Ldap config in CMS 5

Jesper Snive

Vote:

I will soon try to set up the Ldap connection, that a customer used on there old Epi 4.5 intranet, on the new CMS 5

Is there any changes?
Is there any help on this, where do I put the <add key="EPsLdapServer" value="ldapserver.fakename.se" /> in the web.config etc.

best regards

jesper

#20471

Jun 02, 2008 10:42

Vote:

Hi Jesper!

> Is there any changes?

Yeah, its completely gone..(!)

EPiServer5 uses the standard ASP.Net Membership/Roler-Providers, and You would probably want to check out the ActiveDirectoryMembershipProvider instead. Theres also an ActiveDirectoryRoleProvider available for download if you need group/roles too.

More info here:
http://world.episerver.com/Documentation/Items/Tech-Notes/EPiServer-CMS-SP2/Configuring-EPiServer-CMS-5-to-Use-Active-Directory-Membership-Provider/

Regards,
Johan Olofsson

#20489

Jun 02, 2008 16:58

Jesper Snive

Vote:

Thanx it works

But you have to upgrade your SDK to SP1 to be able to compile ActiveDirectoryRoleProvider

Best regards

jesper

#20543

Jun 04, 2008 13:42

Per Hemmingson

Vote:

Yes, you need EPiServer CMS 5 SP1 for the activedirectoryroleprovider.

#20544

Jun 04, 2008 14:08

Jesper Snive

Vote:

I now have problems to get the ActiveDirectoryMembershipProvider to work with Automatic login.
I want the users to automaticly get logged in to the Intranet with there windowsaccount.

The strange thing is that it works for me but for no one else

We had this working on the old epi 4.62 but I can't get this working

Anyone knows the problem?

/jesper

#21265

Jun 24, 2008 15:29

Mats Norgren

Vote:

We found out that the activedirectorymembershipprovider needs some ports to be opened in the firewall to get it work well. (with web server in dmz and DC on the inside). ports 137 to 139, plus 88 i think.

Maybe that could help you a little bit?

#21277

Jun 24, 2008 17:23

Vote:

Whats the difference between your account (that works) and one that doesnt?
Do the accounts exists under different nodes?
Do the users keep getting the login dialog over and over or do they get any error message?

If you switch to forms login, are they able to login using their AD-accounts then?

/johan

#21280

Jun 24, 2008 20:20

Jesper Snive

Vote:

They are able to login with AD accounts using forms
So the connection to LDAP seems to work

The only thing I don't understand is why the windowsform don't work

/jesper

#21285

Jun 25, 2008 12:10

Jesper Snive

Vote:

the easy solution....

of course you need the domain users to have the right access to files in wwwroot and templates...

When you log on using Epiforms the server probably access the files using IIS user as configured

simple

thanx for all the help

#21496

Jun 30, 2008 11:55