Installation and deployment Questions on installation, system configuration and deployment to the live server.
Version 5.x > Installation and deployment > Setting up users for Windows Authentication View modes: 
User avatar
Member
Member
gstaylor-sfopera - 4/21/2010 4:11:40 PM
   
Setting up users for Windows Authentication
We'd like to implement Windows Authentication and according to the docs the first step is creating a user name in the form of "domain-name\username" so that it matches what would be found in AD. However, the cms will not let me create a user name in that form. It gives an error message stating that only certain special characters are allowed and from the list it would seem that "\" is not one of them. So, in effect, we cannot create a user name in the proper form in order to implement Windows Authentication.

Is there some configuration setting we left out to allow us to create the proper user names?

User avatar
Member
Member
gstaylor-sfopera - 4/21/2010 5:19:30 PM
   
RE:Setting up users for Windows Authentication
After trial and error, I realized that the documentation is INCORRECT. You cannot create a user name with a "\" but must use a "-" so the form of the user name will be "DOMAINNAME-username".

User avatar
Kentico Support
Kentico Support
kentico_jurajo - 4/22/2010 3:44:17 AM
   
RE:Setting up users for Windows Authentication
Hi,

You are right, by default it is set that the slash is not allowed. But you can override this behavior by adding this key into the web.config file:

<add key="CMSEnsureSafeUserNames" value="false" />

But then the user name wildcards in URLs will not work.

But in the developer's guide it is written correctly - http://devnet.kentico.com/docs/devguide/configuring_windows_authentication.htm. What version of dev. guide are you using?

Best regards,
Juraj Ondrus

User avatar
Member
Member
gstaylor-sfopera - 4/22/2010 6:06:40 PM
   
RE:Setting up users for Windows Authentication
Touche! I was looking at the 4.0 docs, which I have now updated to the version 5.0 docs.

Thank you!