Active Direcotry and Umbraco login Options
siw
Posted: Tuesday, August 19, 2008 2:10:22 PM

Rank: Enthusiast

Joined: 11/7/2006
Posts: 28
Location: Kristiansand, Norway
Have any one of you an Umbraco intra/extranet site working with login through Active Directory?
If so, please advice me how to do this. I don't know too much about AD, and really not too much about Umbraco Membership either, but I need to try this out now. Tips and/or samples would be very much appreciated!
drobar
Posted: Tuesday, August 19, 2008 3:35:03 PM

Rank: Umbracoholic

Joined: 9/8/2006
Posts: 1,831
Location: MA, USA
Depending on when you need to go live with your site, you might want to look into umbraco v4, which includes Membership Provider support... which would let you use AD, SQLServer, etc. etc.

For v3, you'll need to create your own login/membership control. Jason and John have both done this and gave a lot of insight (and code) for their two approaches. They each had different goals so it is a nice discussion of various approaches and when one might be more appropriate than the other. http://forum.umbraco.org/yaf_postst4284_What-are-your-thoughts-re-webapp-dev-w-Umbraco.aspx

Some other resources of interest would include:
http://forum.umbraco.org/yaf_postsm26662_MemberControls-updated--anyone-care-to-test.aspx#26662

http://www.wibeck.com/articles/umbraco-member-controls-and-editable-member-profiles.aspx

http://www.nibble.be/?p=20


cheers,
doug.

MVP 2007-2009 - Percipient Studios
kalpa
Posted: Tuesday, August 19, 2008 6:32:55 PM

Rank: Fanatic

Joined: 7/19/2006
Posts: 496
Location: Göteborg, Sweden
Siw, what you could do is to modify the memberControls and pick up the server variable "LOGON_USER". If the LOGON_USER exists make a login like that user.

You will get the user by using:

Request.ServerVariables["LOGON_USER"]

To be able to use this your site must be setup for windows authentication AND your users must add this domain as a trusted site.

Please note:

- This will probably only work with Internet Explorer.

- In a domain environment the LOGON_USER will carry the value "COMPANY-DOMAIN \ UserID" and you'll have to parse out the user id from that pattern.

- You'll have to store each user in the Umbraco mebers section as well...

Next step would be to verify the user via a AD lookup, but maybe, you should wait for V4 and the MembershipProvider before going in that direction...

// ; ) Kalle

" - Yeah I'd like to share your point of view, as long as it's my view too... (http://www.d-a-d.dk/lyrics/pointofview)
siw
Posted: Monday, August 25, 2008 1:19:49 PM

Rank: Enthusiast

Joined: 11/7/2006
Posts: 28
Location: Kristiansand, Norway
Thanks for valuable info both Doug and Kalle. I still don't have access to the network where this is to be implemented, but it's coming up any time soon. As I've read about v.4 I would really like to skip directly to it. Unfortunatly, our customer wants their current intranet migrated to Umbraco, asap. So when can I safely believe v.4 to be "safe"? I'm not so keen on setting up a release candidate with this customer.
theplastictoy
Posted: Sunday, October 26, 2008 5:40:10 PM
Rank: Newbie

Joined: 9/11/2008
Posts: 24
Location: Portugal
siw wrote:
Thanks for valuable info both Doug and Kalle. I still don't have access to the network where this is to be implemented, but it's coming up any time soon. As I've read about v.4 I would really like to skip directly to it. Unfortunatly, our customer wants their current intranet migrated to Umbraco, asap. So when can I safely believe v.4 to be "safe"? I'm not so keen on setting up a release candidate with this customer.


I have the same problem. Active directory users in an intranet for a major international brand. An independent company will be doing security and performance tests on the website. And they want something that is stable and with proven scalability. V4 would be perfect for the functionalities they want, but it will only be possible if V4 final version is out before 1 Jan 08. This is supposed to be live in April.
tarekahf
Posted: Sunday, November 02, 2008 8:53:43 PM
Rank: Enthusiast

Joined: 10/18/2008
Posts: 28
Dear All,

I have exactly same requirements.

I developed my own authentication routine based on Integrated Windows Authentication and CSLA .NET, check details here:

http://forums.lhotka.net/forums/permalink/22529/25866/ShowThread.aspx#25866

(Note: to get the complete picture, you have to download the framework and the Sample Application to see how it works. It uses few lines of code in Global.asax to query and refresh the authentication status).

Do think that this technique can be integrated with Umbraco v3 ?

I would like to know if some one managed to implement Integrated Windows Authentication with v3 ?

Or, do you recommend me to switch to v4 ? Is v4 reliable so that I can work on it for production applications ?

Can I secure the web pages using Allow/Deny settinges in web.config ?

Your help will be greatly appreciated.

Tarek.
Users browsing this topic
Guest


You cannot post new topics in this forum.
You cannot reply to topics in this forum.
You cannot delete your posts in this forum.
You cannot edit your posts in this forum.
You cannot create polls in this forum.
You cannot vote in polls in this forum.