|Number of votes:||5|
The basics is already handled in the EPiServer SDK about membershipprovider. But what do you do when that doesn’t work? Here are some ideas and tools how to get that integration up and running when the night is getting darker and the coffee is running out…
…and you added the connectionstring with IP or server name to connectionStrings.config like this:
…but it doesn’t work? Example of errors are:
”Unable to establish secure connection with the server” or the more evil one
”The specified domain or server could not be contacted”.
Why? Ok, let’s get this article going.
My first simple step would be to ping that adress or IP. Maybe they gave you an internal server name instead of a reachable ip or reachable url?
If ping fails, get back to the customer and let them hand you the correct ip or url.
Ok, so you get the correct ip adress of the server that you can ping. But it’s still not working? Now is the time to start downloading some additional tools. I would recommend starting with Softerra’s LDAP browser. Google it and download it. Maybe you have made some mistake on your LDAP connectionstring or the user credentials are wrong?
Booting up Softerra will give you a similar view to this. Fill in IP to test against…
and user details…
If you can browse in the AD with this tool, you now know that the both the IP and the user detail are correct.
You also know that the LDAP port 389 that this tool (and the ActiveDirectoryMembershipProvider) uses is open if you are able to browse in the AD at this time. It’s now time to check again if the website is able to login correctly. If not, maybe you are getting this error?
”The specified domain or server could not be contacted”
Now it’s time to download your second tool, nmap with it’s gui part Zenmap. Google it, download it. Starting it will present you with a view similar to this
Insert your server adress at the top and hit scan. This will display a list of open ports that you can connect to on that server. The important ones that needs to be open for ActiveDirectoryMembershipProvider I’ve marked in yellow. They are 389 and 445 and yes, you need both of them.
If you don’t see port 445 in this list, this will likely generate the error
”The specified domain or server could not be contacted” when trying to login to your website.
Eureka! Contact your firewall administrators on your side and customer side and tell them to open this port, and lo, it works!
There are a couple of walls, some made of fire, that you can run into when setting up this type of integration. Hopefully the tools and information above should save a few hours for someone. Nmap is, by the way, also a most useful tool to locate similar integration problems when you have firewalls blocking your happiness.
The short checklist to success: