Introducing the Blog Engine Active Directory Role Provider

Does this implement the generic ASP.NEt RolesProvider? Is it possible to use it in other applications?

Good question Wes.

Yes, this does implement the standard RoleProvider interface that the .Net framework defines. However it only has fully functional implementations of the methods of the interface which the BlogEngine.Net system uses.

This could in theory be used with any system that consumes classes that implement the RoleProvider interface. However I find that the one-size-fits-all approach to role providers is that the association of a role to an entity in another system like AD, that association is completely arbitrary and subjective. Thus there are infinite ways that role providers can function and associate roles with groups and users in AD.

If you want to simply associate BlogEngine roles with AD Groups, then this is the provider for you. But I think one needs to think through the details of how a rolesprovider is consumed in their system before they jump the gun and use the provider w/ another system.

I am sure I just missed a simple step. Any ideas...

Logon failure: unknown user name or bad password.

Description: An unhandled exception occurred during the execution of the current web request. Please review the stack trace for more information about the error and where it originated in the code.

Exception Details: System.Runtime.InteropServices.COMException: Logon failure: unknown user name or bad password.


Source Error:


Line 65: void Login1_LoggedIn(object sender, EventArgs e)
Line 66: {
Line 67: if (!Roles.IsUserInRole(Login1.UserName, BlogEngine.Core.BlogSettings.Instance.AdministratorRole))
Line 68: Response.Redirect(BlogEngine.Core.Utils.RelativeWebRoot, true);
Line 69: }


Source File: c:\Inetpub\wwwroot\blog\login.aspx.cs Line: 67

Stack Trace:


[COMException (0x8007052e): Logon failure: unknown user name or bad password.
]
System.DirectoryServices.DirectoryEntry.Bind(Boolean throwIfFail) +377678
System.DirectoryServices.DirectoryEntry.Bind() +36
System.DirectoryServices.DirectoryEntry.get_AdsObject() +31
System.DirectoryServices.DirectorySearcher.FindAll(Boolean findMoreThanOne) +78
System.DirectoryServices.DirectorySearcher.FindAll() +9
BlogEngine.Contrib.Providers.ADRoleProvider.getUser(String userName) +71

thanks for the share..

Thanks for sharing the information, Its well written.

Hi - Great addon!!
Im having trouble seeing the admin controls when logging on. I can log on with AD and i have configured the Groups as described.
How to give blogadmin write permission?
What am i missing? Rights in files?
Domain and webserver are not the same.

Thanks a lot!