Products

Solutions

Resources

Partners

Community

Blog

About

QA

Ideas Test

New Community Website

Ordinarily, you'd be at the right spot, but we've recently launched a brand new community website... For the community, by the community.

Yay... Take Me to the Community!

Welcome to the DNN Community Forums, your preferred source of online community support for all things related to DNN.
In order to participate you must be a registered DNNizen

HomeHomeDNN Open Source...DNN Open Source...Provider and Extension ForumsProvider and Extension ForumsAuthenticationAuthenticationIntermittent AD AuthenticationIntermittent AD Authentication
Previous
 
Next
New Post
8/15/2008 10:15 AM
 

I'd try turning off Role Synchronization as a test and see if the problem goes away. If it does then I think I know the problem and it should be fixed in the .04 release that's in the DNN Release Tracker right now.

On your impersonate line I'd add a userName="domain\username" password="password" to it so that you only one account is used for impersonation but that's your choice.

 
New Post
8/15/2008 11:58 AM
 

I tried what you suggested but the problem still remains.  It is very intermittent if a single user tries to log in (myself) all day log doing development work, that user (myself) has no problem logging in and out.  If I try to add users to this equation, I get the errors and unable to login.  Two common situations arise, first pass through authentication seems to always work, second situation is that it appears that once a new user logs in other logins are not able to login any longer, if they are not using pass through authentication, or if a user logs in not using pass through authentication then logs off and trys to log back in it also fails.

Any help is appreciated.

Thanks.

Derek

 
New Post
8/15/2008 1:20 PM
 

Although I need to find a way around this issue, when I set the credentials in the web.config to a specific username and password and attempt have multiple users logon all issues seem to disappear, this unfortunately is not a feasbile situation as we need each individual user to impersonate using their own credentials.  How can I get around this issue?

Thanks.

Derek

 
New Post
8/15/2008 9:10 PM
 

Hello Derek,
Just out of curiousity, are you using IE only in this situation, or are a variety of browsers being employed?  I ask because I encountered an intermittent authentication issue recently and it turns out the problem was IIS based, not DNN based.  Essentially, the user could not authenticate against the domain when using IE (any version).  It appears that when IE was authenticating, it was authenticating against Kerberos, which my domain is not set up for.  There's an MS article on it here:
http://support.microsoft.com/kb/215383

Here's the command I had to run in order to make this change.  BE CAREFUL!  This will modify your IIS Metabase, and if not done correctly, can seriously hose your environment.
C:\Inetpub\AdminScripts>cscript adsutil.vbs set w3svc/NTAuthenticationProviders "NTLM"

Hopefully this helps.

-- Scott Allender
http://www.scottallender.com


-- Scott Allender
http://www.scottallender.com
 
New Post
8/16/2008 12:15 AM
 

Derek wrote
 

Although I need to find a way around this issue, when I set the credentials in the web.config to a specific username and password and attempt have multiple users logon all issues seem to disappear, this unfortunately is not a feasbile situation as we need each individual user to impersonate using their own credentials.  How can I get around this issue?

Thanks.

Derek

When you use a specific user account for your impersonation your users still login with their own credentials. The impersonation account just replaces NETWORK SERVICE as the account DNN is running under and connecting to the AD. What I suspect is happening is that there's almost a file lock type of situation happening (you're the first to login so it's locked against other users connecting until you release the connection). With impersonation it's always the impersonation account that's making the connection but your individual users are still authenticating against the AD.

Scott may be on to something but I'd have to read up on the link he posted.

 
Previous
 
Next
HomeHomeDNN Open Source...DNN Open Source...Provider and Extension ForumsProvider and Extension ForumsAuthenticationAuthenticationIntermittent AD AuthenticationIntermittent AD Authentication


These Forums are dedicated to discussion of DNN Platform and Evoq Solutions.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
  2. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  3. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  4. No Flaming or Trolling.
  5. No Profanity, Racism, or Prejudice.
  6. Site Moderators have the final word on approving / removing a thread or post or comment.
  7. English language posting only, please.
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out