SSL ADAM and XP -- asp.net security

Noremac
9/6/2006 10:33:02 AM

Hi Joe,

I think I am getting close.

The missing piece for the certificate setup for me was going into MMC and
adding a Certificates SNAP-IN pointing to the ADAM Instance Service. Then I
added fabrikam to the Personal folder. I tested with ldp and confirmed it
connects.

Also, I found this relevant blog: http://www.oftedal.no/~erlend/?blogid=7.
Also, if you don't have a cert, look at this one:
http://blogs.msdn.com/cjacks/archive/2005/11/15/493122.aspx

The other piece of the puzzle that is missing for me is connecting through
the Membership provider in ASP.NET 2.0. With connectionProtection="Secure" it
complains with "Logon failure: unknown user name or bad password". It is
calling the exception a Configuration Error. The exception is only published
to the application event viewer through the generic ASP.NET 2.0 logging
handler. Nothing is reported to the Security Audit log nor the ADAM instance
log.

BTW, this happens when I call Membership.GetAllUsers();

I have no users in the ADAM so far.

We won't be using ADAM for authenticating users. The users will exist
through CardSpace or OpenId. We'll just be using ADAM as an account store to
augment those identities with some attributes we want (last visited, etc.).

So the idea is the Windows Identity of the ASPNET process (currently the
same one running the ADAM instance on my dev box) will connect to ADAM to
create and retrieve user objects. But is this the wrong idea? Do I need to
create an ADAM user object through LDP that will be the administrator and
then hard-code that username and password into web.config?

Noremac

[quoted text, click to view]

Joe Kaplan
9/6/2006 1:51:08 PM

Unfortunately I don't know anything useful about the AD membership provider
yet, so I'm not sure exactly what to tell you regarding how you want to use
it. It should be possible to find a way to augment use data in ADAM but use
a different source for the actual authentication. However, I'm guessing
you'll need to write your own provider to accomplish that. I don't think
any of the built in providers allow for a split model like that.

Joe K.

--
Joe Kaplan-MS MVP Directory Services Programming
Co-author of "The .NET Developer's Guide to Directory Services Programming"
http://www.directoryprogramming.net
--
[quoted text, click to view]

Dominick Baier
9/6/2006 7:35:04 PM

Have a look at the profile feature in ASP.NET - thats what you really want.
That said, there is no profile provider for ADAM and you have to write your
own.

---
Dominick Baier, DevelopMentor
http://www.leastprivilege.com

[quoted text, click to view]

Got something to say? Click here to post a reply to this thread.

Don't see what you're looking for? Try a search.

View other messages about asp.net security

asp.net security : SSL ADAM and XP