Question

I have a working LDAP Server with these parameters:

OU=users,OU=mydomain,O=this domain
LDAP://myhost:389 

I successfully access with a generic ldap client, like the good Jarek Gawor’s ldap browser/client with following settings:

OU=users,OU=mydomain,O=this domain
User info (append base DN):
uid=myid
password=mypwd

I tried to to the same with ASP.NET, getting always the error “wrong username or password“.
May you help me to setup web.config with above parameters, please?
I did many tries, like changing connectionUsername, removing domainname, putting uid=myid, etc…

web.config

<configuration>
  <connectionStrings>
  <add name="ADConnectionString" connectionString="LDAP://myhost:389"/>
  ....

<membership defaultProvider="DefaultMembershipProvider">
  <providers>
    <add name="DefaultMembershipProvider"
         type="System.Web.Security.ActiveDirectoryMembershipProvider, System.Web, Version=2.0.0.0,Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a"
         connectionStringName="ADConnectionString"
         connectionProtection="None"
         connectionUsername="MYDOMAIN\myid"
         connectionPassword="mypwd"
         attributeMapUsername="sAMAccountName"
         enableSearchMethods="True" />
  </providers>
</membership>
......

Thanks in advance

Answer 1

I succeeded in getting it work with the following web.config setup.

There were two problems/errors:

1st) I did not specify the container, so I followed @Kevin’s hints:

<configuration>
  <connectionStrings>
  <add name="ADConnectionString" connectionString="LDAP://myhost:389/O=this domain,CN=Users,DC=mydomain,DC=com"/>
  ....

I think that was relevant the CN, while O could be omitted here, but I do not think this is very important…

2nd) I put the DN base and username (in the form uid=) together inside connectionUsername parameter:

<membership defaultProvider="DefaultMembershipProvider">
  <providers>
<add name="DefaultMembershipProvider"
     type="System.Web.Security.ActiveDirectoryMembershipProvider, System.Web, Version=2.0.0.0,Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a"
     connectionStringName="ADConnectionString"
     connectionProtection="None"
     connectionUsername="uid=myid, O=this domain"
     connectionPassword="mypwd"
     attributeMapUsername="sAMAccountName"
     enableSearchMethods="True" />

Please note, in my case I needed to put uid=myid. I do not know if this could be a general solution; perhaps it is related to ADAS configuration of my company, I do not know. I hope this can help some of you…please vote up if you find this solution useful, thx.

@Kevin: Thank you very much. You have been very helpful!