David Crawford's WebLog : AzMan

Custom Authentication with AzMan - (A note on SID datatype)

dc995 — Wed, 23 Aug 2006 20:42:00 GMT

There are multiple ways to implement custom authentication with AzMan but if you are using an approach with custom SIDs (security identifiers), you should be aware of the data type for a SID.

Each sub authority is of type ULONG (32 bit) numeric which means numbers less than 4294967295 and no hex characters. So the format recommended for a Custom SID is S-1-9-1-1 through S-1-9-4294967295-4294967295. There is no validation based on sub authority either e.g. S-1-5 isn’t evaluated in AzMan any different from any other but you run the risk of collision with well known SIDs or prod AD SIDs . ( Thanks Sudheer! )

Regards,

David

Developing Applications Using Windows Authorization Manager White Paper Released!!!

dc995 — Thu, 17 Aug 2006 04:44:00 GMT

Check it out! http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnnetserv/html/AzManApps.asp...(read more)

Source Code for the Authorization Manager (AzMan) ASP.NET Role Provider Released

dc995 — Wed, 05 Jul 2006 20:44:00 GMT

Check out the Source Code for the Authorization Manager (AzMan) ASP.NET Role Provider

http://msdn.microsoft.com/asp.net/downloads/providers/

Under Deep Dive...

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnaspp/html/asp2prvdr03.asp

Differences Between the Published Source Code and the .NET Framework's AuthorizationStoreRoleProvider

The source code for the AuthorizationStoreRoleProvider is being released unchanged. This means you will not be able to compile it in its current state, because it contains calls to internal helper methods. However, you can reference the source code to see exactly how the provider maps role manager calls to AzMan.

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnaspp/html/asp2prvdr01.asp?frame=true

Role Providers

Summary: Describes the design and operation of the various built-in providers that Microsoft ASP.NET 2.0 uses for state management services. (6 printed pages)

Click here to download the entire series in PDF format Microsoft ASP.NET Providers.pdf.

Microsoft ASP.NET 2.0 Providers: Introduction
Membership Providers
Role Providers
Site Map Providers
Session State Providers
Profile Providers
Web Event Providers
Web Parts Personalization Providers

Click here to download ProviderToolkitSamples.msi.

Find the file AuthStoreRoleProvider.cs.txt

Regards,

David

How to use ADAM Principals in Authorization Manager (AzMan) for Fine Grain Authorization

dc995 — Sat, 06 May 2006 18:39:00 GMT

Check out this really cool post from the AzMan Team blog! http://blogs.msdn.com/azman/archive/2006/05/06/591230.aspx The ADAM and AzMan teams got together to show how to use ADAM principals with AzMan. Sudheer, Authorization Manager Team, provides a description...(read more)

ASP.NET 2.0 Membership Provider with Active Directory Application Mode - article

dc995 — Wed, 05 Apr 2006 05:26:00 GMT

I did some rambling on ASP.NET 2.0 Membership Provider with Active Directory Application Mode on the blog here... http://blogs.msdn.com/dc995/articles/568597.aspx so let me know what you think :)

Regards,
David

AzMan Questions

dc995 — Wed, 22 Jun 2005 03:38:00 GMT

I am putting this place holder out for Windows 2003 Authorization Manager ( AzMan) questions.

If you have them, please ask them.

The AzMan (pronounced "A" "Z" "Man" ) update is included in the following:
Windows 2003 SP1 Admin Pak[^]

Windows 2000 Authorization Manager Runtime [^]

You will need to GAC the PIA. You should use the new interfaces for performance and all the benefits of the new interfaces such as the ability to create an emtpty client context and set the LDAPQueryDN supporting dynamic query groups in ADAM. This update to azman facilitates ADAM and ADFS integration environments. AzMan acts as a claims transformation engine when used in conjunction with ADFS. In each case, it is possible to build an empty client context and load sids (typically in the case of an ADAM authentication environment) or load roles and groups based on ADFS group claim assertions.

[Update: There was a change in packaging. The PIA is not included in the Win2k3 admin pack for WinXP. It is possible to create an interop from the azroles.dll or use the PIA from Win2k3 under %windir%\Microsoft.Net\Authman\(version) ]