Inedo Community Forums Forums
    • Recent
    • Tags
    • Popular
    • Login

    Welcome to the Inedo Forums! Check out the Forums Guide for help getting started.

    If you are experiencing any issues with the forum software, please visit the Contact Form on our website and let us know!

    SecurityException on attempting to log in with LDAP

    Scheduled Pinned Locked Moved Support
    ldapauthenticationproget
    3 Posts 1 Posters 8 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • ? This user is from outside of this forum
      Guest
      last edited by

      We have a ProGet 4.1.3 system we just upgraded to 4.6.0. It is configured to allow users to access via LDAP integration tied to an Active Directory.

      While package list and restore through the NuGet command line works, if the user tries to look at the web application (https://url.to.my.proget.server/log-in?ReturnUrl=%2F) you get a security exception:

      Security Exception
      
      Description: The application attempted to perform an operation not allowed by the security policy.  To
               grant this application the required permission please contact your system administrator or
               change the application's trust level in the configuration file. 
      
      Exception Details: System.Security.SecurityException: User Anonymous not found in directory LDAP.
      
      Stack Trace: 
      
      [SecurityException: User Anonymous not found in directory LDAP.]
         Inedo.ProGet.WebApplication.ProGetHttpModule.AuthorizeRequestAsync(HttpApplication app) +589
         Inedo.Web.InedoHttpModule.ProcessBegin(Object sender, EventArgs e, AsyncCallback cb, Object extraData) +116
         System.Web.AsyncEventExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute() +634
         System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously) +137
      

      Other things that may or may not be of interest:

      • I do not have Windows authentication enabled - only anonymous authentication. We aren't interested in pass-through auth.
      • We're using a manual install because our database is stored in an Azure SQL database and the full automated installer doesn't like that - it tells me the database doesn't exist though it clearly does.
      • The manual update process for the web app was, basically, to just replace the contents of the web app (bin, Resources, Web.config) and then ensure the connection string was right. I didn't change the IIS settings.
      • If you hit the home page as an anonymous user that works fine. It's just when you click the "Log In" link that you get the exception.

      Product: ProGet
      Version: 4.6.0

      1 Reply Last reply Reply Quote 0
      • ? This user is from outside of this forum
        Guest
        last edited by

        Thanks for the report Travis; this will be addressed in [PG-673] slated for 4.6.1, shipping ASAP.

        1 Reply Last reply Reply Quote 0
        • ? This user is from outside of this forum
          Guest
          last edited by

          Verified - the problem is resolved after upgrade to 4.6.1. Thanks!

          1 Reply Last reply Reply Quote 0

          Hello! It looks like you're interested in this conversation, but you don't have an account yet.

          Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.

          With your input, this post could be even better 💗

          Register Login
          • 1 / 1
          • First post
            Last post
          Inedo Website Home • Support Home • Code of Conduct • Forums Guide • Documentation