Products

Solutions

Resources

Partners

Community

Blog

About

QA

Ideas Test

New Community Website

Ordinarily, you'd be at the right spot, but we've recently launched a brand new community website... For the community, by the community.

Yay... Take Me to the Community!

Welcome to the DNN Community Forums, your preferred source of online community support for all things related to DNN.
In order to participate you must be a registered DNNizen

HomeHomeDNN Open Source...DNN Open Source...Provider and Extension ForumsProvider and Extension ForumsAuthenticationAuthenticationNew users do not get createdNew users do not get created
Previous
 
Next
New Post
10/28/2008 8:05 PM
 

Can you manually login using IE7? It could be another setting in IE that's causing the problem. I'm still at work but I do have some emails at home from another user that had a similar problem. If I can find them I'll post the information here.

EDIT: Here's the first email that was part of the solution

I seem to have resolved the authentication problem by following the workaround steps in the article http://support.microsoft.com/kb/871179. I followed the following steps
 
WORKAROUND
To work around this behavior if you have multiple application pools that run under different domain user accounts, you must force IIS to use NTLM as your authentication mechanism if you want to use Integrated Windows authentication only. To do this, follow these steps on the server that is running IIS:
 
1. Start a command prompt.
 
2. Locate and then change to the directory that contains the Adsutil.vbs file. By default, this directory is C:\Inetpub\Adminscripts.
 
3. Type the following command, and then press ENTER:
cscript adsutil.vbs set w3svc/NTAuthenticationProviders "NTLM"
 
4. To verify that the NtAuthenticationProviders metabase property is set to NTLM, type the following command, and then press ENTER:
cscript adsutil.vbs get w3svc/NTAuthenticationProviders
 
The following text should be returned:
 
NTAuthenticationProviders       : (STRING) "NTLM"
 
When I key in my domain username and password in the "Authtest" website you have sent me my domain credentials are now validated. When I go back to DNN and test, I am presented with the same login dialogue box, and when I key in the username and password I am logged in as the domain user, which tells me authentication is working.
 
So how come DNN doesn't auto-login for me? The site is in the Local Intranet of the internet options and I am using IE 7. When I try it on the server which hosts the website which is part of the domain and I am logged in as domain administrator, I am automatically logged in as Domain Administrator the server has IE 6.
 
And here's the second and I think this may be what's happening in your case:
All working now thanks for you help, IE6 works perfectly however in IE7 there is an option which has to be enabled

Tools > Internet Options > Security > Local Intranet > Custom Level > Scroll right to the bottom of Settings > Select "Automatic logon with current username and password" > Click Ok > Click Ok

And works perfectly

Thanks for you assistance :)

 
New Post
10/29/2008 10:19 AM
 

I am not able to login even manually in IE7 with these settings: This line is commented out in web.config

<add name="Authentication" type="DotNetNuke.Authentication.ActiveDirectory.HttpModules.AuthenticationModule, DotNetNuke.Authentication.ActiveDirectory" />

and authentication mode is forms. Maybe if I allow Anonymus access in IIS on WindowsSignin file, it will allow me to login manually.

The second case mentioned above is already set in IE. Before working on first setting I just wanted to know that will it effect all the sites hosted on the server or just this specific DNN site? And also what are the commands to revert it back to the previous setting. Also, I was reading somewhere that if we try to access a site having windows authentication on IE on the same serevre where the site is hosted on IIS, we get this issue (but there was no workaround mentioned in there for this case). Maybe this is the same issue you mentioned above in first part.

 
New Post
10/29/2008 10:35 AM
 

The WindowsSignin.aspx page has nothing to do with manual logins (it doesn't get touched). As for the first workaround you'll need to read the link to verify but I think it's on the server in general. I'm not understanding what you mean in your second to last sentence. Do you mean that you read somewhere that you can't manually log into a site when you're logged onto the server that's hosting it (in this case your local computer)? I've never run into that issue before when I've been developing.

 
New Post
10/29/2008 11:11 AM
 

Oh, I am sorry, I guess two things got mixed up.

This is the link I was talking about: http://support.microsoft.com/kb/896861. I am getting almost the same error msg in the Error log as mentioned on this link.

And its just the hit and trial I am doing here. Maybe this is not the issue in my case. WindowsSignin.aspx was just a guess on my part trying to look for all the possible reasons here so please bear with it

 
New Post
10/30/2008 9:42 AM
 

Hi Mike,

I followed the workaround mentioned on this link: http://support.microsoft.com/kb/896861 "You receive error 401.1 when you browse a Web site that uses Integrated Authentication and is hosted on IIS 5.1 or IIS 6" and it solved half of the problem with IE. I am not getting this error anymore and windows authentication is working with IE (even manual is working). These are the steps I followed (from the above mentioned link):

Method 1: Disable the loopback check

Follow these steps:

1.    Click Start, click Run, type regedit, and then click OK.
2.    In Registry Editor, locate and then click the following registry key:
        HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa
3.    Right-click Lsa, point to New, and then click DWORD Value.
4.    Type DisableLoopbackCheck, and then press ENTER.
5.    Right-click DisableLoopbackCheck, and then click Modify.
6.    In the Value data box, type 1, and then click OK.
7.    Quit Registry Editor, and then restart your computer.

But IE is still prompting me for my username and password once everytime I open this URL "http://<my website>/DesktopModules/AuthenticationServices/ActiveDirectory/WindowsSignin.aspx". It's an IE specific message (as I have mentioned before), not a DNN prompt for credential.

My site is in trusted sites list and also "Automatically detect intranet network" is checked in  Security -> Local Intranet -> Sites. I am trying to avoid this login prompt in IE. Can you please suggest any solution for this?

 
Previous
 
Next
HomeHomeDNN Open Source...DNN Open Source...Provider and Extension ForumsProvider and Extension ForumsAuthenticationAuthenticationNew users do not get createdNew users do not get created


These Forums are dedicated to discussion of DNN Platform and Evoq Solutions.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
  2. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  3. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  4. No Flaming or Trolling.
  5. No Profanity, Racism, or Prejudice.
  6. Site Moderators have the final word on approving / removing a thread or post or comment.
  7. English language posting only, please.
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out