What membership/role providres should I use?

[David Thielen]

1. I assume the two options I should use is Windows authentication if all
users are in Active Directory and all users use Internet Explorer. And option
2 is to use the ASP.NET SqlServerExpress standard user/role manager for all
other cases? I assume that the ActiveDirectory role manager still does not
support IsInRole() on ActiveDirectory groups.

2. While there can be multiple membership/role providers, this strikes me as
asking for trouble. For a portal where we are trying to keep things simple,
is there any reason to go with both providers being available?

 

[Luke Zhang [MSFT]]

Hello,

Even isinrole can't work with AD, We can still query AD to check role
information with windows authentication. For example:

http://support.microsoft.com/?id=326340

Regards,

Luke Zhang
Microsoft Online Community Support

==================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
==================================================

(This posting is provided "AS IS", with no warranties, and confers no
rights.)

 

[David Thielen]

Hi;

I may not be understanding something right. I set my system as follows:'
<roleManager enabled="false"/>
<authentication mode="Windows">
</authentication>
<identity impersonate="true"/>
<authorization>
<deny users="?"/>
</authorization>

And IsInRole works when I pass it an AD group. I have no code for this, just
the above Web.Config setting.

 

[Luke Zhang [MSFT]]

I think this only work with local user, not a AD account.

Reagrds,

Luke Zhang
Microsoft Online Community Support

==================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
==================================================

(This posting is provided "AS IS", with no warranties, and confers no
rights.)

 

[David Thielen]

My WindowsIdentity is WINDWARD\dave and IsInRole works for both local and
domain groups.

??? - dave

 

[Luke Zhang [MSFT]]

My mistake, You are correct at this. Anyway, there is still some limitation
which lead me a wrong answer in my test:

http://support.microsoft.com/default.aspx?scid=kb;en-us;842794

Hope this help,

Luke Zhang
Microsoft Online Community Support

==================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
==================================================

(This posting is provided "AS IS", with no warranties, and confers no
rights.)

 

[David Thielen]

Yeah - I learned the log out/in about a year ago on another project - big PITA.