Dear Group,

Today I used the Install Wizard to re-install/upgrade DNN to v. 4.8 on my web site (CrystalTech shared hosting) after some SQL Server gymnastics that seemed to work out OK (details at http://www.dotnetnuke.com/Community/Forums/tabid/795/forumid/107/threadid/204009/scope/posts/Default.aspx ).  But after completing the installation successfully, I couldn't get to first base (default.aspx); I got this error:

System.Security.SecurityException: Request for the permission of type
'System.Security.Permissions.FileIOPermission, mscorlib, Version=2.0.0.0,
Culture=neutral, PublicKeyToken=b77a5c561934e089' failed.

So I thought I'd search the Install It! forum and I found a number of messages relating to this error. Two recommendations surfaced:

1. Check the trust level in the web.config.  Either comment out the "<trust level="Medium" /> line in the web.config or make sure it's set to 'Medium'.  From the messages I read I found that the machine.config (something I have no control over since that's administered by the CrystalTech guys) overrides any attempt to bump up the local trust level.
2. Make sure that all file system permissions are granted to user Network Service or ASPNET.

I checked #1 and saw that the trust level was commented out.  So I went with #2.  CrystalTech's utilities are quite good in this respect and I found that, yes, the ASPNET user had all rights to everything on the web site.  Still no dice logging in, though.  I read through quite a few messages (but not all) that dealt with this error but could find no recommendation other than these two.

So I thought I'd compare the "virgin" web.config file found in the DNN distribution files and the web.config as modified by the Install Wizard.  I found that a new <system.web><httpModules> entry had been made for Authentication.  I remembered then that there was an Install Wizard screen that asked if I wanted to install any additional Authentication abilities other than the default ones.  Active Directory authentication was one of the choices I clicked.  So an Active Directory Authentication node was added to the <system.web><httpModules> section of web.config.

I commented that out and voilà! Zut alors! She works!

The moral of the story is, be careful about happy-clicking on optional authentication methods while using the Install Wizard.

Sincerely,

Steve Erbach
Neenah, WI