First, make sure nested groups are not the issue. AD's "memberOf" attribute returns only the first level of group membership. Ensure that the user is directly assigned to the correct group, not in a group within the correct group.
Are these accounts created with the same process and/or user administrator? Look for differences there, as well. Make sure everyone creates user accounts, and assigns group membership, using the same process that is known to work. Thanks, Mike -----Original Message----- From: Ian Skinner [mailto:[email protected]] Sent: Wednesday, June 17, 2009 1:33 PM To: cf-talk Subject: Strange CFLdap Active Directory issue We have a intermittent strange issue using cfldap to access user's active directory records. We use this on web resources secured with Windows Integrated Security in IIS. The ColdFusion code then uses the cgi.auth_user value to read the users ldap record and parses out the groups of which the user is a member. This information is then used to authorize certain users to access certain sections of our intranet site. This all works as expected with the majority of the users. The trouble is that for four users, they are denied access to content, even though everything we can look at says they are members of the proper group. Can anybody provide suggestions on what places we should investigate this issue? What could be different about these users that prevent them from accessing resources when their neighbors and co-works can. Even in a couple of cases, a separate, new active directory account for the same user can access the content while what seems to be an identical account can not. TIA Ian ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Want to reach the ColdFusion community with something they want? Let them know on the House of Fusion mailing lists Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:323605 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
