We are currently using Snitz in a Windows 2000, Active Directory environment. Users are authenticated through Active Directory, and then information is passed to the forum to identify them based on that authentication.
Our dilemma:
Developers would like to add their test server into the production environment, allowing them direct access to Active Directory (which we can control through permissions), so that they can essentially mirror the current live site that is in use.
The concern as system administrators is that we not open ourselves up to security breaches that would be exposed by adding the test server to the production environment.
Our thoughts:
We’ve thought through several scenarios to make this work. Here are the different scenarios we’ve brainstormed:
1) Add our live production server to the same segment as the test server and create a child domain.
a. Problem – According to our research, Snitz does not work when you try to access Active Directory from a child domain.
2) Move the test server to the production segment.
a. Problem – Security issues. IT is responsible for managing thirty-one (31) production servers in-house. Access to the servers and segment is tighly restricted.
3) Export Active Directory components to SQL and authenticate from the database rather than Active Directory.
a. Problem – Developers have Snitz set up to use NT authentication and are reluctant to make changes. The other problem comes with trying to export necessary values from Active Directory into SQL.
4) Move the live production server to the same segment as the test server and create a child domain – Developers rewrite the code in a way that will still authenticate to Active Directory -or- re-create site using a package other than Snitz.
5) Move the live production server to the same segment as the test server and create a child domain – Disable NT authentication.
Any thoughts about these solutions, or any other solutions that you may have tried?
I have just taken over support of our Intranet forum and it is currently not working. The forum uses NT authentication and has been broken since my company introduced Active Directory.
The authentication (and therefore the whole forum) fails at the point where it tries to get user info back from the domain:
Set strNTUserInfo = GetObject("WinNT://"+strNTUser)
Does anyone know how to replace this line in order to be compatible with AD?
Topic Locked
Posted - 19 November 2004 : 17:14:17
