business. During the limited release we only have around 100 users but we do have 70 different user groups due to the nature of our business and the security that we need to implement related to availability of certain information.

Trying to manage the user roles without the ability to use nested groups in AD is going to grind us to a halt prior to our release to the rest of the business when our number of users will be closer to 1000.

I noticed that an issue has been raised in Gemini ( http://support.dotnetnuke.com/issue/ViewIssue.aspx?id=4641 ) but there is no indication when this issue may be looked at.

Can anyone provide some sort of a timeline regarding the incorporation of this functionality?

Thanks,

Adrian

7/3/2007 7:56 AM

	Mike Horton
2672 posts
dnn.gmss.org

Re: AD Setup Instructions

Unfortunately I can't give you a timeline. Until the provider is stripped out of the core and into its own stand-alone provider (something that's being worked on now) there won't be any enhancements done to it as any changes would require a fresh DNN release.

9/19/2007 3:40 AM

	goudi
2 posts

Re: AD Setup Instructions

Hello, I don't know4. if I post in the good topic but I have a problem when I want to install Active Directory Module. I am using the 4.6 version. I get the file "ActiveDirectory_01.00.00_Install.zip" in the folder "Install/Package" and when I want to set up the module by using "Install new module", it reads correctly the files but it make an error:

Failure

ExceptionSystem.Exception: Dnn load failed, aborting at DotNetNuke.Modules.Admin.ResourceInstaller.PaDnnLoaderFactory.GetDnnAdapter() at DotNetNuke.Modules.Admin.ResourceInstaller.PaInstaller.Install()

Could you help me to solve this problem.

I apologisze for my english I'am french

thank you

Page 1 of 4

Forum

DotNetNuke® Pro...

Authentication ...

AD Setup Instructions