ldap authentication in active directory child domain
<p>in my asp net mvc project I use ldap for authentication and authorization.</p>

<p>I have a subdomain named op.sep.net,that is a child of sep.net.
all users that need to be authenticated are defined in root domain sep.net, but the groups are defined in sub domain</p>

<p>this is my connection string in web.config file:</p>

<pre><code>&lt;membership defaultProvider="AspNetActiveDirectoryMembershipProvider"&gt;
  &lt;providers&gt;
    &lt;clear /&gt;
  &lt;add name="AspNetActiveDirectoryMembershipProvider"
  connectionStringName="ADService"
  attributeMapUsername="sAMAccountName"
  connectionUsername="sep\at.rahimi"
  connectionPassword="1qaz!QAZ"
  connectionProtection="None" enablePasswordReset="false"
  enableSearchMethods="true" type="System.Web.Security.ActiveDirectoryMembershipProvider" /&gt;
  &lt;/providers&gt;
&lt;/membership&gt;
</code></pre>

<p>and the connection string part:</p>

<pre><code> &lt;connectionStrings&gt;

&lt;add name="ADService" connectionString="LDAP://OP-DC.op.sep.net/dc=op-dc,dc=op,dc=sep,dc=net" /&gt;
</code></pre>

<p></p>

<p>as I mentioned the user at.rahimi is in sep domain</p>

<p>my problem is that if I use LDAP://OP-DC.op.sep.net as server I,ll get "The user name or password is incorrect" and can not authenticate, but if I use LDAP://sep.net I can authenticate but I cant see those roles that are in sub domain by  <code>System.Web.Security.Roles.GetRolesForUser("at.rahimi")</code>
and I just can see roles in sep.net</p>

<p>I'll be so thank full if anybody can help me.</p>