Home All Groups Group Topic Archive Search About

Local Authenication when AD Authenication Fails

Author
29 May 2009 1:51 AM
Brian
Hello,
I've created a login form that authenicates with the active directory.  What
I am trying to figure out is... when the AD is not there or the server is
not operational,  I would like to authenicate with local creditials......
Can anyone help me with?
Thanks,
    Brian.

Author
29 May 2009 3:36 PM
Tom Dacon
"Brian" <bsgallatin@community.nospam> wrote in message
news:%23B5S0$$3JHA.4960@TK2MSFTNGP04.phx.gbl...
> Hello,
> I've created a login form that authenicates with the active directory.
> What I am trying to figure out is... when the AD is not there or the
> server is not operational,  I would like to authenicate with local
> creditials......
> Can anyone help me with?
> Thanks,
>    Brian.
>

Brian, what we do at the company I'm working for is to maintain user and
role tables in the databases, where the login ID matches whatever the user
uses for AD credentials. The code that handles authentication first tries to
authenticate through AD. If it's successful, it then synchronizes the user's
password in the database with the AD password, on the principle that the AD
password is on an expiration schedule. If AD is unavailable, it
authenticates against the database's user table. In both cases, the database
supplies the role definitions for the user. This way, the user can continue
to use the AD password even when AD is unavailable, so the user experience
is the same.

HTH,
Tom Dacon
Dacon Software Consulting