Products

Solutions

Resources

Partners

Community

Blog

About

QA

Ideas Test

New Community Website

Ordinarily, you'd be at the right spot, but we've recently launched a brand new community website... For the community, by the community.

Yay... Take Me to the Community!

Welcome to the DNN Community Forums, your preferred source of online community support for all things related to DNN.
In order to participate you must be a registered DNNizen

HomeHomeDNN Open Source...DNN Open Source...Provider and Extension ForumsProvider and Extension ForumsAuthenticationAuthenticationLooking for DanBallLooking for DanBall
Previous
 
Next
New Post
10/11/2007 5:20 PM
 

mikeh wrote

With that line uncommented the basically redirects the site to hit WindowsSignin.aspx automatically. When it's commented out and you visit the WindowsSignin.aspx manually you go through the same process. If anyone external hits WindowsSignin.aspx they're going to get the ugly IIS Windows Login prompt.

So...I uncommented the line and my internal domain users are now automatically logging in.  To avoid the WindowsSignin.aspx prompt from outside the domain, I went back into IIS > My Website > Desktop Modules > Authetication Services > Active Directory >WindowsSignin.aspx and clicked properties > file security > Edited Authentication & Access control and re-checked allow annonymous access along with keeping the Integrate Windows Authentication checked.  Is this correct way to do this if I want to accomplish what you accomplished?

mikeh wrote

In 4.6.0 and up that should show up whether the line is commented out or not if you've enabled Windows Authentication under Host->Authentication. It's part of the separation of the provider from the core code. If you had LiveID and OpenID enabled you'd get options for those as well. The intention would be that if they're a domain users wanting to login they'd click on Windows Signin and enter their credentials. If they're a DNN user they'd click on Standard (default) to enter their credentials. I've contacted Charles about adding an enhancement to the provicer wrapper so that an admin could chose a default but I don't know when it'll be added to the core. This is where I didn't have to do any special planning when I roled out DNN 4.6.X as all of my users are going to be domain users. I just made my user account a superuser and disabled the standard login. That's why you don't see the choice on my site.

Ok...I'll need both I guess since I will have parents who do not have AD accounts but will need DNN accounts for private content.  I better get to work on writing my login instructions for the login page...more like a dissertation:-)

 

 
New Post
10/11/2007 5:35 PM
 

Actually that setup shouldn't work. If the line in the web.config is uncommented and in IIS you set the page to accept Anonymous logins you should get the WindowsSignin.aspx page displaying with an message that you need to set WindowsSignin.aspx to not accept anonymous logins (the full text is in WindowsSignin.aspx. What you need to do is like I mentioned (I think) in my first post.

  1. Comment out the line in your web.config
  2. Set the permissions in IIS for WindowsSignin.aspx to not accept anonymous users.
  3. Put a link on your site (I did it in the HTML/Text module) that points to http://yoursite/desktopmodules/AuthenticationServices/AcitveDirectory/WindowsSignin.aspx.

As for your dissertation I think if you edit the Login.ascx under admin/Authentication and just put something like "If you are a student or staff member click on Windows Login. If you're a parent/guardian click on Standard."

 
New Post
10/12/2007 5:34 AM
 

You're right Mike, that didn't work and I got the error as you described.  Must of had a cached page or something the first time. It's working beautifully and I really appreciate all of your help.

Thanks,

Paul

 
New Post
10/15/2007 11:59 AM
 

Gee, I don't check the forums for a couple of days and people start talking about me!  *grin*

Anyways, it appears most of your questions have already been answered, is there more information you'd like from me?

 

 
New Post
10/15/2007 3:26 PM
 

Hi Dan,

Mike is a great guy and jumped in to help me over some intial hurdles.  It's embarrasing to look back on some of my questions after I got my head around the provider and set it up. This things come a long way and is relatively easy to set up.  It's working great.  I'm probably like a lot of others right now, hoping that someone finds a way to have internal users auto log in and external users not get the WindowsSignin.aspx prompt.  Mike gave me a work around for that for now.

Are you setting up/administering sites for a college or a K-12 setting?  Care to share a link so that I can check out your handy work...maybe get some more ideas for my own site?

Anyhow, good to have others on the forums running a DNN install in a similar environment.

Paul

 
Previous
 
Next
HomeHomeDNN Open Source...DNN Open Source...Provider and Extension ForumsProvider and Extension ForumsAuthenticationAuthenticationLooking for DanBallLooking for DanBall


These Forums are dedicated to discussion of DNN Platform and Evoq Solutions.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
  2. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  3. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  4. No Flaming or Trolling.
  5. No Profanity, Racism, or Prejudice.
  6. Site Moderators have the final word on approving / removing a thread or post or comment.
  7. English language posting only, please.
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out