Active Directory Group Search

Stefan.McMullan@royallondongroup.co.uk

Vote:

Getting the following error when trying to search AD groups from within EpiServer, It seems that if I search for users it works fine.

Anyone come across this problem before? My supplier is telling me its a CMS6.0 Bug.

Thanks

Stefan

[DirectoryServicesCOMException (0x80072030): There is no such object on the server.
]
   System.DirectoryServices.DirectoryEntry.Bind(Boolean throwIfFail) +377678
   System.DirectoryServices.DirectoryEntry.Bind() +36
   System.DirectoryServices.DirectoryEntry.get_AdsObject() +31
   System.DirectoryServices.PropertyCollection.Contains(String propertyName) +24
   EPiServer.Security.AdsiDataFactory.CreateDirectoryDataFromDirectoryEntry(DirectoryEntry entry) +171
   EPiServer.Security.AdsiDataFactory.GetEntry(String distinguishedName) +141
   EPiServer.Security.ActiveDirectoryRoleProvider.GetAllRoles() +144
   EPiServer.Security.MultiplexingRoleProvider.GetAllRoles() +100
   System.Web.Security.Roles.GetAllRoles() +39
   EPiServer.Security.VirtualRoles.FilteredRoles(Func`2 filterCondition) +350
   EPiServer.Security.VirtualRoles.FindRoles(String roleName) +108
   EPiServer.UI.Edit.MembershipBrowser.PopulateGroupsUserList(String name, String email) +117
   EPiServer.UI.Edit.MembershipBrowser.OnLoad(EventArgs e) +166
   System.Web.UI.Control.LoadRecursive() +50
   System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) +627

#57154

Feb 28, 2012 16:21

Shahid nawaz

Vote:

Hi,

Have a look at below blog post.

http://world.episerver.com/Blogs/Leif-Bostrom/Dates/2010/7/Exposing-the-root-cause-of-ActiveDirectoryRoleProvider-errors/

Hope it helps!

#57170

Feb 29, 2012 17:05

Stefan.McMullan@royallondongroup.co.uk

Vote:

We managed to solve the problem by changing how the AD connection was setup (web.config), the key was EPsLdapRootContext, previously episerver was scanning several domains and hundreds of groups. Now its only scanning what it needs too. We now have a performance increase and any invalid groups that are added outside of the Episerver group will not affect the intranet.

<addkey="EPsLdapServer"value=LDAP://ADSERVERNAME/">
<addkey="EPsLdapDomain"value="DC=domain,DC=com"/>
<addkey="EPsLdapUser"value="username"/>
<addkey="EPsLdapPassword"value="password"/>
<addkey="EPsLdapRootContext"value="DC=domain,DC=com,OU=CommonGroups,OU=EpiServer "/>
<addkey="EPnLdapAuthenticationType"value="1158"/>
<addkey="EPfLdapAuthenticateWithBind"value="False"/>
<addkey="EPsLdapServerType"value=""/>

Thanks for your response, Hope this helps others.

Stefan

#57214

Mar 02, 2012 11:27