Hi there everyone, I'm new to this newsgroup so I hope you don't mind me just asking a question, but it has been working me for way to long now and I need some help. I'm fairly new to ASP.NET and VB.NET but have been cramming for weeks now and hit a snag.It has to do with forms authentication in ASP.NET. My problem is that when good credentials are sent from the login.aspx page it doesn't seem to be generating a cookie for the user and sends the user back to the login page because they are still unauthenticated . I have been researching this allot and have been buried in books for way to long now. Creating the login system seems so easy to do that there are little troubleshooting pages to be found. I did find one that described my problem in one short paragraph:
[http://msdn.microsoft.com/library/de...ecNetch13.asp]
Using Forms Authentication
Make sure that the cookie name specified in the <forms> element is being retrieved in the global.asax event handler correctly (Application_Au thenticateReque st). Also, make sure the cookie is being created. If the client is continuously sent back to the login page (specified by the loginUrl attribute on the <forms> element) this indicates that the cookie is not being created for some reason, or an authenticated identity is not being placed into the context (HttpContext.Us er)
The structure I have is fairly simple. I have the root of my main application open to anonymous users. I then have a secured directory called 'ClientCenter'. Both have there own web.config files specifying there separate authorization.
At the root of my site I have my the main sites web.config file which looks like so:
[code]
<configuratio n>
<appSettings>
<add key="MM_CONNECT ION_HANDLER_eOn Conn" value="default_ oledb.htm" />
<add key="MM_CONNECT ION_STRING_eOnC onn" value="Provider =Microsoft.Jet. OLEDB.4.0;Data Source=C:\Inetp ub\wwwroot\eOn\ Database\eOn.md b;Persist Security Info=False" />
<add key="MM_CONNECT ION_DATABASETYP E_eOnConn" value="OleDb" />
<add key="MM_CONNECT ION_SCHEMA_eOnC onn" value="" />
<add key="MM_CONNECT ION_CATALOG_eOn Conn" value="" />
</appSettings>
<system.web>
<authenticati on mode="Forms">
<forms name=".CCAUTH" loginUrl="../login.aspx" protection="All ">
<credentials passwordFormat= "Clear">
<user name="1" password="1" />
</credentials>
</forms>
</authentication>
<authorizatio n>
<allow users="?" />
</authorization>
</system.web>
</configuration>
My login page code (with some help from the MSDN) looks like so:
[code]
<%@ Page Language="VB" AutoEventWireup ="true" %>
<html>
<head>
<script runat="server">
Sub LoginBtn_Click( sender as Object, e as EventArgs)
' If Page.IsValid Then
' Call the authentication event handler delegate (not included in this example).
If FormsAuthentica tion.Authentica te(UserName.Tex t, UserPass.Text) Then
' Return to the originally requested URL.
FormsAuthentica tion.RedirectFr omLoginPage(Use rName.Text, Remember.Checke d)
Else
Msg.Text = "Invalid Credentials: Please try again"
End If
' End If
End Sub
</script>
</head>
<body>
<form runat="server">
<h2>Login Page</h2>
<hr size="1" />
<table>
<tbody>
<tr>
<td>Username: </td>
<td><asp:TextBo x id="UserName" runat="server"> </asp:TextBox></td>
<td><asp:Requir edFieldValidato r id="RequiredFie ldValidator1" runat="server" ControlToValida te="UserName"
Display="Static " ErrorMessage="* "></asp:RequiredFie ldValidator></td>
</tr>
<tr>
<td>Password: </td>
<td><asp:TextBo x id="UserPass" runat="server" TextMode="Passw ord"></asp:TextBox></td>
<td><asp:Requir edFieldValidato r id="RequiredFie ldValidator2" runat="server" ControlToValida te="UserPass"
Display="Static " ErrorMessage="* "></asp:RequiredFie ldValidator></td>
</tr>
<tr>
<td colspan="3"> <asp:CheckBox id="Remember" runat="server"> </asp:CheckBox>Re member credentials?</td>
</tr>
</tbody>
</table>
<asp:button id="LoginBtn" onclick="LoginB tn_Click" runat="server" text="Login"></asp:button>
<p><asp:Label id="Msg" runat="server" ForeColor="red" ></asp:Label></p>
</form>
</body>
</html>
And lastly the ClientCenter/web.config file looks like this:
[code]
<configuratio n>
<system.web>
<authorizatio n>
<deny users="?" />
<allow users="*" />
</authorization>
</system.web>
</configuration>
Now from all the books and examples I have been through, this should be all I need to get this login system up and running, right? Well something is going on here and i have no clue what. Please could someone show me what I am doing wrong here and why it is not generating my cookie! How do i ' Call the authentication event handler delegate' and what is that exactly? Do i have to set something in IIS for this to work? Please help!
Thanks
Nugs
