IIS Server Security - Delegation to AD using WIA and ASP

This is Interesting: Free IT Magazines  
Home > Archive > IIS Server Security > March 2007 > Delegation to AD using WIA and ASP





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author Delegation to AD using WIA and ASP
mike.varley1@ntlworld.com

2007-03-09, 7:23 pm

Hi

We're struggling with a problem involving ASP code that needs to
retreive the site users AD groups. I have read that WIA will not do
pass through authentication as so the code cannot query directly - we
currently get a 'table does not exist' error. (The AD is running in
2000 native mode by the way.)

Is it possible to get this to work by having the application pool run
using a domain account and if so what steps do we need to take to make
this work? Do we for instance need to enable the account for
delegation on the account tab in AD?

Another method I have heard about involves integrating a login and
password into the LDAP query. Is this possible. Can anyone give and
example of a query with this syntax?

Thanks for you help

Mike

Ken Schaefer

2007-03-10, 1:19 pm

Hi,

Steps for configuring delegation of the user's credentials are here:
http://www.adopenstatic.com/cs/blog...01/27/1282.aspx

Cheers
Ken


<mike.varley1@ntlworld.com> wrote in message
news:1173450617.537219.272210@30g2000cwc.googlegroups.com...
> Hi
>
> We're struggling with a problem involving ASP code that needs to
> retreive the site users AD groups. I have read that WIA will not do
> pass through authentication as so the code cannot query directly - we
> currently get a 'table does not exist' error. (The AD is running in
> 2000 native mode by the way.)
>
> Is it possible to get this to work by having the application pool run
> using a domain account and if so what steps do we need to take to make
> this work? Do we for instance need to enable the account for
> delegation on the account tab in AD?
>
> Another method I have heard about involves integrating a login and
> password into the LDAP query. Is this possible. Can anyone give and
> example of a query with this syntax?
>
> Thanks for you help
>
> Mike
>


mike.varley1@ntlworld.com

2007-03-15, 1:28 pm

Thanks Ken


On 10 Mar, 17:48, "Ken Schaefer" <kenREM...@THISadOpenStatic.com>
wrote:
> Hi,
>
> Steps for configuring delegation of the user's credentials are here:http://www.adopenstatic.com/cs/blog...01/27/1282.aspx
>
> Cheers
> Ken
>
> <mike.varl...@ntlworld.com> wrote in message
>
> news:1173450617.537219.272210@30g2000cwc.googlegroups.com...
>
>
>
>
>
>
>
>
>
> - Show quoted text -



Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com