I discovered a problem using the ActiveDirectory authentication provider. What I noticed is that the HttpModule sets the Authentication cookie to 'undefined' in the Init. Problem is that the Init is called for every HttpApplication object in the ASP.NET pool.

In our situation we used the Media module to create a clickable link on a tab. The image of the Media module is actually an ASPX page (LinkClick.aspx) and doesn't have a portal ID. That is why the authentication can not be done the first time on the LinkClick.aspx page. But normally this is not a problem because the Default.ASP containing the LinkClick.aspx  will be executed first what will set the authentication cookie.

But... if the LinkClick is executed by a different HttpApplication object the authentication cookie is cleared and the image is not an  image but a redirect to DesktopModules/AuthenticationServices/ActiveDirectory/WindowsSignin.aspx which redirects to the start page of dotnetnuke.

I think the following code is wrong. It is very strange to set the authentication cookie to undefined. The Init can be called multiple times which resets the cookie. And at this stage you don't even know the portalid.

Public Sub Init(ByVal application As HttpApplication) Implements IHttpModule.Init
    Dim Request As HttpRequest = HttpContext.Current.Request
       'Call this method to make sure that portalsettings is stored in Context
       If Not (Request.Url.LocalPath.ToLower.EndsWith("install.aspx") OrElse Request.Url.LocalPath.ToLower.EndsWith("installwizard.aspx")) Then
           Dim _portalSettings As PortalSettings = Common.GetPortalSettings
              AuthenticationController.SetStatus(_portalSettings.PortalId, AuthenticationStatus.Undefined)
    End If
       AddHandler application.AuthenticateRequest, AddressOf Me.OnAuthenticateRequest
End Sub

I removed the line  AuthenticationController.SetStatus(_portalSettings.PortalId, AuthenticationStatus.Undefined) and now everything is working allright.

Is this a bug? of am I missing something?

Best regards,

Evert Dieperink

But I still don't understand. Are you saying there is a bug in the AD Provider shipped with DNN 4.7? (which I am using)

And if I download the source on you site I get the install.

Can you also tell me why it is a beta version? Can I use it in a production environment?

Thanks in advance,

Evert Dieperink

I will try it ,thank you.

If you want to reproduce, I can not e-mail my project. Sorry for that. But if you have an ASPX which uses other ASPXes (ASPX streaming images), it is possible that an image ASPX is handled by a different ApplicationObject so the Init of the HttpModule is called, and the request is not authenticated. Bacuse it is another ASPX than the default.aspx and there is not portal id, authentication will not work!!!

I also had this problem using the RadComboBox from Telerik which using an External callback page to populate it's contents.

I hope you have enough information. But if you need other information, you have to ask me.

Best regards,

Evert Dieperink