Hi,
here is my AD procedure:
DNN 4.0.3 on Windows 2003 server or Windows XP with framework 2.0
In DNN:
1. Checked "Windows Authentication".
2. Checked "Synchronize Role?"
3. choose "ADSIAuthenticationProvider"
4. choose AuthType as "Delegation"
5. Domain was set as so: dc=mycompany,dc=intranet
6. Username is MYCOMPANY\username
The account has needs read rights to the AD accounts
7. Set Password and confirm password of this domain user
8. Email domain example: @mycompany.com
9. Clicked "Update".
I have :
Accessing Global Catalog:
OK
Checking Root Domain:
OK
Accessing LDAP:
OK
10. I create Security Roles that match with my AD groups
In IIS:
1.I Uncheck "Enable anonymous access" and Check "Integrated Windows Authentication". on DNNsite\admin\security\WindowsSignin.aspx.
2. I Remove the anonymous user access (IUSR_Server name and/or Users) and Add a group to allow to autosign in (ex: Domain Users).Open up explorer (file, not Internet) and browse to your dnn site.
3. I put a domain user in securty tab on the global site instead of IUSR_Server name
In web Config
1. I uncomment :
<add name="Authentication" type="DotNetNuke.HttpModules.AuthenticationModule, DotNetNuke.HttpModules.Authentication" />
2. I uncomment
<identity impersonate="true" />
My problem:
I want to use auto-log with integrated autentification (windows)
I take an user of the domain who doesn't exist in my DNN portal, open a windows session and run IE with my dnn site as URL.
Then, my user seems to be connected automatically (I can see it has been created in users table like DOMAIN\username) but no sync with AD groups and some informations like firstname and lastname didn't have been recovered.
I have too 2 erros messages in logs viewer before the message "Login Success":
InnerException: Fail open session : username or password unknown or incorrect.
Message: System.DirectoryServices.DirectoryServicesCOMException (0x8007052E): Fail open session : username or password unknown or incorrect. at System.DirectoryServices.DirectoryEntry.Bind(Boolean throwIfFail) at System.DirectoryServices.DirectoryEntry.Exists(String path) at DotNetNuke.Security.Authentication.ADSI.Configuration..ctor()
Thanks for any help on this subject !