Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I'm trying to set up Forms Authentification with LDAP in SharePoint 2007 (WSS 3.0). I made it to the point where I can see users with prefix ad:<username> but I'm having trouble to get roleManager and adgroup: prefix to work. Most likely the provider type is wrong. Can anyone suggest right way to do it?

<connectionStrings>
    <add name="ADConnectionString" connectionString="LDAP://domain:389/DC=domain,DC=local" />
  </connectionStrings>
  <!--******-->
  <system.web>
    <!--AD FBA-->
    <membership defaultProvider="AD">
      <providers>
        <clear />
        <add name="AD" type="System.Web.Security.ActiveDirectoryMembershipProvider, System.Web, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a" connectionStringName="ADConnectionString" connectionUsername="domain\testgp" connectionPassword="SomePass" attributeMapUsername="SAMAccountName" enableSearchMethods="true" />
      </providers>
    </membership>
    <roleManager defaultProvider="ADGroup">
      <providers>
        <clear />
        <add name="ADGroup" type="System.Web.Security.ActiveDirectoryMembershipProvider, System.Web, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a" connectionStringName="ADConnectionString" connectionUsername="domain\testgp" connectionPassword="SomePass" attributeMapUsername="SAMAccountName" enableSearchMethods="true" />
      </providers>
    </roleManager>
share|improve this question

1 Answer 1

up vote 0 down vote accepted

As per this article, Microsoft doesn’t provide an AD role provider similar to membership provider.

If you want to pull back group membership, you’ll have to either buy a 3rd party provider, grab an open source one, or build your own. The free (open source one) can be found at CodeProject. It needs some basic fixes but we were able to get it working.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.