Friday, January 09, 2009 | Register | Login 
Minimize
 Module Support Forums
 
 Forum Forum metaPost Forums metaPost Forums metaPost Featur... metaPost Featur... Active Directory Active Directory
Previous Previous
 
Next Next
New Post
 2/26/2008 2:18 PM
Don Worthley
201 posts
9th Level Poster


Re: Active Directory
 
Great research Ben!  This will be tremendously helpful to others using AD authentication who want to also make use of the MetaWeblog API.  It seems that the real answer is that a custom version of the AD provider is needed in order to work with metaPost.  What would be cool is a version of this provider that looks at the user agent to see if a request is coming in from WLW or Word allowing anonymous access in these cases.  I'll revisit this when I have some time and see if there's an easy way to modify the source of the AD provider.  Thanks again for your continued help with this!  Don
 
New Post
 2/26/2008 3:01 PM
Jordan Widstrom
4 posts
No Ranking


Re: Active Directory
 
Great news, guys. I disabled the AD http module in web.config as Ben noted, and tried posting to a blog tied to a Windows account with Live Writer, and it worked. In the Live Writer setup screen I simply supplied my windows account in the form DOMAIN\username with the windows password. It appears we can have the best of both worlds with some minor tweaks to the AD http module.

One thing to keep in mind is that the windows password is sent in plain text just as with a DNN forms-authenticated user, so folks will want to make sure their site is isolated in an Intranet environment and/or secured with SSL, espcially in an Extranet environment.

I will also try to put some custom code in the AD http module so that we can use a config file to specify additional files (or perhaps user agents as Don mentioned) that can be accessed anonymously without redirecting to the automatic sign-in page.

We may want to consider submitting an enhancement request to support.dotnetnuke.com so that this might be a public addition to the AD module, if appropriate. Don, is this something you would prefer to do, as the technical contact for metaPost? I would be happy to do so myself as well.

Again, thanks much to both of you.

 
New Post
 2/26/2008 3:11 PM
Don Worthley
201 posts
9th Level Poster


Re: Active Directory
 

That is great news and I really appreciate your willingness to see this through to completion! 

I don't have a preference regarding who submits the enhancement request.  If needed, I can add comments to yours if you have the time to submit one.

Great job Jordan and Ben!

 
New Post
 2/27/2008 9:59 AM
Accepted Answer 
Ben91
5 posts
No Ranking


Re: Active Directory
 

As a proof of concept I added the following code:

If Request.UserAgent.Contains( "Windows Live Writer" ) Then
   Exit Sub
End If

to the top of

Public Sub OnAuthenticateRequest( ByVal s As Object , ByVal e As EventArgs)

in AuthenticatationModule of the AD provider.  This worked as expected.  Now, I have full AD support, including auto-login *and* WLW is able to access the system.  Ugly and hard-coded... but working!

 
New Post
 2/27/2008 11:23 AM
Jordan Widstrom
4 posts
No Ranking


Re: Active Directory
 
Nice.

For everyone's reference, I submitted an enhancement request.

http://support.dotnetnuke.com/issue/ViewIssue.aspx?id=7120&PROJID=23

 

 
Previous Previous
 
Next Next
 Forum Forum metaPost Forums metaPost Forums metaPost Featur... metaPost Featur... Active Directory Active Directory
 Print