volume_up

A critical vulnerability was discovered in React Server Components (Next.js). Our systems remain protected but we advise to update packages to newest version. Learn More

volume_up

A critical vulnerability was discovered in React Server Components (Next.js). Our systems remain protected but we advise to update packages to newest version. Learn More

Active Directory configuration

I'm currently trying to configure ActiveDiretory integration on a intranet site for a customer.

I've used Softterra LDAP Administrator to verify the connection to AD, however I have some

problems making the intranet work with AD.

To make Softterra work I needed to use GSS Negotiate mechanism, not simple.

Do Episerver have any requirements on what type of mechanism that shall be used??

The errormessage I get is:

Logon failure: unknown user name or bad password

The exception occurs in Web.config on "type="Episerver.Security.ActiveDirectoryRoleProvider, Episerver"

Anyone have experience with troubleshooting AD connection??

#55878
Dec 21, 2011 14:03

Added domain on the user.

This resulted in another exception.

Episerver.Core.AccessDeniedException: Access.denied

#55879
Dec 21, 2011 14:10

Remember to add the AD role to the location elements in web.config to give the user access to edit/admin/dashboard. Like the exceptions says, the user doesn´t have access.

Hope this helps.

Frederik

#55890
Dec 21, 2011 20:52

Hi Jon Haakon,

take a look at this blog post: http://fredrikvonwerder.blogspot.com/2011_09_01_archive.html

Also, if you are having problems with Softerra LDAP Explorer, try the AD Explorer tool by MS: http://technet.microsoft.com/en-us/sysinternals/bb963907  I've used this to successfully test AD connections in EPiServer in previous projects.

#56967
Feb 17, 2012 21:37
error This thread is locked and should be used for reference only. Please use the Episerver CMS 7 and earlier versions forum to open new discussions.
* You are NOT allowed to include any hyperlinks in the post because your account hasn't associated to your company. User profile should be updated.