I talked with an employee on our technic-team and he explained how the AD is setup.

Apparantly the domains are on the same level and of these domains, two are trusted domains whose origin is from different forests.

I noticed that when I setup the ad provider the provider told me that it had found one top/root domain. The other two trusted domaines weren't mentioned and I haven't been able to perform a login with users from these two trusted domains. Is it possible to have the ad provider setup so that it can login a user to several domains on the same level in a forest?

Thanks, Johan.

Hello Mike,

on monday I turned on our Intranet with AD Provider V 01.00.04 Beta. Sync for Groups is enabled. It works with two problems.

1. Our Users are in 30-50 (nested) Groups. The CPU Utilization is constant between 40 and 60%.

2. Any Groupnames have Spaces in her Names. The Provider cannot resolve them. I get the following Error in my Eventlog:

AssemblyVersion: 04.08.02
PortalID: 0
PortalName: Intranet 
UserID: -1
UserName:
ActiveTabID: 36
ActiveTabName: Startseite
RawURL: /DesktopModules/AuthenticationServices/ActiveDirectory/WindowsSignin.aspx?tabid=36
AbsoluteURL: /DesktopModules/AuthenticationServices/ActiveDirectory/WindowsSignin.aspx
AbsoluteURLReferrer:
UserAgent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30)
DefaultDataProvider: DotNetNuke.Data.SqlDataProvider, DotNetNuke.SqlDataProvider
ExceptionGUID: 1e433341-b76c-4770-83e4-968b6eebb123
InnerException: Object reference not set to an instance of an object.
FileName:
FileLineNumber: 0
FileColumnNumber: 0
Method: DotNetNuke.Authentication.ActiveDirectory.ADSI.Utilities.SearchNestedGroups
StackTrace:
Message: System.NullReferenceException: Object reference not set to an instance of an object.at DotNetNuke.Authentication.ActiveDirectory.ADSI.Utilities.SearchNestedGroups(DirectoryEntry group, String DistinguishedName)at DotNetNuke.Authentication.ActiveDirectory.ADSI.Utilities.SearchNestedGroups(DirectoryEntry group, String DistinguishedName)at DotNetNuke.Authentication.ActiveDirectory.ADSI.Utilities.SearchNestedGroups(DirectoryEntry group, String DistinguishedName)at DotNetNuke.Authentication.ActiveDirectory.ADSI.ADSIProvider.IsAuthenticationMember(GroupInfo AuthenticationGroup, UserInfo AuthenticationUser)at DotNetNuke.Authentication.ActiveDirectory.UserController.AddUserRoles(Int32 PortalID, UserInfo AuthenticationUser)
Source:
Server-Name: SERVER

Have you any ideas ? Is there anywhere a place where I can found the Sourcecodes ?

Regards Thomas

Hi,

I've installed the latest beta on our test system, and it is working really well.  I noticed that it is updating the last activity date on the user account, but not the last login date when the auto login is used.   If we use the login control to do the windows login, that updates the last login field.  Sounds "as designed" - right?

One other interesting thing, I created a new host account using an AD domain\username that was not in the database yet.  When that account logs in it synchs the groups and the first, last and display names, but does not pull in the address or contact info.  Non-host accounts are pulling that info from our directory perfectly.  

We have 3 detected domains in our site - the main domain and 2 subdomains.  Pretty sure all our DCs are W2K3 here.  Not seeing any performance issue from traversing the tree and it's pretty big, but then there's almost nobody on the test box, and it has a GB connection to our backbone.

I now have a real "test" system (yea!) so I can experiment with new versions without fear.   We're upgrading our intranet site from 3.2.2 all the way to the latest, and this module is a huge piece of the rollout.   Thank you for all of your work on the code, and if I can help with testing, I'd be happy to, we do have VS 2005 as well.

-- 
Roberta