web.config secure directory with gal group

Question

So, I have the following in the web.config

    <authentication mode="Windows"/>
    <authorization>         
        <allow users="domain\johndoe" />

        <!--Deny All Others-->
        <deny users="*" /> 
    </authorization>

But, what I want to do, is only allow users in a specific GAL group on our AD server and that doesn't seem to work with these settings.

Is there an authentication mode that will? Everything I find referencing AD wants to use forms! Which I do not want.

Answer 1

Try this

<authorization>
    <allow users="*" roles="domain/group" />
    <deny users="*" />
</authorization>

Answer 2

I don't think you can do it a simply as settings within the Authorization tag. Check out the Acitve Directory membership provider - perhaps that is what you want...

How To: Use Forms Authentication with Active Directory in Multiple Domains in ASP.NET 2.0

Answer 3

我认为您的组需要是安全组，而不是通讯组（至少，这是我现在遇到的问题）