Cross domain active directory authentication without adding trust

Question

0.00/5 (No votes)

See more:

I have set up multiple active directory domains in multiple machines and all are connected in the same network.
Now, I host my application in one of the server. Now I want to allow a login for every AD users from multiple domains which are in the network without adding Trust between domains.
I am able to achieve this by adding Trust between domains but I don't want to add trust between it.
Does anyone have an idea how can I get this?

What I have tried:

This code link is working for me when adding Trust between domains. Directory Authentication for Cross Domain Users in .NET[^]

Posted 18-Apr-19 1:51am

jaideepsinh

Updated 18-Apr-19 5:58am

v3

Add a Solution

1 solution

Add a Solution

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

Dave Kreskowiak · Answer 1 · 2019-04-18T05:59:00

Solution 1

If you think that you, as a non-trusted entity, can just ask any AD tree "Hey! Is this password good for this account?", you'd be sorely mistaken about how the authentication process works and the security of communicating with it.

If the target AD doesn't trust you, or more specifically, the account the request came from, be it a user or a machine, it's not going to let you ask that question.

There has to be a trust relationship, be it a two-way or a one-way trust.

Posted 18-Apr-19 5:59am

Dave Kreskowiak

Comments

jaideepsinh 19-Apr-19 1:00am

But my all servers are place in the same Network. Even though is it not possible to do this either by code or any other way?

Dave Kreskowiak 19-Apr-19 9:00am

It does not matter if they are on the same network or not. Those domains do not trust each other.

They could be directly connected to each other and it still wouldn't make any difference.

There is no other way.

Cross domain active directory authentication without adding trust

1 solution

Solution 1

Add your solution here

Preview 0

Cross domain active directory authentication without adding trust

1 solution

Solution 1

Add your solution here

Preview 0

Existing Members

...or Join us