Connecting to LDAP

[Ganesh Ramamurthy]

Hi Experts,

I am using windows Authenication in my ASP.Net application. I have different
LDAP's configured in my network and my applicaiton uses one of these LDAP
users. How can I specify IIS to use one of these LDAP for user
authentication. Is there any way of instructing the IIS to do so?

Thanking in advance

Regards
Ganesh

 

[Patrick Olurotimi Ige]

Or do you want to validate your users against Active Directory?
Patrick

 

[Patrick Olurotimi Ige]

Ganesh Ramamurthy,
Are u interested in implementing Security?
U want to use IIS to use LDAP for what?
Pls elaborate!
Patrick

 

[Ganesh Ramamurthy]

Yes. My application uses windows authenication. I get the windows login
dialog box (the grey box) when the user clicks on the login button. However,
I can't specify which LDAP to look for the user. Is there any way in IIS to
mention which Active Directory to search for the user?

Thanx Patrick for your reply.

Regards
Ganesh

----- Original Message -----
From: Patrick Olurotimi Ige
Newsgroups: microsoft.public.dotnet.framework.aspnet
Sent: Monday, December 13, 2004 11:29 AM
Subject: Re: Connecting to LDAP


Or do you want to validate your users against Active Directory?
Patrick

 

[DKode]

heres a good article that explains the authentication model of IIS and
asp.net

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnbda/html/authaspdotnet.asp

I just made an app that authenticates users against AD. In my
web.config, I set it to impersonate=true, and windows authentication.
Then in IIS, I set it to integrated windows authentication and basic
authentication. I had to do this because from what I understand,
windows authentication encrypts the password and checks it against the
encrypted password, but when asp passes it to IIS, IIS cannot check the
encrypted password against AD, so you have to use basic so it is sent
in plain text. I just added an SSL cert to the webpage so prying eyes
can't look at the data being transfered. Read that article tho, it
gives alot of information I wasn't aware about.

hope that helps!

DKode

 

[Patrick Olurotimi Ige]

Hi Ganesh..Regarding ur email..

First try reading through:-
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnbda/h
tml/authaspdotnet.asp

And as Dkode also adviced u can easily implement Windows Auth against
AD.I believe if you would be using basic Auth and integrated Windows
Auth together what you can do is to go IIS on the Directory Security TAB
click on Basic and then Edit and search for the Domain you would like to
Authenticate against..
Let me know how it goes..
Enjoy
Patrick