Hi all,

we tested the .slnx support of pgutil and noticed that pgutil can only detect projects that are a direct child of the root element.
If the .slnx structure is more complex, projects are not found.

E.g:
Both projects are detected by pgutil:

No projects are being found:

Since it was a quick fix, we created a pull request for it:
https://github.com/Inedo/pgutil/pull/25

Please have a look at it and let us know if you can confirm the behavior.

Thanks
Caterina

Hi @atripp

I think packages has to be iterated instead. I haven't seen dependencies beneath packages.
Further, the "empty" Key has to be ignored as it stands for the root project:

Maybe a little bit parsing would be necessary.
In lockfileVersion 2 a dependency was listed like this:

In lockfileVersion 3 it looks like this:

If desired, we can also upload package-lock.json files for testing via MyInedo.

Hi @dean-houston,

but the output of /debug/integrated-auth is the same for our ProGet 2025 installation where it is working perfectly fine. Not sure how meaningful the output is.

There is no reverse proxy or anything in front of ProGet.
We used IIS to host older versions of ProGet, but with ProGet 2025 we switched to Integrated Web Server like it is written in your documentation. We deleted all IIS pages.

Everything has been installed via InedoHub and we also use the InedoHub for upgrading/downgrading. WIA has been activated

And just as I am writing this reply I was able to fix the problem
I wanted to double check our settings and noticed that the directory we have set up (many years ago) was V3. For testing I added a new V5 directory and now WIA is working again.
Was updating the user directory part of an upgrade guide for ProGet? I can not remember reading it anywhere.

Thanks
Caterina

Hi all,

thanks for your responses.
This is the output of https://«PROGET_HOST»/debug/integrated-auth:

But the same output is generated by ProGet 2025, where WIA is working.

Also searching for the user using «NETBIOS_DOMAIN_NAME»\«USER_NAME» was successful.

Rolling back to ProGet 2025 resolved the issue again.

Since most of our used products are working with WIA and no one else is recommending moving away from it we want to keep working with it if we have the possibility. We already had that discussion in another post ;D

What does "setting it up from scratch" include?
Just disabling and enabling it again was not enough. We have a User directory/domain set up. Will it help to disable the existing one and create a new one?

Thanks
Caterina

Hi,

we tried upgrading to ProGet 2026 (from ProGet 2025.30). We are using Windows Integrated Authentication to be able to login with our AD users.
Unfortunately, after upgrading to ProGet 2026 the windows authentication is no longer working. Everyone is recieving a error 500. (I tried all ProGet 2026 versions, none is working.)
The status code 500 is returned immediately without trying to authenticate the user (no negotiate handshake).

We upgraded using the Inedo Hub and we did not make changes to the settings.

If we test the user directories for our domain under Adminstration -> Security the user is being found.

In the Event Viewer we have this exception:

Inedo.ProGet.Web.Security.UserNotFoundException: Exception of type 'Inedo.ProGet.Web.Security.UserNotFoundException' was thrown.
   at Inedo.ProGet.WebApplication.ProGetHttpModule.AuthorizeRequestAsync(AhHttpApplication app)
   at Inedo.Web.InedoHttpModule.Inedo.Web.IAhWebModule.AuthorizeRequestAsync(AhHttpApplication app)
   at Inedo.Web.AhWebMiddleware.InvokeAsync(HttpContext context)
   at Inedo.Web.AhWebMiddleware.InvokeAsync(HttpContext context)
   at Inedo.Web.AhWebMiddleware.InvokeAsync(HttpContext context)
   at Inedo.Web.AhWebHost.<>c.<<Configure>b__24_0>d.MoveNext()

Maybe you can help us with that.

Thanks
Caterina

Hi @stevedennis ,

using ?bypassIntegrated=false lets me download the package from the UI.
Is this something you can fix?
For now I can share this information with my colleagues.

Offtopic (since we are already talking):
We recieved your Inedo snackbox this week and we love it

Thanks,
Caterina

Hi @stevedennis ,

the thing is that microsoft states that windows authentication is great for internal applications integrating the Active Directory: https://learn.microsoft.com/en-us/aspnet/core/security/authentication/windowsauth?view=aspnetcore-10.0&tabs=visual-studio
I can not find a documentation telling me to switch to token-based authentication.
It is also easier to maintain, because the AD is already managed. To manage tokens for each person that is allowed to access ProGet would take up extra effort.

Either way, we moved away from hostname-binding and then we are able to use "npm install" for example.
But a new problem occured:
If I go to the ProGet UI, into one of our npm feeds and try to download a npm package using the download button, i get an Unauthorized error:

So I can see the packages, but I can not download them, eventhough the permission is "View and Download packages"

Can you help me here as well?

Thanks,
Caterina

Hi @stevedennis ,

thank you for your reply. I still have some questions.

When talking about WIA are you only talking about NTLM?
What we do is using Kerberos to make sure specific AD-groups have access to our packages. Not everyone is allowed to view/download packages. Going with no authentication is not an option for us.
I can not find a documentation that states that Kerberos is discontinued. Maybe you can provide me with sources? Or maybe we are talking about different things when talking about WIA

Right now our process is that a user is authenticated if he is in a specific AD group and wants to access nuget packages, and he needs an api key to access npm packages.

If I install ProGet 2025 with integrated web server and activate WIA in the settings, I am no longer able to make e.g. "npm i" because the authentication fails:

Which makes sense, because npm is not supporting WIA, but I was hoping ProGet manages this under the hood when switching to integrated web server.

Our ProGet instance is bound to a hostname and a port.

I already tried to explicitly disable WIA for our npm feeds, but it does not seem to be working.

Is there another setting I am missing?

Thanks,
Caterina

Hi all,

we are trying to update from ProGet 2024 to ProGet 2025.
As I understood the documentation we have to move from IIS to integrated web server.
Right now we are running ProGet on two IIS sites. One where windows authentication is enabled and one where it is disabled (necessary for npm).
Is this still possible when moving to Integrated Web Server?
We need to keep the windows authentication but I am not sure if our npm tasks will continue working.
Maybe you can clarify that for me.

Thanks,
Caterina

Hi all,

we tested the .slnx support of pgutil and noticed that pgutil can only detect projects that are a direct child of the root element.
If the .slnx structure is more complex, projects are not found.

E.g:
Both projects are detected by pgutil:

No projects are being found:

Since it was a quick fix, we created a pull request for it:
https://github.com/Inedo/pgutil/pull/25

Please have a look at it and let us know if you can confirm the behavior.

Thanks
Caterina

Hi @stevedennis,

thank you.
It looks like you guys created a seperate repo for ConsoleMan:
https://github.com/Inedo/ConsoleMan

I guess this one creates the NuGetPackage?

Thanks,
Caterina

Hi all,

I got the latest source code of pgutil and wanted to compile it.
Unfortunately, I get the error that the package 'ConsoleMan' can not be found.
I know that there was the project 'ConsoleMan' in previous versions but it seems like it has been removed.

Is there something special I have to do to build the solution? Maybe I am missing something.

Thanks
Caterina