1

The setup is as follows:

I have an AD Security Group "DOMAIN\MYGROUP" populated with users. I have an LDAP eDir Group "DOMAIN\MYGROUP-Approvers" populated with admins for the group.

In my webconfig I can use the AD Security Group to authenticate and it works

<system.web>
  <authorization>
    <allow roles="DOMAIN\MYGROUP"/>
    <deny users="*"/>        
  </authorization>
</system.web>

However using the LDAP Group to authenticate does not work.

<system.web>
  <authorization>
    <allow roles="DOMAIN\MYGROUP-Approvers"/>
    <deny users="*"/>        
  </authorization>
</system.web>

How can I configure my webconfig to work for LDAP Groups the same way it works for AD Security Groups?

Thanks!

kmc5117
  • 67
  • 3
  • 10

1 Answers1

0

You most likely need to create a custom role provider that could return eDir roles. Go to MSDN for more information. Another try might be to modify ActiveDirectoryMembershipProvider.

For a quick and dirty solution you can also try to overwrite Application_PostAuthenticateRequest and add eDir roles to AD roles.

Community
  • 1
  • 1
user2316116
  • 6,726
  • 1
  • 21
  • 35