Products

Solutions

Resources

Partners

Community

Blog

About

QA

Ideas Test

New Community Website

Ordinarily, you'd be at the right spot, but we've recently launched a brand new community website... For the community, by the community.

Yay... Take Me to the Community!

Welcome to the DNN Community Forums, your preferred source of online community support for all things related to DNN.
In order to participate you must be a registered DNNizen

HomeHomeOur CommunityOur CommunityGeneral Discuss...General Discuss...Does DNN have the ability to support restriction of user logins to one single active session?Does DNN have the ability to support restriction of user logins to one single active session?
Previous
 
Next
New Post
9/6/2011 11:51 AM
 
If a user logs in into our DNN portal ( 5.6.3 Professional), he gets his own open session. So far, so good. At the same time, from another machine, this user (or somebody else) can login into the same session ( using the same credentials  - tried it, it works). 

Is there a way to prevent that?  Maybe by means of iis configuration, if not possible in DNN itself? What we need is to have only one login available per user/per session (in other words: if a user with the same credentials tries to login from another machine the first session from this user should be killed automatically).
 
New Post
9/7/2011 9:46 AM
 
With a custom authentication provider -- created with a small modification of the standard one -- you could prevent the current login if the same user has been logged on recently from a different address.




Joe Craig
Patapsco Research Group, Ellicott City, MD
DotNetNuke Development and Services (http://patapscorg.com)
 
New Post
9/7/2011 10:38 AM
 
The basic premise is not correct.

You can't login to the same session. 

You can login more than once with the same credentials, but the two logins do not share session information.

Why do you want to prevent this?  What are you trying to stop?

Best wishes,
- Richard
Agile Development Consultant, Practitioner, and Trainer
www.dynamisys.co.uk
 
New Post
9/8/2011 4:29 AM
 
Sorry for being not entire correct in describing the problem. So it seems it's not the same session - but this doesn't matter so far.

The question is: how can I prevent someone logging in from another machine with the same credentials there is a user already logged in (and hence a session active). The preferred solution would be to kill the session of the user already logged in when a second login with the same credentials comes ("last login wins" - so it's possible to leave one place without logout and log in from another place).
 
New Post
9/8/2011 2:03 PM
 
I'm still not clear why this you want to do this.  The concept of 'wins' does have meaning for me.

If I login at machine A I can do some work.  If I then move to machine B I can login and do more work.  If I go back to machine A I can carry on with still more work.  The state of the system is as I last left it from machine B.

What does 'wins' mean in this context?

Best wishes,
- Richard
Agile Development Consultant, Practitioner, and Trainer
www.dynamisys.co.uk
 
Previous
 
Next
HomeHomeOur CommunityOur CommunityGeneral Discuss...General Discuss...Does DNN have the ability to support restriction of user logins to one single active session?Does DNN have the ability to support restriction of user logins to one single active session?


These Forums are dedicated to discussion of DNN Platform and Evoq Solutions.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
  2. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  3. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  4. No Flaming or Trolling.
  5. No Profanity, Racism, or Prejudice.
  6. Site Moderators have the final word on approving / removing a thread or post or comment.
  7. English language posting only, please.
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out