Security :: Site On The Same Domain As The Active Directory Server?
May 26, 2010
a asp.net site located at a hosting center(UK)and i want users from our office to login to that site using their active directory account.is this possible to do over the network ? or i need the site on the same domain as the active directory server?
I have a DC (Win 2K3,IIS 6.0..) and put my site there. I have a local computer (win XP2) with computer name PC1 is already joined to the DC. in PC1 I login with account (user: abc, passs: 1234567) was created on the DC to log on to domain. After successful login into the domain, andand type in my web address, so I have to write code in my web site to understand how abc account login to the domain will always login to the my site must be signed in .not logged in login module that in my site.
I have a DC (Win 2K3) and put my site there. I have a local machine (win XP) with PC1 name is already connected to the DC. PC1 I log in with machine account (user: abc, passs: 1234567) was created on the DC to log on to domain. After successful login khj me on my website, so I have to write code in my web site to understand how abc account login to the domain will always log into the site must be signed in toi.khong Login Module.
I am trying to build a web app for an intranet site that for security reasons needs to make the user type in their Windows or Active Directory username pwd manually. I have previously worked with Integrated Windows Auth but in this case, we do want them to use type in their AD credentials.
I have been trying to look up how to do this and frankly I am a bit lost. It should be a fairly straightforward task and am hoping you can point me in the right direction, with some tutorials or examples. We will be using SSL so, dont have to worry about passing pwd in cleartext over the wire.
My environment is visual studio 2008 in C#, .net 3.5 if that matters.
I am trying to develop a internal corporate portal that will be hosted external either on company leased decicated server or by hosting service like godaddy. The company portal is going to have links internal and external resources like Outlook Web Access and Sharepoint, Great Plains, our CRM software, etc, etc. I am basically creating intranet site for the company but the intranet is going to be hosted externally.
How do I authenticate user against the Active Directory, when the intranet site is hosted remotely?
we have 3 different domains and their active directory.i have to made a web serivce that when user gets logged in any of the domain and call that web service it takes the user credential.and then process the task and logged in the current user and domain of user. my iis configuration is 1) anonymous user disabled2)integrated authentication is enabled.and sending the user credentials as and then process the task and logged in the current user and domain of user.my iis configuration is1) anonymous user disabled 2)integrated authentication is enabled.
System.Net.CredentialCache.DefaultCredentials from calling application
our different servers are configured for any one of the 3 domains .when i use to call the web service (deployed on a server)from the same domain it
The Security is working fine when testing on a local machine, but when it gets published to the server, it seems that It can't get any active directory information at all.
For example, on the local computer <asp:LoginName ID="LoginName1" FormatString="(Welcome {0})" CssClass="loginname" runat="server" /> returns "Welcome DOMAINusername" but when it's published, it doesn't return anything at all.
Using code i've added users to the correct roles and checked they are really in the roles, but security when published won't recognise the current user's name, so it all fails.
I would like to know best resource/tutorial/video on Active Directory Integration with SQL Server Membership provider.
Using Active Directory internal users are authenticated and then same user name is created in SQL Membership database to implement authorization.
users are stored against groups in Active directory, so it is not feasible or no granular approch to assign Roles to users in Active Directory. By authenticating users against Active Directory and using SQL Server Membership provider to implement Authorization for active directory users as well as it is quite feasible to implement authentication and authorization using SQL Server Membership provider.
Active Directory for internal users authentication ONLY. SQL Server Membership provider for internal users authorization and external users authentication plus authorization.
I need to get the list of domain usrs. The users not necessorily be on the domain where I am logged in. (e.g. I am logged in on domain "Dom111" but I need the list of users from the domain "Dom222")
I want this information on the basis of following - 1) Name of the Domain 2) A valid User name (of-course with Admin rights for the Target domain) and password
I am trying to use the following code -
DirectoryContext dc = new DirectoryContext(DirectoryContextType.Domain, "Dom222", "Administrator", "password"); Domain domain = Domain.GetDomain(dc); DirectoryEntry de = domain.GetDirectoryEntry(); FillList(de);
Here is the FillList function private void FillList(DirectoryEntry de) { DirectorySearcher deSearch = new DirectorySearcher(de); deSearch.Filter = "(&(objectClass=user)(objectCategory=person))"; SearchResultCollection results = deSearch.FindAll(); //checkedListBox1.Items.Clear(); foreach (SearchResult srUser in results) { DirectoryEntry deUser = srUser.GetDirectoryEntry(); checkedListBox1.Items.Add(deUser.Properties["sAMAccountName"].Value.ToString()); } checkedListBox1.Sorted = true; }
This works fine for the domain where I logged in (i.e. Dom111) but for the other domain (Dom222), while executing the statement - Domain domain = Domain.GetDomain(dc); I am getting the error saying "The specified domain does not exist or cannot be contacted."
Now, For creating the dc if I use following - DirectoryContext dcTemp = new DirectoryContext(DirectoryContextType.DirectoryServer, "Server_dom222", "administrator", "password"); Then everything works fine. But as you can see I need to pass the "Domain Controller (Server) Name"which I want to avoid.
I need an idea please, i have the task of disabling the Domain Administrator account, but we have a very messed up AC and im practilly new employee here. The administrator account has been used on several services, servers, print servers, etc. Across the network and sites. All our intersite communication is perfect.So what i want is a way to know in which devices this account is configured.Is there a way or tool, where i can input the account, and the output should be a list of servers, ip adresses or devices where the account is configured?
I can get the list of user groups from the same domain based on the logged in users by using following commandSystem.Web.HttpContext .Current.Request.LogonUserIdentity.GroupsBut in my case user can be part of another trusted domain group also. The above command is not retrieving the trusted domain groups.Is there any way to get all the groups belongs to logged in user even he is part trusted domain group also?
I am developing a simple ASP.NET website that will run on the intranet on a WS2008(IIS7) box and respond to users running XP/IE8. Everything is domain connected and I am trying to automatically login the users much like SharePoint does.On my dev machine (XP), when running the site through VS, everything works. I can pickup on the user perfectly. I am using the following settings:
my website need a function to allow domain users jump over the login page and directly access the contents of the site. but for other users which there are not in the domain or they are not the member of the domain then they have to login the website through the login page.
this is different with ask user login to the domain through a login page. the website must distinguish is the user a domain user and the user name in the domain or not when the user first time access website.
I am using System.directory services namespace in framework 2 to query active directory. I have used fixed user account impersonisation in the web.config file, find the code:
I have disabled anonymous access in IIS. Also i have given Read & write access to the account tang09 for the website virtual directory and Microsoft.NET folder located in windows folder. But still i get prompted for the domain username and password to access the website.
I have created a website that has one aspx page. I am using visual studio 3.5. I have created a virtual directory on my local pc and tested the app and it wis working. Now I need to delploy it to the domain via ftp> Here is the website folders:
1. App_Code - contain my classes 2. App_Data - contain the sql express database ... myDb.mdf 3. Myaspx page - a single page 4. Web.config
when I run it , it woks, but when I want to deploy it , the site does not work. Here what I am doing .I am publishing the site to a local folder, then upload the complete folder to the right domain name. Yet, get an error
"Error 1 The process cannot access the file 'B:�0 2011 demoMarchObjectDataSource_CRUD_CSApp_DataRGN.mdf' because it is being used by another process"
How can I fix this error. I thought when I publish the site, the database would also be included in the site folders, but I may be wrong.
I want to learn how to add/delete/update account (including adding mail boxes for new users). Can someone point to a good book where I can begin from. I want to start with some real basics and build from there.
have a probleme with my search filter, i want to list the users of an organizational unit result.filter =(& (objectClass= user)(ou=dep1)); ====> it didn't work for me
I need to list a group of users, their group name is (IRS Group) to a list group. how to do this. I'm very new to asp.net and dont have much knowlegde about acctive directory.
I am updating some CS code that was written in 2004, and that references some assemblies which extract user data from AD by query filtering on the user's title. I can't test my updated code in VS2010 because the assemblies no longer compile - the references are no longer valid (I can't create a DirectoryEntry or DirectorySearcher) so I need to work out how to replace the code with current directoryservices.accountmanagement namespace properties and methods. I have searched around but don't seem to be getting anywhere. give me some code that will work with vs 2010 to replicate the following:
I have a problem with saving some data into extensionattribute in AD.There is no problem with saving data into properties like "Mobile" or "SN" but when I try to save data into one of extensionAttribute , for example: extensionAttribute7 , I get an error "The attribute syntax specified to the directory service is invalid".There is no problems of read data from extension Attributes.
I created one application, and I need to authenticate local user. This user is the user who is login to his/her Personal Computer.. Main thing his that he/she does not in any DOMAIN... I want NON-DOMAIN authentication.