Mono Support Active Directory: Roles from ADUC Groups; not all showing up? 

Viewed 25349 time(s), 10 post(s), 5/7/2012 3:14:49 PM - by erin0201
5/7/2012 3:14:49 PM
453 Reputation 61 Total posts

I am trying to integrate with active directory and control my page views and editing via Active Directory security groups.

However, not all of my groups are showing up when I click on page properties in the page administration area of MonoX.
There are a lot of groups in our Active Directory. Is there a limit on how many groups are shown in MonoX page administration?

Thanks!
Erin

1
5/7/2012 3:44:45 PM
7207 Reputation 956 Total posts

Hi Erin,
MonoX uses only AD security groups - distribution groups are not imported (for more details, see http://technet.microsoft.com/en-us/library/cc781446(v=ws.10).aspx ). Apart from that, it will also skip the groups that are placed in the groupsToIgnore attribute of the ActiveDirectoryRoleProvider in the web.config.

2
5/7/2012 3:51:33 PM
453 Reputation 61 Total posts

Hi Denis,

I've tried placing some groups in the groupstoignore section of web.config. Will they disappear from the listing in page properties if I put them there?
Also how should I format them.

I've tried:
groupsToIgnore="Group1;Group2;Group3;"
For example and these groups still show up in the page properties as options to use.
Should I be using commas, or certain spacing in there..?

3
5/7/2012 4:12:40 PM
453 Reputation 61 Total posts

Also, do you need to have roles created already in MonoX with the same name as roles coming in from Active Directory for them to work?

4
5/8/2012 10:18:29 AM
7207 Reputation 956 Total posts

Please use commas (',') to separate role names. As for the existing roles, it would be best ro remove them before switching to the AD provider - you cannot use multiple providers at the same time.

5
5/8/2012 12:12:56 PM
453 Reputation 61 Total posts

Thanks Denis!

Also, do you know how long it takes for changes to propagate from the active directory if I move users around in there? Do I have to restart the website in IIS? Or when will MonoX go out and check for user/group changes? For now to see changes, I've been renaming the web.config and replacing it with the MonoX standalone configurations, logging in with the original admin, and then logging out, and replacing the web.config with my ADUC configured one and logging in with my domain administrator account to try and see changes. Do I always have to do this to stimulate MonoX going out and refreshing/updating the changes from active directory or will it do it on its own every so often?

Thanks!

6
5/8/2012 12:28:21 PM
7207 Reputation 956 Total posts

It should happen automatically after the time period specified in the cacheTime attribute in the web.config expires.

7
5/8/2012 12:30:18 PM
453 Reputation 61 Total posts

Oh, excellent!

Is that cacheTime value in seconds, milliseconds, or minutes then?

8
5/8/2012 12:40:22 PM
7207 Reputation 956 Total posts

Hi Erin,
these are seconds.

9
5/8/2012 3:21:12 PM
453 Reputation 61 Total posts

Thanks for your help, Denis!

10
This is a demo site for MonoX. Please visit Mono Software for more info.