Ok so I'm working on an ASP.Net application and I set up Forms
Authentication with ActiveDirectory as the backend. This aspect of the
program works great but when you get to authorization it gets to be a
headache.
Namely, we have users in certain roles (there are 3 roles we'll need to
use, with 3 different permission sets) within AD and I need to poll
those roles from the domain controller so I can determine the user's
access rights.
I know that ADAM is available but I'd prefer to stay away from systems
that require additional software on the server and/or mess with the
existing AD infrastructure unless the benefit is just that amazing.
My current solution is I'm using the DirectorySearch to poll the data
directly using LDAP and parsing it from there but this is a really
annoying process.
Does anyone have a better way?
...
Go to the complete details ...