?
Solved

IIS cross-domain authentication using member groups in ASP

Posted on 2009-05-05
4
Medium Priority
?
475 Views
Last Modified: 2013-12-24
Hi all,

I'm having an issue that I'm sure has come up before, and I've found several explanations, but I'm just having a hard time getting things to work/figuring out what the best solution is.

I have an ASP web app sitting on a Domain1 server. Users from Domain2 will access the site, and I need to authenticate them against The Domain2 AD. I need to also retrieve their group memberships, as this will determine their access rights on the site. All this works perfectly as a standalone VBScript (of course) but not in ASP.

From what I've seen so far (and PLEASE correct me if I'm wrong), there are 2 options:

1. Implement something using Basic authentication rather than Windows authentication. (the password being sent in clear is an issue here)

2. Use an ISAPI filter (from where???)

When I try to implement basic authentication, I can successfully retrieve the user's full DN (yaaay!) but cannot access the group membership data. I get this error:

Active Directory Error '8000500d'

The directory property cannot be found in the cache.

Then it indicates this line of code:
objMemberOf = objUser.GetEx("memberOf")

When I ran all this in a single-domain environment, it worked fine...

any ideas? It can't be this hard...   :(
0
Comment
Question by:rashkae
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
4 Comments
 
LVL 51

Accepted Solution

by:
Ted Bouskill earned 2000 total points
ID: 24333296
You have to have a trust relationship between Domain1 and Domain2.  Domain1 has to trust Domain2.
0
 

Author Comment

by:rashkae
ID: 24333674
Well, sadly, that's not entirely possible as we're talking 2 different security zones. Domain1 is a neutral zone between 4 domains. Sigh
0
 
LVL 51

Expert Comment

by:Ted Bouskill
ID: 24401495
Well if it's any consolation, the behavior of the domains is to make things more secure.  Cheers.
0

Featured Post

Free Backup Tool for VMware and Hyper-V

Restore full virtual machine or individual guest files from 19 common file systems directly from the backup file. Schedule VM backups with PowerShell scripts. Set desired time, lean back and let the script to notify you via email upon completion.  

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Recently I was talking with Tim Sharp, one of my colleagues from our Technical Account Manager team about MongoDB’s scalability. While doing some quick training with some of the Percona team, Tim brought something to my attention...
In this series, we will discuss common questions received as a database Solutions Engineer at Percona. In this role, we speak with a wide array of MySQL and MongoDB users responsible for both extremely large and complex environments to smaller singl…
Polish reports in Access so they look terrific. Take yourself to another level. Equations, Back Color, Alternate Back Color. Write easy VBA Code. Tighten space to use less pages. Launch report from a menu, considering criteria only when it is filled…
This is a high-level webinar that covers the history of enterprise open source database use. It addresses both the advantages companies see in using open source database technologies, as well as the fears and reservations they might have. In this…

765 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question