How to use ASP.NET authentication with active directory?

Question

I have my config setup like below:

<configuration>
  <connectionStrings>
    <add name="ADConnectionString" connectionString="LDAP://myldap/CN=Users,DC=nevco,DC=local"/>
  </connectionStrings>
<system.web>
<authentication mode="Forms">
  <forms name=".ADAuthCookie" timeout="10" loginUrl="Login.aspx" defaultUrl="Default.aspx" />
</authentication>
    <membership defaultProvider="DomainLoginMembershipProvider">
      <providers>
        <clear/>
        <add name="DomainLoginMembershipProvider"
             type="System.Web.Security.ActiveDirectoryMembershipProvider, System.Web, Version=2.0.0.0,Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a"
             connectionStringName="ADConnectionString" attributeMapUsername="sAMAccountName" />
      </providers>
     </membership>
  </system.web>
</configuration>

I can attempt to log on but every time it says I am using the incorrect username/password. Does it look like I am doing anything wrong above? Is there any way for me to find more information on why it's not finding my username/pass?

UPDATE:

Do I need to provide a Username and Password in my membership/providers section?

It errors out with The specified connection string does not represent a valid LDAP adspath. — Abe Miessler
– Abe Miessler, Commented Nov 23, 2010 at 21:57

Abe Miessler · Accepted Answer · 2010-11-24 00:19:52Z

1

Ok, I ended up using an LDAP browser to examine the structure. After a little fudging around I changed my LDAP url to this:

LDAP://myldap/DC=nevco,DC=local

And it started working. Hope this helps someone!

answered Nov 24, 2010 at 0:19

Abe Miessler

85.7k104 gold badges323 silver badges496 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

Lareau · Accepted Answer · 2010-11-23 23:14:47Z

0

Why make the user login in at all?

Try this provider

<roleManager enabled="true" defaultProvider="AspNetWindowsTokenRoleProvider" />

you can then do something to see if they are authorized Roles.

Roles.IsUserInRole("someGroupInAd")

Your web site would have to be setup with Integrated Windows Authentication in IIS

answered Nov 23, 2010 at 23:14

Lareau

2,0211 gold badge29 silver badges50 bronze badges

2 Comments

Abe Miessler Over a year ago

So this would use whatever windows account they are signed in with to access the site? What if they were accessing form their home machine?

Lareau Over a year ago

This would work if someone was connected to the domain. Like an intranet site. It probably won't work as a public facing website as you would have to have to setup the website to use anonymous access.

Collectives™ on Stack Overflow

How to use ASP.NET authentication with active directory?

2 Answers 2

Comments

2 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Comments

2 Comments

Your Answer

Sign up or log in

Post as a guest

Related