Quantcast
Channel: Security
Viewing all articles
Browse latest Browse all 4737

Role and Membership providers using Active Directory and two Org Units

$
0
0

I don't know if anyone can help with this or not, I suspect it's not possible.

I have a scenario where I am using Active Directory for role and membership providers to authenticate a site and for reasons out of my control the users are in one OU and the groups are in a separate OU and cannot be merged. In addition the directory is so large that I can't point to the root of the AD as it does not return all the groups I need (I believe it times out and truncates the record set) and it includes lots of groups that should not be available to the system.

So I thought about using multiplexing and passing two AD connections, one for each OU, to each provider. However the authentication on this fails when calling GetUser and I think this is as it can't authenticate the user as the groups are in a separate OU.

So does anyone know if this can be done and if so how (custom role and membership providers maybe?)?

All suggestions welcomed.

Thanks in advance,

Mark


Viewing all articles
Browse latest Browse all 4737

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>