[farcry-dev] Re: {Disarmed} AD security issue fix - maybe

Wed, 14 Jun 2006 18:29:29 -0700

yeah - that domain name is a sneaking one.

I havent down the AD thing for a long time (v2.2)

The thing to do would be look at the farcry login and replicate all the settings it makes - in particular dmProfile and dmSec that live in the SESSSION scope.

You could probably get away with setting userDirectory = 'home'

On 6/14/06, Reid McLaughlin < [EMAIL PROTECTED]> wrote:
Hi, I like a few others (see links below) have had no joy setting up AD authentication with FarCry. I read all the posts by Brendan Sisson, David Ross, and Andrew Mercer but nothing worked.
I made the
Application.dmSec.UserDirectory.AD= StructNew();
temp = Application.dmSec.UserDirectory.AD;
temp.type="ADSI";
temp. domain="mydomain.com";
change to my _dmSecUserDirectories file and updated the app, logged in to securities and mapped a policy from my external AD groups to groups in FarCry. Nothing worked, login page would think about it for a few seconds then return reset. So I started looking through the /farcry_core/packages/security/_NTsecurity files. Everthing looked good, but I noticed some functions were COM NTAdmin calls and some java NTAuth. I have used NTAuth calls before and I remember I had issue with the domain argument. I initally passed our domain as say ctw.co.nz (our FQDN) and it wouldn't work, of cause it should be our NT domain name (or NetBIOS domain name) so I wack in "sesamest" as the domain value and she was away. Then I click, I had
temp.domain="mydomain.com "; as temp.domain="ctw.co.nz";
so I which it to the netBIOS
temp.domain="sesamest";
and everything works!
Something to try if you still have problems or have given up all together. Now I just have to fix the lack of profiles

Element DMPROFILE.USERDIRECTORY is undefined in SESSION.

Same trouble as me: document.write(Nabble.formatDateSimple(new Date(1141493170000)));

Cheers
Reid McLaughlin
Web Support Technologist
BOP Polytechnic
Tauranga
Ph 544 0920 Ext 6615
 mailto: [EMAIL PROTECTED]

 




--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups "farcry-dev" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at http://groups.google.com/group/farcry-dev
-~----------~----~----~----~------~----~------~--~---

Reply via email to