Products

Solutions

Resources

Partners

Community

Blog

About

QA

Ideas Test

New Community Website

Ordinarily, you'd be at the right spot, but we've recently launched a brand new community website... For the community, by the community.

Yay... Take Me to the Community!

Welcome to the DNN Community Forums, your preferred source of online community support for all things related to DNN.
In order to participate you must be a registered DNNizen

HomeHomeUsing DNN Platf...Using DNN Platf...Administration ...Administration ...Problem with users from different portals having same usernameProblem with users from different portals having same username
Previous
 
Next
New Post
5/3/2008 1:02 PM
 

I have created two portals on my site. Two different users registered with the same username on the two portals.

I was astonished to see that when one of those users changed his password for his portal, the password for the other user with the same username on the other portal was updated automatically.

Is it a problem with my settings or with DNN core??? I mean when working with separate portals on the same host, the portals need to have their own users, who should not interfere with users of other portals!!!

 
New Post
5/3/2008 5:02 PM
 

To my knowlege, this isn't supposed to be possible. My understanding is that, by design, DNN prohibits the same username from being used on more than one portal of a single installation. In fact, I attempted to report this as a bug on Gemini (others had as well), but was told that it is a feature of DNN. I then put in a request to change this behavior, as it was creating some real-world headaches for many of our users who happen to be participating on more than one portal of ours.

So, my eyebrow went up when I read your posting. What version of DNN are you running?

Steve

 
New Post
5/3/2008 6:14 PM
 

you're both correct, but theres a subtlety about user's cross portal. When you have multiple sites (either child or parent portals) running off the same database, then once a username has been used it's not available to any other portal. However, if the user tries to register with the same username and password combination to another portal, we can see that this is the same user, so we don't add a new user record to the users table, but instead reuse their ID when associating the user with that portal i.e. you end up with 1 user record, but 1 record for each portal that user exists in. Thats why if you change the password in one it changes for the other - it's actually the same user in each case. 

Cathal


Buy the new Professional DNN7: Open Source .NET CMS Platform book Amazon US
 
New Post
5/4/2008 1:20 AM
 

Yes, I already found that while studying the architecture of DNN yesterday night...

And I logged in today to convey this to other users, but Cathal has already done this... Still, I would like to put in in my words as follows:

"DNN has a built in-assumption, that whenever there is an attempt to register with the same username in 2 or more portals of a single DNN installation, the end-user trying to do so is the same. Owing to this, the login credentials across these multiple portals are maintained uniquely. Thus, changing them at one portal automatically gets reflected in the other portal. However, the Profile data of a user is maintained per portal. So, this same user can have differing profiles across portals. This is even desirable as the profile properties for each portal are set independently by the profile admin."

My analysis tells me that this behaviour of DNN has resulted from an attempt to being integarted with Microsoft Membership API, which does not support virtualization within a single ASP.NET application (i.e. separate & independent sets of users within a single  application install).

In some way, this makes sense when the portals are separate services from a single provider (like Orkut, Gmail, Calendar etc. from Google).

However, for hosts looking to accomodate multiple clients in a single installation, this is troublesome.

And that is exactly what I am also looking for. And I have also found a way out. I have decided to create & use my own registration form for users. And I am going to make a user's e-mail id his/her username. That would only require me to create two controls, one for creating users, the other for allowing them to change their credentials. Except fot that, the concept can entirely integrate with DNN. Thus, if a user uses same e-mail id to register on different portals hosted together, that automatically means that the user is the same, satisfying the DNN assumption.

However, I wold like the DNN team to underline this assumption more explicitly in their documentation, and books like Professional DNN that are from the same team.

 
New Post
4/12/2010 10:19 PM
 

Good Lord!!!  We had no idea of this loophole.  I am sure it seemed like a good idea when it was orginally architected, but we have hundreds of users now that have "cross connected" their data.  We host 50 portals and they are all related to golf.  Not surprising at all that you would get a bunch of people choosing the same golf-related usernames.  Many of them used the same username and password.  We never thought to lock that down because we never knew that users could belong to multiple portals under this scenario.  I have no clue how we are going to clean up this mess.  Uggh.

 
Previous
 
Next
HomeHomeUsing DNN Platf...Using DNN Platf...Administration ...Administration ...Problem with users from different portals having same usernameProblem with users from different portals having same username


These Forums are dedicated to discussion of DNN Platform and Evoq Solutions.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
  2. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  3. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  4. No Flaming or Trolling.
  5. No Profanity, Racism, or Prejudice.
  6. Site Moderators have the final word on approving / removing a thread or post or comment.
  7. English language posting only, please.
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out