Impersonate + AD

[Alberto Ortega]

Hi, I've got a difficult situation...
Is a website that runs on IIS with Anonymous Authentication, the tag
<identity impersonate="false"> on the Web.config file. So the thread is
executed by user "NT AUTHORITY".
So when I use AD API ( FindOne() ) it works well.
The point is that when I impersonate that user by code (that works well too)
when I execute that function from the AD API it returns an error:

{"Operation Error" } [System.Runtime.InteropServices.COMException]:
{System.Runtime.InteropServices.COMException} System.Object:
{System.Runtime.InteropServices.COMException} _className: null
_COMPlusExceptionCode: -532459699 _exceptionMethod:
{System.Reflection.RuntimeMethodInfo} _exceptionMethodString: null _helpURL:
null _HResult: -2147016672 _innerException: { } _message: "Operation Error"
_remoteStackIndex: 0 _remoteStackTraceString: null _source:
"System.DirectoryServices" _stackTrace: {System.Array} _stackTraceString: "
at System.DirectoryServices.DirectoryEntry.Bind(Boole an throwIfFail)\r\n at
System.DirectoryServices.DirectoryEntry.Bind()\r\n at
System.DirectoryServices.DirectoryEntry.get_AdsObj ect()\r\n at
System.DirectoryServices.DirectorySearcher.FindAll (Boolean
findMoreThanOne)\r\n at
System.DirectoryServices.DirectorySearcher.FindOne ()\r\n at
Banelco.CSB.DNN.Providers.ActiveDirectory.LdapAuth entication.GetUser(String
username)" _xcode: -532459699 _xptrs: 0 HelpLink: null HResul


Thanks

Alberto Ortega

[mpes]

I could have had a similar problem, try to check:
[url]http://support.microsoft.com/default.aspx?scid=kb;en-us;329986[/url]

[url]http://msdn.microsoft.com/library/default.asp?url=/library/en-us/sds/sds/tro[/url]
ubleshooting_authentication_problems_on_asp_pages. asp?frame=true

Martin



"Alberto Ortega" <beto@NOSPAMTOMEsouthworks.net> wrote in message
news:#J0xZo0HFHA.4060@TK2MSFTNGP14.phx.gbl...

> Hi, I've got a difficult situation...
> Is a website that runs on IIS with Anonymous Authentication, the tag
> <identity impersonate="false"> on the Web.config file. So the thread is
> executed by user "NT AUTHORITY".
> So when I use AD API ( FindOne() ) it works well.
> The point is that when I impersonate that user by code (that works well

too)

> when I execute that function from the AD API it returns an error:
>
> {"Operation Error" } [System.Runtime.InteropServices.COMException]:
> {System.Runtime.InteropServices.COMException} System.Object:
> {System.Runtime.InteropServices.COMException} _className: null
> _COMPlusExceptionCode: -532459699 _exceptionMethod:
> {System.Reflection.RuntimeMethodInfo} _exceptionMethodString: null

_helpURL:

> null _HResult: -2147016672 _innerException: { } _message: "Operation

Error"

> _remoteStackIndex: 0 _remoteStackTraceString: null _source:
> "System.DirectoryServices" _stackTrace: {System.Array} _stackTraceString:

"

> at System.DirectoryServices.DirectoryEntry.Bind(Boole an throwIfFail)\r\n

at

> System.DirectoryServices.DirectoryEntry.Bind()\r\n at
> System.DirectoryServices.DirectoryEntry.get_AdsObj ect()\r\n at
> System.DirectoryServices.DirectorySearcher.FindAll (Boolean
> findMoreThanOne)\r\n at
> System.DirectoryServices.DirectorySearcher.FindOne ()\r\n at
>

Banelco.CSB.DNN.Providers.ActiveDirectory.LdapAuth entication.GetUser(String

> username)" _xcode: -532459699 _xptrs: 0 HelpLink: null HResul
>
>
> Thanks
>
> Alberto Ortega
>
>