广告组的空间用于角色授权 [英] AD Groups with spaces used for roles authorization

问题描述

我试图让角色的授权合作与广告组。但似乎因为它包含空格，将无法正常工作。

I am trying to get roles Authorization working with an AD Group. However it appears that since it contains spaces it won't work.

我已经试过AD组没有空格，他们工作得很好。

I have tried AD groups without spaces and they work fine.

<authorization>
 <allow roles=".\IS Software Delivery - Staff" />
 <deny users="*" />
</authorization>

任何想法？

推荐答案

对我来说，解决办法是重新启动我在Active Directory安装后开发的PC做。 （其实几个重新启动，而我测试。）

The solution for me was a reboot of my development PC after the Active Directory setup was done. (Actually several reboots while I tested.)

我相信同样的结论，你到达的命名空间是无效的，但我推了一个答案，我发现这是不正确的。

I was sure of the same conclusion you reached "space in name is not valid", BUT as I pushed for an answer, I found that was not true.

看来这种方式，因为一旦我怀疑​​是空间是问题，其他各组与我测试过没有空格。但他们也已经确定个月前（和近期没有变化）。

It appeared that way because once I suspected "space" was the issue, the other groups I tested with did not have spaces. But they also had been defined months ago (and had no recent changes).

我的最好的理解是，本地IIS（如preSS？）作为通过Visual Studio中运行缓存广告组视图时，第一次运行时（开机后不久，也许在第一次测试）。所以，当我做了一些群体在Active Directory中，然后就去VS防爆preSS测试，我有很多无奈。注：我从未有过的问题，当我发布到服务器IIS

My best understanding is that local IIS (express?) as run through Visual Studio caches its view of your AD groups when it first runs (shortly after boot, maybe on first test). So, when I made some groups in Active Directory and then went to VS Express to test, I had a lot of frustration. Note: I never had the issue when I published to a server IIS.

另一个因素（而不是在我的情况下），可能导致延迟（沮丧）是用户和组的AD知识通常由一组服务器共享的，但是人们经常会$ P $垫在多个物理站点。这可能导致一个短暂的延迟（10至30分钟）之前，信息是由每个服务器已知

Another factor (not in my case) that could cause delay (frustration) is that the AD knowledge of Users and Group is normally shared by a group of servers, often spread over multiple physical sites. This can lead to a brief delay (10 to 30 minutes), before the info is known by every server.

这篇关于广告组的空间用于角色授权的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！