Solved

IIS cross-domain authentication using member groups in ASP

Posted on 2009-05-05
4
470 Views
Last Modified: 2013-12-24
Hi all,

I'm having an issue that I'm sure has come up before, and I've found several explanations, but I'm just having a hard time getting things to work/figuring out what the best solution is.

I have an ASP web app sitting on a Domain1 server. Users from Domain2 will access the site, and I need to authenticate them against The Domain2 AD. I need to also retrieve their group memberships, as this will determine their access rights on the site. All this works perfectly as a standalone VBScript (of course) but not in ASP.

From what I've seen so far (and PLEASE correct me if I'm wrong), there are 2 options:

1. Implement something using Basic authentication rather than Windows authentication. (the password being sent in clear is an issue here)

2. Use an ISAPI filter (from where???)

When I try to implement basic authentication, I can successfully retrieve the user's full DN (yaaay!) but cannot access the group membership data. I get this error:

Active Directory Error '8000500d'

The directory property cannot be found in the cache.

Then it indicates this line of code:
objMemberOf = objUser.GetEx("memberOf")

When I ran all this in a single-domain environment, it worked fine...

any ideas? It can't be this hard...   :(
0
Comment
Question by:rashkae
  • 2
4 Comments
 
LVL 51

Accepted Solution

by:
Ted Bouskill earned 500 total points
ID: 24333296
You have to have a trust relationship between Domain1 and Domain2.  Domain1 has to trust Domain2.
0
 

Author Comment

by:rashkae
ID: 24333674
Well, sadly, that's not entirely possible as we're talking 2 different security zones. Domain1 is a neutral zone between 4 domains. Sigh
0
 
LVL 51

Expert Comment

by:Ted Bouskill
ID: 24401495
Well if it's any consolation, the behavior of the domains is to make things more secure.  Cheers.
0

Featured Post

What is SQL Server and how does it work?

The purpose of this paper is to provide you background on SQL Server. It’s your self-study guide for learning fundamentals. It includes both the history of SQL and its technical basics. Concepts and definitions will form the solid foundation of your future DBA expertise.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Cannot open file from ASP if user is "logged in" 13 30
Hide cell in a table 2 27
SQLite with Mobile Development 4 24
Exchange 2013 weird behavior 7 41
Read about achieving the basic levels of HRIS security in the workplace.
When table data gets too large to manage or queries take too long to execute the solution is often to buy bigger hardware or assign more CPUs and memory resources to the machine to solve the problem. However, the best, cheapest and most effective so…
Video by: Steve
Using examples as well as descriptions, step through each of the common simple join types, explaining differences in syntax, differences in expected outputs and showing how the queries run along with the actual outputs based upon a simple set of dem…
Polish reports in Access so they look terrific. Take yourself to another level. Equations, Back Color, Alternate Back Color. Write easy VBA Code. Tighten space to use less pages. Launch report from a menu, considering criteria only when it is filled…

832 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question