Welcome Guest! To enable all features please Login or Register.

Notification

Icon
Error

2 Pages<12
How To: Integrate Gallery Server Pro with Active Directory
Roger Martin
#21 Posted : Thursday, 4 December 2008 4:58:24 AM(UTC)
Roger Martin

Rank: Administration

Joined: 3/08/2007(UTC)
Posts: 3,168
Location: Fort Atkinson, WI

You are outside of my realm of knowledge, so hopefully someone else can chime in.
Roger Martin
Creator and Lead Developer of Gallery Server Pro
KiloMike
#22 Posted : Monday, 8 December 2008 10:57:50 PM(UTC)
Rank: Member

Joined: 22/10/2008(UTC)
Posts: 9
Location: Halle/Leipzig

Dear,

I followed the steps and after refreshing and modifying the web.config I get this error:

Error - Unable to establish secure connection with the server (C:\Inetpub\wwwroot\PHP\galleryserverpro\web.config line 95)

Error Information
Name Value
Type System.Configuration.ConfigurationErrorsException
Message Unable to establish secure connection with the server (C:\Inetpub\wwwroot\PHP\galleryserverpro\web.config line 95)
Source System.Web
TargetSite System.Configuration.Provider.ProviderBase InstantiateProvider(System.Configuration.ProviderSettings, System.Type)
StackTrace at System.Web.Configuration.ProvidersHelper.InstantiateProvider(ProviderSettings providerSettings, Type providerType)
at System.Web.Configuration.ProvidersHelper.InstantiateProviders(ProviderSettingsCollection configProviders, ProviderCollection providers, Type providerType)
at System.Web.Security.Membership.Initialize()
at System.Web.Security.Membership.get_ApplicationName()
at GalleryServerPro.Web.WebsiteController.InitializeBusinessLayer()
at GalleryServerPro.Web.WebsiteController.InitializeApplication()
at GalleryServerPro.Web.GspPage..cctor()


Any suggestions??
Roger Martin
#23 Posted : Tuesday, 9 December 2008 12:41:45 AM(UTC)
Roger Martin

Rank: Administration

Joined: 3/08/2007(UTC)
Posts: 3,168
Location: Fort Atkinson, WI

Have you seen this thread?
Roger Martin
Creator and Lead Developer of Gallery Server Pro
bwin
#24 Posted : Tuesday, 9 December 2008 6:39:10 AM(UTC)
Rank: Newbie

Joined: 9/12/2008(UTC)
Posts: 1
Location: MS

Roger,

Thanks so much for the great GSP application. I have been reading this thread and your blog on this topic, and realize that my scenario is slightly different. Is it possible to use Windows authentication instead of Active Directory Forms authentication (i.e. bypassing the GSP login completely), and still using the SqlRoleProvider roles?

Updating the web.config to reflect this setup isn't significant but I was wondering if you knew off-hand if this would present any issues with GSP. With what I've modified so far, I've gotten GSP to recognize my Windows auth username, but when I use the VS2005 ASP.NET Configuration tool to assign my username to the System Administrator role, I get a 'Could not load file or assembly 'System.Data.SQLite, Version=1.0.60.0.... Failed to grant minimum permission requests' error.

I will continue to play around with my current configuration to try to get it to work but any additional guidance you may have to offer would be greatly appreciated.

Roger Martin
#25 Posted : Tuesday, 9 December 2008 9:17:37 AM(UTC)
Roger Martin

Rank: Administration

Joined: 3/08/2007(UTC)
Posts: 3,168
Location: Fort Atkinson, WI

I haven't tested that scenario but I don't know of any reason why it wouldn't work. MS confirms that it is supported in ASP.NET:

Quote:
When you use Windows authentication, you can use alternate role providers, such as the AuthorizationStoreRoleProvider and SqlRoleProvider, if you need to store roles in alternate role stores such as Authorization Manager policy stores or SQL Server databases. For more information, see How To: Use Role Manager in ASP.NET 2.0.

Roger Martin
Creator and Lead Developer of Gallery Server Pro
sam
#26 Posted : Monday, 15 December 2008 2:32:55 AM(UTC)
Rank: Advanced Member

Joined: 5/08/2007(UTC)
Posts: 157
Location: England

Hi,

i'm giving this a go and i am getting this error what have i missed.
if i take it out it works fine.
File Attachment(s):
error.xps (109kb) downloaded 20 time(s).
I donated. Did you?
Roger Martin
#27 Posted : Monday, 15 December 2008 2:41:19 AM(UTC)
Roger Martin

Rank: Administration

Joined: 3/08/2007(UTC)
Posts: 3,168
Location: Fort Atkinson, WI

You have a syntax error. There is a /> after the enableSearchMethods attribute. Remove it so it looks like this:

Code:
<membership defaultProvider="AspNetActiveDirectoryMembershipProvider">
<providers>
<add name="AspNetActiveDirectoryMembershipProvider"
type="System.Web.Security.ActiveDirectoryMembershipProvider, System.Web,Version=2.0.0.0,Culture=neutral,PublicKeyToken=b03f5f7f11d50a3a"
connectionStringName="ADConnection"
enableSearchMethods="true"
connectionUsername="RMartin"
connectionPassword="mypassword"/>
</providers>
</membership>

Roger Martin
Creator and Lead Developer of Gallery Server Pro
sam
#28 Posted : Monday, 15 December 2008 2:44:26 AM(UTC)
Rank: Advanced Member

Joined: 5/08/2007(UTC)
Posts: 157
Location: England

thats it!!

if u look at the guide the error is in there.


thanx sam
I donated. Did you?
Roger Martin
#29 Posted : Monday, 15 December 2008 2:59:19 AM(UTC)
Roger Martin

Rank: Administration

Joined: 3/08/2007(UTC)
Posts: 3,168
Location: Fort Atkinson, WI

I can't find the error. Can you be more specific?
Roger Martin
Creator and Lead Developer of Gallery Server Pro
sam
#30 Posted : Monday, 15 December 2008 3:04:04 AM(UTC)
Rank: Advanced Member

Joined: 5/08/2007(UTC)
Posts: 157
Location: England

sorry me just being dumb
I donated. Did you?
jcasetnl
#31 Posted : Monday, 16 March 2009 9:16:52 AM(UTC)
Rank: Member

Joined: 13/03/2009(UTC)
Posts: 6
Location: Oakland, CA

Step 2: Create, edit and delete AD accounts within Gallery Server Pro
Once you are logged on as an administrator, you can go to the Manage Users page and add the remaining AD accounts to appropriate roles. If the IIS user account does not have permission to make changes to AD, you may receive an error like this when you click Save changes:


I have AD integration working at this point and logging in works fine but I have a question I'm hoping someone can answer.

When you add a user to a role in GSP, what is being changed in the AD account itself by the priveledged account?

Is it merely a credential check but no actual changes to the account are made? Does it have nothing to do with the AD schema/data at all but just what's stored in the GSP DB?

And if it's something similar to the above paragraph, I could just add all my users one time and then removed the priveleged account from web.config, correct?

Thanks!!!





Roger Martin
#32 Posted : Tuesday, 17 March 2009 12:17:42 AM(UTC)
Roger Martin

Rank: Administration

Joined: 3/08/2007(UTC)
Posts: 3,168
Location: Fort Atkinson, WI

Quote:
When you add a user to a role in GSP, what is being changed in the AD account itself by the priveledged account?


Nothing. The role management is contained within the GSP database, so your idea to remove the privileged account after initial configuration should work.
Roger Martin
Creator and Lead Developer of Gallery Server Pro
jcasetnl
#33 Posted : Wednesday, 18 March 2009 3:29:12 AM(UTC)
Rank: Member

Joined: 13/03/2009(UTC)
Posts: 6
Location: Oakland, CA

Roger Martin wrote:
Quote:
When you add a user to a role in GSP, what is being changed in the AD account itself by the priveledged account?


Nothing. The role management is contained within the GSP database, so your idea to remove the privileged account after initial configuration should work.


Thanks! That means I can roll this out on a limited basis for testing.
smorgan19
#34 Posted : Monday, 6 April 2009 5:00:23 PM(UTC)
Rank: Newbie

Joined: 6/04/2009(UTC)
Posts: 1
Location: Sydney

Hi,

Also check out this: http://www.codeproject.c...ve_directory_roles.aspx

Custom AD Rolemanager to retrieve AD groups. I'm looking at integrating it atm.

:)
zcolton
#35 Posted : Wednesday, 18 November 2009 9:22:19 AM(UTC)
Rank: Member

Joined: 4/09/2008(UTC)
Posts: 18
Location: NJ

To smorgan19:
Have you made any progress on the ad rolemanager? I am quite interested in such an option (it would make my life so much easier), but I am no programmer.
rangarodriks
#36 Posted : Wednesday, 25 August 2010 5:45:17 PM(UTC)
Rank: Newbie

Joined: 25/08/2010(UTC)
Posts: 1
Location: USA

Of course, this may be the wrong way, covering the entire domain, so be careful. For this reason I prefer to go back to read-only rights and addressing the role through participation in IIS 7 Manager
hherd
#37 Posted : Wednesday, 13 July 2011 9:29:48 AM(UTC)
Rank: Newbie

Joined: 13/07/2011(UTC)
Posts: 1
Location: Yakima WA

I've just installed 2.5 on Windows 2008 R2 Ent and the LDAP auth is working but I haven't been able to grant my AD user Sys Admin rights. I've tried using the VB Express WSAT tool to edit the permissions but keep getting an error.

Help!
Roger Martin
#38 Posted : Wednesday, 13 July 2011 10:09:35 AM(UTC)
Roger Martin

Rank: Administration

Joined: 3/08/2007(UTC)
Posts: 3,168
Location: Fort Atkinson, WI

Without the details of the error it is hard to know what is wrong. I suggest searching the internet on the error message to see if anything comes up. Since I don't know much about AD, that is basically what I would do if you posted the error message here.

If nothing else, you can update the aspnet_UsersInRoles table directly to add the user to the role. Off the top of my head, though, I am not sure what you would use for the UserId column.
Roger Martin
Creator and Lead Developer of Gallery Server Pro
Rss Feed  Atom Feed
Users browsing this topic
Guest
2 Pages<12
You cannot post new topics in this forum.
You cannot reply to topics in this forum.
You cannot delete your posts in this forum.
You cannot edit your posts in this forum.
You cannot create polls in this forum.
You cannot vote in polls in this forum.