I'm looking for more information regarding this as well. Has anyone sucessfully used multplie ADs? Or letting a user from a trusted AD log in?
// Kind regards, Torbjörn
Yes i have manged this and by using the GC:\\ moniker, it works although their is a small bug in EPiServer where you have to use the following format :
To enable the global catalog please see : http://technet.microsoft.com/en-us/library/cc758330(WS.10).aspx
I'm not really good at Active Directory, but are you sure that this solves the problem with connecting to multiple ADs? I found this definition of Global Catalog (http://technet.microsoft.com/en-us/library/cc728188(WS.10).aspx):
"The global catalog is a distributed data repository that contains a searchable, partial representation of every object in every domain in a multidomain Active Directory Domain Services (AD DS) forest."
So, doesn't the Global Catalog only support mutiple domains within one, and only one AD? Or are Trusted ADs added to the forest?
// Regards, Torbjörn
I will need to double check this although i think trusted AD's were also added to the forest, as the primary active directory should replciate every object in all of the other AD's.
“When a workstation in one forest attempts to access data on the resource computer in another forest, Kerberos contacts the domain controller for a service ticket to the SPN of the resource computer. Once the domain controller queries the global catalog and identifies that the SPN is not in the same forest as the domain controller, the domain controller sends a referral for its parent domain back to the workstation. At that point, the workstation queries the parent domain for the service ticket and follows the referral chain until it gets to the domain where the resource is located.”
Please see : http://technet.microsoft.com/en-us/library/cc773178(WS.10).aspx and http://technet.microsoft.com/en-us/library/cc772808(WS.10).aspx
The easy solution is to build your own Membership /Role provider
Take a look at thos blog post
Thanks Anders, those three blog posts looks promising!
Thank you Minesh as well!