Home All Groups Group Topic Archive Search About

Application Pool domain credentials

Author
24 May 2006 4:01 PM
Steve Smith
I am building a web page that will invoke a server-side process that needs
to query Active Directory.

I have set up a non-privileged account and have configured an application
pool for the virtual directory to use this account on the identity tab.

When I run the application, I am still not properly credentialed when I get
to AD with my ADODB connection.

Is there an easy way to do this? I would think it would be better to
configure an App Pool with credentials for this virtual directory then it
would be to put credentials into the server-side script (even though they
may be encrypted in the web.config file)

Any advice would be appreciated. I am new to web programming so I could be
way off base here.

Thanks

Steve Smith

Author
25 May 2006 4:22 AM
Ken Schaefer
a) What type of web page is this? ASP? ASP.NET? PHP? That will affect what
account is actually used to connect to AD

b) Are you allowing anonymous authentication? Or are you forcing the user to
authenticate to access the web page? if the latter, what AuthN mechanism are
you using (e.g. Basic, IWA, Digest etc)?

Cheers
Ken

Show quoteHide quote
"Steve Smith" <steve.a.sm***@shaw.ca> wrote in message
news:Oag4At0fGHA.2188@TK2MSFTNGP04.phx.gbl...
>I am building a web page that will invoke a server-side process that needs
>to query Active Directory.
>
> I have set up a non-privileged account and have configured an application
> pool for the virtual directory to use this account on the identity tab.
>
> When I run the application, I am still not properly credentialed when I
> get to AD with my ADODB connection.
>
> Is there an easy way to do this? I would think it would be better to
> configure an App Pool with credentials for this virtual directory then it
> would be to put credentials into the server-side script (even though they
> may be encrypted in the web.config file)
>
> Any advice would be appreciated. I am new to web programming so I could be
> way off base here.
>
> Thanks
>
> Steve Smith
>
>
>
Author
25 May 2006 1:48 PM
Steve Smith
Hi Ken

The web page would be ASP.NET

The web page should allow anonymous access.

Thanks

Steve


Show quoteHide quote
"Ken Schaefer" <kenREM***@THISadOpenStatic.com> wrote in message
news:u9D7JL7fGHA.4004@TK2MSFTNGP04.phx.gbl...
> a) What type of web page is this? ASP? ASP.NET? PHP? That will affect what
> account is actually used to connect to AD
>
> b) Are you allowing anonymous authentication? Or are you forcing the user
> to authenticate to access the web page? if the latter, what AuthN
> mechanism are you using (e.g. Basic, IWA, Digest etc)?
>
> Cheers
> Ken
>
> "Steve Smith" <steve.a.sm***@shaw.ca> wrote in message
> news:Oag4At0fGHA.2188@TK2MSFTNGP04.phx.gbl...
>>I am building a web page that will invoke a server-side process that needs
>>to query Active Directory.
>>
>> I have set up a non-privileged account and have configured an application
>> pool for the virtual directory to use this account on the identity tab.
>>
>> When I run the application, I am still not properly credentialed when I
>> get to AD with my ADODB connection.
>>
>> Is there an easy way to do this? I would think it would be better to
>> configure an App Pool with credentials for this virtual directory then it
>> would be to put credentials into the server-side script (even though they
>> may be encrypted in the web.config file)
>>
>> Any advice would be appreciated. I am new to web programming so I could
>> be way off base here.
>>
>> Thanks
>>
>> Steve Smith
>>
>>
>>
>
>
Author
26 May 2006 3:05 AM
Ken Schaefer
That should work fine then...

What is the error you are seeing?

Cheers
Ken

Show quoteHide quote
"Steve Smith" <steve.a.sm***@shaw.ca> wrote in message
news:OYUYwHAgGHA.3996@TK2MSFTNGP03.phx.gbl...
> Hi Ken
>
> The web page would be ASP.NET
>
> The web page should allow anonymous access.
>
> Thanks
>
> Steve
>
>
> "Ken Schaefer" <kenREM***@THISadOpenStatic.com> wrote in message
> news:u9D7JL7fGHA.4004@TK2MSFTNGP04.phx.gbl...
>> a) What type of web page is this? ASP? ASP.NET? PHP? That will affect
>> what account is actually used to connect to AD
>>
>> b) Are you allowing anonymous authentication? Or are you forcing the user
>> to authenticate to access the web page? if the latter, what AuthN
>> mechanism are you using (e.g. Basic, IWA, Digest etc)?
>>
>> Cheers
>> Ken
>>
>> "Steve Smith" <steve.a.sm***@shaw.ca> wrote in message
>> news:Oag4At0fGHA.2188@TK2MSFTNGP04.phx.gbl...
>>>I am building a web page that will invoke a server-side process that
>>>needs to query Active Directory.
>>>
>>> I have set up a non-privileged account and have configured an
>>> application pool for the virtual directory to use this account on the
>>> identity tab.
>>>
>>> When I run the application, I am still not properly credentialed when I
>>> get to AD with my ADODB connection.
>>>
>>> Is there an easy way to do this? I would think it would be better to
>>> configure an App Pool with credentials for this virtual directory then
>>> it would be to put credentials into the server-side script (even though
>>> they may be encrypted in the web.config file)
>>>
>>> Any advice would be appreciated. I am new to web programming so I could
>>> be way off base here.
>>>
>>> Thanks
>>>
>>> Steve Smith
>>>
>>>
>>>
>>
>>
>
>
Author
26 May 2006 4:18 PM
Steve Smith
"Table does not exist" on the .Execute method when I attempt to do the
search.

If I add credentials to the ADODB connection object it works fine.

Although the Application pool is running under the context of a domain
account, the thread that is launched when the web page is accessed seems to
be running without credentials.

Thanks

Steve
Show quoteHide quote
"Ken Schaefer" <kenREM***@THISadOpenStatic.com> wrote in message
news:%230ELCFHgGHA.2032@TK2MSFTNGP02.phx.gbl...
> That should work fine then...
>
> What is the error you are seeing?
>
> Cheers
> Ken
>
> "Steve Smith" <steve.a.sm***@shaw.ca> wrote in message
> news:OYUYwHAgGHA.3996@TK2MSFTNGP03.phx.gbl...
>> Hi Ken
>>
>> The web page would be ASP.NET
>>
>> The web page should allow anonymous access.
>>
>> Thanks
>>
>> Steve
>>
>>
>> "Ken Schaefer" <kenREM***@THISadOpenStatic.com> wrote in message
>> news:u9D7JL7fGHA.4004@TK2MSFTNGP04.phx.gbl...
>>> a) What type of web page is this? ASP? ASP.NET? PHP? That will affect
>>> what account is actually used to connect to AD
>>>
>>> b) Are you allowing anonymous authentication? Or are you forcing the
>>> user to authenticate to access the web page? if the latter, what AuthN
>>> mechanism are you using (e.g. Basic, IWA, Digest etc)?
>>>
>>> Cheers
>>> Ken
>>>
>>> "Steve Smith" <steve.a.sm***@shaw.ca> wrote in message
>>> news:Oag4At0fGHA.2188@TK2MSFTNGP04.phx.gbl...
>>>>I am building a web page that will invoke a server-side process that
>>>>needs to query Active Directory.
>>>>
>>>> I have set up a non-privileged account and have configured an
>>>> application pool for the virtual directory to use this account on the
>>>> identity tab.
>>>>
>>>> When I run the application, I am still not properly credentialed when I
>>>> get to AD with my ADODB connection.
>>>>
>>>> Is there an easy way to do this? I would think it would be better to
>>>> configure an App Pool with credentials for this virtual directory then
>>>> it would be to put credentials into the server-side script (even though
>>>> they may be encrypted in the web.config file)
>>>>
>>>> Any advice would be appreciated. I am new to web programming so I could
>>>> be way off base here.
>>>>
>>>> Thanks
>>>>
>>>> Steve Smith
>>>>
>>>>
>>>>
>>>
>>>
>>
>>
>
>