Products

Solutions

Resources

Partners

Community

Blog

About

QA

Ideas Test

New Community Website

Ordinarily, you'd be at the right spot, but we've recently launched a brand new community website... For the community, by the community.

Yay... Take Me to the Community!

Welcome to the DNN Community Forums, your preferred source of online community support for all things related to DNN.
In order to participate you must be a registered DNNizen

HomeHomeDNN Open Source...DNN Open Source...Provider and Extension ForumsProvider and Extension ForumsAuthenticationAuthenticationAD Authentication broken after moveAD Authentication broken after move
Previous
 
Next
New Post
8/14/2012 9:10 AM
 

Greetings,

We have moved a DNN 5.4.4 install from Windows Server 2003 to 2008r2. It has been a nightmare. I'm finally able to browse around the site, but both default and AD authentication are broken. I was able to get into admin by registering a new user and then assigning superuser rights in the database (SQL Server). I can do a default login with the new account.

I was also able to create a new portal with an AD user and do an AD login as that user. That leads me to believe that moving the database screwed up the user data (probably in the aspnet_users and asp_membership) tables.

Any ideas on how to fix this? I've seen references to SQL Server tools to compare schema and data but I no longer have a stable site to compare to! I'm considering deleting my users and creating now accounts for them. Can anyone suggest a batch method for this? Luckily I have admin rights to the hosting server and the database.

On a side note, I notice that the AD Authentication user guide says to assign only Windows Authentication to the windowssignin.aspx file. I find that IIS7.5 has locked the forms authentication feature on this file (I suppose due to the web.config forms authentication spec) and gets upset when I also assign Windows authentication. I'm assuming that this isn't my main problem since I CAN login with a new AD account...

Thanks for your help!
jerry 

 
New Post
8/14/2012 10:30 AM
 
It almost sounds like the machineKey in your web.config got changed in the transfer. If that's different then your users won't be able to log in. Is it possible to check that against the old system?

As for your side note.... IIS7.5 does require some work. There's two ways you should be able to do it that are explained in Section 3 of the documentation (http://dnnauthad.codeplex.com/documentation). I'm guessing at this point that you're running under the integrated pipeline mode and haven't run the two required commands that will allow you to set Windows Authentication on WindowsSignin.aspx.
 
New Post
8/14/2012 11:42 AM
 

Thanks for the reply, Mike.
I'm running in classic pipeline mode. Running in integrated mode threw me into an install loop. Every time the install finished (successfully) and I click the link to portal 0 the install process would start all over again.

You were right about the machine key. I returned it to its previous setting. That seems to have fixed the default DNN login but not AD.

I've enabled Windows Authentication on the WindowsSignin.aspx file. I can still login with my new AD account, although I get an error:
A critical error has occurred.
Object reference not set to an instance of an object.
The error isn't fatal, though.

I had a colleague try to login. He was thrown directly to the WindowsSignin page with a "bad credentials" error. Going back to the default page he was still unable to login.

I have both a DNN account and an AD account with matching credentials. Interestingly, when I attempt to login, it looks as if DNN is "rooling me over" to default authentication when AD fails. In fact, I even seem to be getting auto logged in in some cases even after shutting down and reopening the browser.

Again - I really appreciate your advice in this. I have 200 teachers waiting to edit their websites in preparation for the new school year!
Jerry

 
Previous
 
Next
HomeHomeDNN Open Source...DNN Open Source...Provider and Extension ForumsProvider and Extension ForumsAuthenticationAuthenticationAD Authentication broken after moveAD Authentication broken after move


These Forums are dedicated to discussion of DNN Platform and Evoq Solutions.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
  2. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  3. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  4. No Flaming or Trolling.
  5. No Profanity, Racism, or Prejudice.
  6. Site Moderators have the final word on approving / removing a thread or post or comment.
  7. English language posting only, please.
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out