IsInRole from ASP.NET failing

Hi All,

I'm attempting to restrict access to my ASP.NET application using role
based security. I'm using .NET v1.1

In code I check IsInRole for a local machine group, and it returns
false. The name of the group is properly qualified with machine name
in caps, and a forward slash (actually 2 'cause I'm using c# w/o @) and
then the name of the group properly cased, yet it fails to find it.

I found code on the internet that lets you see what groups IsInRole is
checking against, and I do not see this group in there. I have 99
entries. I've tried a variety of tests like adding new groups that the
user is a member of, removing group membership for groups the user is a
member of, and nothing works. I still have 99 entries, and the groups
that I remove the user from being a member of still appear in the list
of groups the user is allegedly a member of. I've also tried rebooting
the server, resetting IIS, clearing my temporary internet files cache,
and nothing seems to make it work. I did check to see that IsInRole
would be satisfied by providing a group that shows up in the group
membership enumeration, and that does work.

Anyone run into anything like this before or have any suggestions for
me?

Your help is appreciated!

.

Relevant Pages

  • Re: How to determine if the logged on user is in a group
    ... I saw that isinrole works with domains OK but I just found that when I ran the whoami.exe /groups the custom groups that Bob belongs to on the DC do not appear in his membership list although he is a member of these groups. ... I tried using my.user.isinrolebut I'm told that that only looks at the local user groups, ...
    (microsoft.public.dotnet.security)
  • RE: isInRole doesnt work for one user, but works for everyone else
    ... added them as a member. ... The isInRole works fine for that user when comparing ... > IPrincipal object to check for role membership. ... > correctly identifying this user with the correct domain/username, ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • RE: How to determine if an user belongs to a specific group?
    ... I am sorry that the IsInRole does not match my need. ... not determine if i am a member of a distribution group, ... could not be used to set security permission as it's not a security principle. ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: User.IsInRole
    ... Please note that other methods using "IsInRole", like PrincipalPermission.Demandwill suffer from this inconsistency. ... unless you're a member of 23 ... > and large sets of roles, and the large set algorithm is doing ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Problem checking users role
    ... all the local groups in it, and a lot of entries are NOTHING. ... the isinrole function is taking a long time and it is always ... IsInRole is a member of the IPrincipal interface which ... > implemented by the WindowsPrincipal class, not the WindowsIdentity class. ...
    (microsoft.public.dotnet.security)