We have set up a readonly domain controller (RODC) on an external network. The RODC punches through the firewall recieve updates from a cluster of internal DCs. The servers sitting outside the firewall join to the domain just fine, however an asp.net application that uses forms authentication over Active Directory seems to authenticate on a DC that is inside the firewall instead of using the RODC.
Some troubleshooting steps:
Performing a NSLookup for domain.org from the web server yeilds one of the internal DCs.
If we add entry for domain.org to to the HOSTS file on the web server, everything works just fine
Some theory:
I dont believe the web server should even know that the internal DCs exist. They should only know about the RODC because it is the only thing they have access to.
Any thoughts/troubleshooting would be much appreciated.
...
Go to the complete details ...