ProGet Documentation

LDAP and Active Directory

In addition to its own built-in user module, ProGet’s Active Directory Domain integration allows permissions to be granted to users and groups defined in a third-party LDAP directory, or Active Directory domain forest. For an active directory domain, the ProGet web server (whether the Integrated Web Server or IIS) may additionally be configured to support Windows Integrated Authentication, removing the need to enter a username and password to log in.

Support for this type of authentication requires the InedoCore extension to be installed.

Note that this was written for ProGet 4.8; in previous versions, there was a slightly different LDAP and Active Directory integration.

Shared Documentation Note - instead of copy/pasting the documentation (or creating a whole new set of documentation for LDAP and Active Directory), we've kept the detail pages in the Various Documentation, see the pages below:

Switching to LDAP/AD

The LDAP/AD integration can be enabled from the Administration page via the Change User Directory link under the Security & Authentication heading. Selecting the Active Directory (New) option will present a page that requires entering credentials for a ProGet administrator.

TROUBLESHOOTING: Active Directory (New) is not in the list.

In new installations, you will need to configure privileges first by clicking the assign privileges link (or from the Administration page, clicking Manage Users & Tasks, selecting the Tasks tab, and ensuring the dropdown user directory is set to Active Directory (New)).

On the assign privileges page, select Add Permission, search for a username that will become a ProGet administrator, leave the feed scope to any, select the Administer task, and click Save Privilege. Return to the Administration page, select Change User Directory (LDAP) again, and now when you select Active Directory (New), enter the credentials of the account previously granted the Administer task. The following username formats are supported:

  • username@domain (recommended)
  • NETBIOSname\username
  • username (if the ProGet server is on a domain and not a forest)

Once the switch button is clicked, the web server will restart causing a brief outage in ProGet. Refreshing the page will eventually redirect to the login page. Here, enter the credentials of the ProGet administrator configured in the previous step, and you will be logged in as an administrator.

TROUBLESHOOTING: Log in fails, can’t remember the password, etc.

More on this topic: