Using WindowsTokenRoleProvider with Forms Authentication ...

[Naraendirakumar R.R.]

Hi:
Has anybody managed to do this? We have setup forms authentication to
validate against AD. We'd like to use AD for roles based authorization.

The documentation on ASP.NET leads me to believe WindowsTokenRoleProvider is
possible only if I use Integrated Windows Authentication?

Thank you for your help.

Cheers,
-Naraen
http://naraen.spaces.live.com

 

[Dominick Baier]

thats true.

 

[Joe Kaplan]

You might want to check out Ryan Dunn's LDAP-based AD role provider on
CodePlex. It works as a nice compliment to the AD membership provider.

Another option is to use protocol transition logon (new
WindowsIdentity(upnString)) to generate a token for the authenticated user
using their UPN and then perform role checks against that. However, that
requires 2003+ web servers and a 2003 native mode AD forest.

Joe K.

 

[Naraendirakumar R.R.]

Hi Joe:
Thank you for responding.

I can't seem to located the code you are referring to on codeplex. Would
you happen to have a link handy?

Cheers,
-Naraen
http://naraen.spaces.live.com

 

[Joe Kaplan]

I don't, but post the question on the message board at
www.directoryprogramming.net and I'm sure Ryan will respond directly.

Joe K.