473,606 Members | 2,171 Online
Bytes | Software Development & Data Engineering Community
+ Post

Home Posts Topics Members FAQ

Switching to the secure page looses authentication. ..

I have a page (http://www.something.com/) and a secure page (https://secure.something.com) and the secure.somethin g.com points to http://www.something.com/secure/

All works ok, but, when I transfer to one of the pages on the secure directory all gets lost. First of all, I had to basically duplicate my web application assembly in the secure folder. I created a "secureWrap per" solution and I added the main web application as a reference, because otherwise it wouldn't see it. The problem is that if I switch to one of the pages on the https:// the authentication credentials get lost... For instance the Request.IsAuthe nticated is false, even though I come from an authenticated page... Then if I redirect from there back to the non-secure page the authentication ticket appears again..

Any idea how I can maintain the authentication token between the secure and non-secure pages

thank you
iulian
Nov 18 '05 #1
1 1637
Iulian,

There is that saying don't change horses mid stream. I'm a little confused on what you are asking but here it goes. If you are challenging request to a site once they are prompted to authenticate they're should be a little box that says 'Remember my password' (Win XP). Also in the Internet Explorer options there is a setting so that Internet Explorer will pass NT credentials by default. This is only useful for intranet applications. Naturally you don't want your I.E. throwing your network login to random sites. Have you tried another machine to see if you get the behavior. I use my own form and then test the NT credentials behind the scenes. Just an idea.
-Calvin Luttrell
ProjectThunder. com

I have a page (http://www.something.com/) and a secure page (https://secure.something.com) and the secure.somethin g.com points to http://www.something.com/secure/.

All works ok, but, when I transfer to one of the pages on the secure directory all gets lost. First of all, I had to basically duplicate my web application assembly in the secure folder. I created a "secureWrap per" solution and I added the main web application as a reference, because otherwise it wouldn't see it. The problem is that if I switch to one of the pages on the https:// the authentication credentials get lost... For instance the Request.IsAuthe nticated is false, even though I come from an authenticated page... Then if I redirect from there back to the non-secure page the authentication ticket appears again...

Any idea how I can maintain the authentication token between the secure and non-secure pages?

thank you,
iulian

Nov 18 '05 #2

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

6
4810
by: Billy Jacobs | last post by:
I have a website which has both secure and non-secure pages. I want to uses forms authentication. How do I accomplish this? Originally I had my web.config file in the root with Forms Authentication set up and it worked just fine. Then I realized that I needed to have some pages unsecure. I then created 2 directories. One named Secure and the other named Public. I placed my web.config file in my
4
2646
by: MR. UNDERHILL | last post by:
I want to use forms authentication on my website. Looking at the documentation, I create a sample site for testing. One of my requirements is to ensure that SOME pages required an authenticated user and some others, like the home page is not required. I specified the <deny users="?" /> on the web.config, but this is causing ALL pages require the authentication. How can I mix both, without loosing the web.config setup? I know that I can...
4
2057
by: Jeremy Holt | last post by:
Hi, In a windows.forms application I would BeginInvoke a delegate on the UI thread to collect data from a database. When the call returns to the AsyncCallback, if the Control.InvokeRequired = True, I would then have the Control.BeginInvoke(New AsyncCallback(AddressOf GetDataCallback), New Object() {ar}). How would one achieve the same thing on an asp.net page (without using a webseervice)? In the code below, because the...
4
1219
by: Jeff | last post by:
Using ASP.NET 1.1 Suppose I put the following code in an aspx code-behind's Page_Load() event procedure... if ( ! VerifiedSomething()) { Server.Transfer("../NoDice.aspx"); Response.End(); }
6
2997
by: Notgiven | last post by:
I am considering a large project and they currently use LDAP on MS platform. It would be moved to a LAMP platform. OpenLDAP is an option though I have not used it before. I do feel fairly confortable with my ability to use SESSIONS for authentication and access control. Would it better to learn and use LDAP or can you REALLY have just as secure authentication and access control using Sessions? Thanks for your thoughts and experience.
1
1035
by: UJ | last post by:
I have a web site that is secure by forms authentication. I've put in changes to allow a virtual directory to be accessed by everyone but it doesn't seem to have taken. I always end up being pushed back to my login page. I then took out all authentication - made it allow all and I'm still being forced back to the my login page. Is there anything I need to do to force the changes to happen? Also - could somebody check my code to make...
2
1923
by: Timbo | last post by:
Hello all, I have created a secure folder on my web server and created a user and password that can access it. So when you navigate to a page/file within this folder the login box appears. Here's my question: From a link on a form (outside the secure folder), can you send the user name and password using code to access a page/file in the secure folder, thus suppressing the login box?
4
554
by: K Viltersten | last post by:
We have a project working well today and it's developed on VS2005. Since we're planing to switch to VS2008 in a soon future, i've been trying to move the project to VS2008 Express (Web Developer). After i've moved over all the files, i run into problems compiling and running it. Both versions of VS are run on the same computer (with the sam settings, of course). Still, when i try to run index.aspx, i get error message as follows:
25
5159
bugboy
by: bugboy | last post by:
I'm trying to find a cross browser solution for editing text in a flickr photo caption manor where the text is displayed in a <div> or <a> tag but changes to a <textarea> via JS when clicked. There are two problems. 1. setting the focus on the new textarea 2. keeping the new text value when switching back to normal text. Firefox: focuses fine but does not keep the new text value Safari: focuses then instantly looses focus again, and...
0
7951
by: Hystou | last post by:
Most computers default to English, but sometimes we require a different language, especially when relocating. Forgot to request a specific language before your computer shipped? No problem! You can effortlessly switch the default language on Windows 10 without reinstalling. I'll walk you through it. First, let's disable language synchronization. With a Microsoft account, language settings sync across devices. To prevent any complications,...
0
8439
Oralloy
by: Oralloy | last post by:
Hello folks, I am unable to find appropriate documentation on the type promotion of bit-fields when using the generalised comparison operator "<=>". The problem is that using the GNU compilers, it seems that the internal comparison operator "<=>" tries to promote arguments from unsigned to signed. This is as boiled down as I can make it. Here is my compilation command: g++-12 -std=c++20 -Wnarrowing bit_field.cpp Here is the code in...
0
8430
jinu1996
by: jinu1996 | last post by:
In today's digital age, having a compelling online presence is paramount for businesses aiming to thrive in a competitive landscape. At the heart of this digital strategy lies an intricately woven tapestry of website design and digital marketing. It's not merely about having a website; it's about crafting an immersive digital experience that captivates audiences and drives business growth. The Art of Business Website Design Your website is...
1
5966
isladogs
by: isladogs | last post by:
The next Access Europe User Group meeting will be on Wednesday 1 May 2024 starting at 18:00 UK time (6PM UTC+1) and finishing by 19:30 (7.30PM). In this session, we are pleased to welcome a new presenter, Adolph Dupré who will be discussing some powerful techniques for using class modules. He will explain when you may want to use classes instead of User Defined Types (UDT). For example, to manage the data in unbound forms. Adolph will...
0
5465
by: conductexam | last post by:
I have .net C# application in which I am extracting data from word file and save it in database particularly. To store word all data as it is I am converting the whole word file firstly in HTML and then checking html paragraph one by one. At the time of converting from word file to html my equations which are in the word document file was convert into image. Globals.ThisAddIn.Application.ActiveDocument.Select();...
0
3930
by: TSSRALBI | last post by:
Hello I'm a network technician in training and I need your help. I am currently learning how to create and manage the different types of VPNs and I have a question about LAN-to-LAN VPNs. The last exercise I practiced was to create a LAN-to-LAN VPN between two Pfsense firewalls, by using IPSEC protocols. I succeeded, with both firewalls in the same network. But I'm wondering if it's possible to do the same thing, with 2 Pfsense firewalls...
1
2448
by: 6302768590 | last post by:
Hai team i want code for transfer the data from one system to another through IP address by using C# our system has to for every 5mins then we have to update the data what the data is updated we have to send another system
1
1553
muto222
by: muto222 | last post by:
How can i add a mobile payment intergratation into php mysql website.
0
1296
bsmnconsultancy
by: bsmnconsultancy | last post by:
In today's digital era, a well-designed website is crucial for businesses looking to succeed. Whether you're a small business owner or a large corporation in Toronto, having a strong online presence can significantly impact your brand's success. BSMN Consultancy, a leader in Website Development in Toronto offers valuable insights into creating effective websites that not only look great but also perform exceptionally well. In this comprehensive...

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.