Products

Solutions

Resources

Partners

Community

Blog

About

QA

Ideas Test

New Community Website

Ordinarily, you'd be at the right spot, but we've recently launched a brand new community website... For the community, by the community.

Yay... Take Me to the Community!

Welcome to the DNN Community Forums, your preferred source of online community support for all things related to DNN.
In order to participate you must be a registered DNNizen

HomeHomeDNN Open Source...DNN Open Source...Provider and Extension ForumsProvider and Extension ForumsAuthenticationAuthenticationAuto-login bug when using MetapostAuto-login bug when using Metapost
Previous
 
Next
New Post
6/19/2009 11:26 AM
 

This appears to be a bug that we've been able to duplicate in multiple environments, and it's a bug that specifically impacts that ability to use Windows Live Writer to connect various modules via Metapost.  The creators of Metapost have been thoroughly engaged in tracking down the root cause of this to the AD Authentication Provider.  Here is the setup... DNN 4.8.4, AD Provider 1.0.5, latest build of metapost.  DNN portal is used as an intranet, so auto-login is being used and is primarily working correctly (aside from the bug, which I'll get to).  Using auto-login, all AD groups are properly syncronized, and users with "edit" permissions can go in and edit any/all pages/modules that they're authorized for.  The "bug" shows up when users try to connect Windows Live Writer (WLW) to some of these modules via Metapost (from IT Crossing).  There's the scenario:

1.       Log into DNN as Admin and DELETE the test user (so that he is deleted from the DNN database).
2.       Test User opens their browser, and our DNN is set up to AUTO login using AD credentials.  In other words, the test user never types in his/her credentials, even when accessing the portal for the first time.  This process adds the user to the DNN database and automatically syncs the test users role membership against their AD memberships.
3.       Test User can now access/edit all parts of DNN as expected, but can NOT connect to ANY module via Live Writer.  It will always give a Server error 0 (cannot authenticate user).
4.       Test user now hits the “Logout” button on the DNN portal, which takes them back to the DNN login screen.  They click “Windows Login”, then enter their username as DOMAIN\testuser, along w/ their password.
5.       Live Writer is now able to connect to all modules.
 
At this point, it seems logical that SOMETHING happens differently when a user is auto logged in versus manually logging in.  However, we’ve gone into SQL server and grabbed a snapshot of the database when a NEW user auto-logs in for the first time (i.e. Live Writer won’t connect).  We then “fix” this user’s profile by logging out and manually logging in.  After doing this, we grabbed another snapshot of the SQL database and did a file compare.  Aside from the “last login” date, the two snapshots are identical. 
 
The FINAL scenario that we’ve tested is as follows:
1.       We logged into DNN as Admin and deleted the test user.
2.       Still logged in as Admin, we use the “Add User” function of DNN to add the user, as well as manually place that user in the proper DNN groups.  (Essentially, this process manually creates a profile that is normally created via Active Directory). 
3.       Live Writer CAN connect at this point. 
 
So in a nutshell, the two scenarios that allow WLW to connect are if the user manually logs into the portal, or if an Admin manually creates their account.  WLW will fail to connect if their DNN account is created through Auto login.  The creator of Metapost can create this same behavior on their environment as well, and has narrowed it down to the AD Authentication Module... just uncertain WHY the auto-login is different from the manual login. 
 
I hope someone out there has some suggestions.  I've tried to give enough detail to describe the problem, but hope I haven't been too detailed.  If this problem should be submitted via a more "formal" process, please let me know and I'll do so.  Thank you.
 
New Post
6/19/2009 1:45 PM
 

Thanks for the very detailed post Jason. Can you log this in the Public section of Gemini and reference this thread.

 
New Post
6/19/2009 4:59 PM
 

Thanks, Mike.  I can't seem to find how to actually POST a bug on the Gemini system.  I've registered, and have even read the Help PDF, but can't find how to post this.  Advice?

As a follow-up to the original post, I found your blog with the download of the 1.0.6 beta of the AD module.  Installing this in our test environment, I actually found that Metapost is completely broken with 1.0.6.  That is, whether auto logged in or manually logging in, Windows Live Writer is unable to connect via Metapost.  Furthermore, using the manual login failed whether or not I use the new "DOMAIN" feature, which relieves users of having to enter domain\ before their username (great feature!).  Perhaps this information will help hunt down the root cause? 

 
New Post
6/20/2009 12:39 PM
 

There's a DNN Core Framework and Modules [ PUBLIC ] ** (DNNP) section. If you go in there you should see a Create Issue at the top of the screen.

 
New Post
10/13/2009 12:23 PM
 

This was entered into Gemini back in June, but it doesn't look like it's going to get much attention.  However, I have some new concrete information that might help somebody troubleshoot the core problem.  I created a user by MANUALLY logging in using the "Windows Login" screen.  It correctly populates the AD roles and Windows Live Writer works through Metapost.  At this point, I copied the database so that I had a "snapshot". 

Next, I deleted this user, then created the user via the AUTO-login script.  As expected, Windows Live Writer is unable to authenticate the user. I then grabbed a snapshot of THIS database.  Using the program DB Comparer, I was able to run a full comparison of the two databases to find differences.  The differences were predictable... Created/Modified dates, and password/password salt values.   And that's it.  No other differences.  Keep in mind that aside from connecting via Live Writer, either user creation method works perfectly when simply browsing the Intranet.  Live Writer seems to be the only application that exposes this anomoly. 

The "FIX":

The current live database contained the "broken" account.  In the database table "aspnet_Membership", I simply replaced the "password" and "password salt" values with those of the old/working account.  Voila!  Windows Live Writer can connect. 

So at this point, I'm trying to figure out what the auto-login script does differently with the password/salt compared to the manual "windows login" process.  Surely SOMETHING has to be different.  Does this ring a bell for anyone? 

Thank you!

 
Previous
 
Next
HomeHomeDNN Open Source...DNN Open Source...Provider and Extension ForumsProvider and Extension ForumsAuthenticationAuthenticationAuto-login bug when using MetapostAuto-login bug when using Metapost


These Forums are dedicated to discussion of DNN Platform and Evoq Solutions.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
  2. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  3. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  4. No Flaming or Trolling.
  5. No Profanity, Racism, or Prejudice.
  6. Site Moderators have the final word on approving / removing a thread or post or comment.
  7. English language posting only, please.
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out