473,796 Members | 2,839 Online
Bytes | Software Development & Data Engineering Community
+ Post

Home Posts Topics Members FAQ

How authenticate user manually?

I have a subdir called "customer" that only allows authenticated users
(using web.config.)

In my login.aspx I allow them to pass username/password in query string.
Then I go to a default page.

Am I doing this right? It doesn't seem to authenticate in IE6, only IE7 and
Firefox.

If Membership.Vali dateUser(reques t.querystring(" User"),
request.queryst ring("Pwd")) Then
FormsAuthentica tion.SetAuthCoo kie(request.que rystring("User" ), True)
Response.Redire ct("customer/MySecuredPage.a spx")
End If

If I run the same code in IE6, passing it a valid username & password, I get
auto redirected back to the login page, as if it's not authenticated. Any
idea what's wrong????
Jun 30 '08 #1
6 2241
"Cirene" <ci****@nowhere .comwrote in message
news:OA******** ********@TK2MSF TNGP03.phx.gbl. ..
In my login.aspx I allow them to pass username/password in query string.
Firstly, please say you don't actually pass the username AND password in a
query string...
--
Mark Rae
ASP.NET MVP
http://www.markrae.net

Jun 30 '08 #2
This is a company "internal" webapplication that is tied into a phone
answering system. The phone answering system auto logs in the operator.
It's NEVER seen to the users. It's necessary for this application.

"Mark Rae [MVP]" <ma**@markNOSPA Mrae.netwrote in message
news:uI******** ******@TK2MSFTN GP04.phx.gbl...
"Cirene" <ci****@nowhere .comwrote in message
news:OA******** ********@TK2MSF TNGP03.phx.gbl. ..
>In my login.aspx I allow them to pass username/password in query string.

Firstly, please say you don't actually pass the username AND password in a
query string...
--
Mark Rae
ASP.NET MVP
http://www.markrae.net

Jun 30 '08 #3
"Cirene" <ci****@nowhere .comwrote in message
news:%2******** ********@TK2MSF TNGP06.phx.gbl. ..
>>In my login.aspx I allow them to pass username/password in query string.

Firstly, please say you don't actually pass the username AND password in
a query string...

This is a company "internal" webapplication that is tied into a phone
answering system. The phone answering system auto logs in the operator.
It's NEVER seen to the users. It's necessary for this application.
Hmm - OK...

Could it be a cookie issue...? Could it be that IE6 has been configured not
to accept cookies, even Session cookies...?
--
Mark Rae
ASP.NET MVP
http://www.markrae.net

Jun 30 '08 #4
Thanks. I believe this fixed the issue...

I added forms timeout to web.config section...

<authenticati on mode="Forms">

<forms timeout="180"/>

</authentication>
Does this make sense as to why this would work?

"Mark Rae [MVP]" <ma**@markNOSPA Mrae.netwrote in message
news:%2******** ********@TK2MSF TNGP03.phx.gbl. ..
"Cirene" <ci****@nowhere .comwrote in message
news:%2******** ********@TK2MSF TNGP06.phx.gbl. ..
>>>In my login.aspx I allow them to pass username/password in query
string.

Firstly, please say you don't actually pass the username AND password in
a query string...

This is a company "internal" webapplication that is tied into a phone
answering system. The phone answering system auto logs in the operator.
It's NEVER seen to the users. It's necessary for this application.

Hmm - OK...

Could it be a cookie issue...? Could it be that IE6 has been configured
not to accept cookies, even Session cookies...?
--
Mark Rae
ASP.NET MVP
http://www.markrae.net

Jun 30 '08 #5
"Cirene" <ci****@nowhere .comwrote in message
news:uk******** ******@TK2MSFTN GP05.phx.gbl...
>>>>In my login.aspx I allow them to pass username/password in query
string.

Firstly, please say you don't actually pass the username AND password
in a query string...

This is a company "internal" webapplication that is tied into a phone
answering system. The phone answering system auto logs in the operator.
It's NEVER seen to the users. It's necessary for this application.

Hmm - OK...

Could it be a cookie issue...? Could it be that IE6 has been configured
not to accept cookies, even Session cookies...?

Thanks. I believe this fixed the issue...

I added forms timeout to web.config section...

<authenticati on mode="Forms">

<forms timeout="180"/>

</authentication>

Does this make sense as to why this would work?
Yes, but not why it wouldn't work with certain browsers - curious...
--
Mark Rae
ASP.NET MVP
http://www.markrae.net

Jun 30 '08 #6
Hmmmm Oh well - thanks for your proactive and informative responses, as
usual!

"Mark Rae [MVP]" <ma**@markNOSPA Mrae.netwrote in message
news:%2******** **********@TK2M SFTNGP04.phx.gb l...
"Cirene" <ci****@nowhere .comwrote in message
news:uk******** ******@TK2MSFTN GP05.phx.gbl...
>>>>>In my login.aspx I allow them to pass username/password in query
>string.
>
Firstly, please say you don't actually pass the username AND password
in a query string...

This is a company "internal" webapplication that is tied into a phone
answering system. The phone answering system auto logs in the
operator. It's NEVER seen to the users. It's necessary for this
applicatio n.

Hmm - OK...

Could it be a cookie issue...? Could it be that IE6 has been configured
not to accept cookies, even Session cookies...?

Thanks. I believe this fixed the issue...

I added forms timeout to web.config section...

<authenticatio n mode="Forms">

<forms timeout="180"/>

</authentication>

Does this make sense as to why this would work?

Yes, but not why it wouldn't work with certain browsers - curious...
--
Mark Rae
ASP.NET MVP
http://www.markrae.net

Jun 30 '08 #7

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

4
1800
by: Anton | last post by:
I am running 2000 server, sp4, IIS 5 I need to be able to autoexecute an asp page from a batch file that is placed in the windows scheduler. I can execute the page fine, but I can't get past the authentication. How do I pass the username and password to windows via the URL automatically so this can be done without any user action? This is not a https but it uses integrated windows authentication.
0
1542
by: Renato Neves | last post by:
The following code is working fine, i can create the user in the Active Directory and "enable" it. My problem is that, when i'm trying to authenticate him, i can't get to work!! The user and pass is correct, but it can't authenticate. If i try other user created in the AD, it work just fine!!! <-------------------------------------------------------------------------------------------------------------> < ...
3
4096
by: Ram | last post by:
How to Authenticate NDS server using C#
13
12961
by: ALI-R | last post by:
I know how to authenticate to a webservice using either of these ways(Assuming that rService represents the webservice): 1) rService.Credentials = new System.Net.NetworkCredential("username","password","domainName"); 2)rService.Credentials = System.Net.CredentialCache.DefaultCredentials; My question is that is there a way to authenticate to a user using WindowsIdentity ???
1
4539
by: EricRybarczyk | last post by:
I am starting a rewrite of an existing Classic ASP web site in ASP.NET 2.0. The existing ASP application has several types of users, each with a separate login process (separate login page, separate DB tables, etc). For one of these user types, the current application has an additional input field required for login… they have a username, password, and another “location code” field. Please don’t make me explain or justify this…...
1
4564
by: kevin.vaughan | last post by:
Hello Everyone, Is it possible to authenticate the windows password through Active Directory? If so, how would this be done. I have a login screen in my application and am trying to set it up with the same login details as Windows to streamline the experience for users. It also must allow 1 user to log onto the application while another user is logged onto windows. I must know who is logged onto the
1
13274
by: fomalhaut | last post by:
Hi All, I'm builing an application that requires domain admin access to run, and I'm trying to allow for the application to be run as a normal user and allow the user to provide it with a username/password that has the access. I have a method that will check if the username/password is correct, however, it will only authenticate the user running the program...
1
3511
by: Michael Howes | last post by:
I would think this would be very, very easy but in the 50 searches I've done I haven't found anything. If our application requires login and that user/password be a local windows account or more detailed, a user that has been added to the Power Users group that is either a local account or a active directory account how do I authenticate? I've found code that seems to do this against Active Directory
4
2289
by: Jon | last post by:
I am modifying an app for a customer in ASP.Net 1.1. The app is running on a server outside their network, yet they want to authenticate users against their internal active directory set up (they will open the necessary ports). So, I have a simple login page with username and password, and then I will authenticate that credentials entered against their AD server. I am having a real hard time figuring this out. We can't use Windows Forms...
0
9673
marktang
by: marktang | last post by:
ONU (Optical Network Unit) is one of the key components for providing high-speed Internet services. Its primary function is to act as an endpoint device located at the user's premises. However, people are often confused as to whether an ONU can Work As a Router. In this blog post, well explore What is ONU, What Is Router, ONU & Routers main usage, and What is the difference between ONU and Router. Lets take a closer look ! Part I. Meaning of...
0
10452
Oralloy
by: Oralloy | last post by:
Hello folks, I am unable to find appropriate documentation on the type promotion of bit-fields when using the generalised comparison operator "<=>". The problem is that using the GNU compilers, it seems that the internal comparison operator "<=>" tries to promote arguments from unsigned to signed. This is as boiled down as I can make it. Here is my compilation command: g++-12 -std=c++20 -Wnarrowing bit_field.cpp Here is the code in...
0
10221
jinu1996
by: jinu1996 | last post by:
In today's digital age, having a compelling online presence is paramount for businesses aiming to thrive in a competitive landscape. At the heart of this digital strategy lies an intricately woven tapestry of website design and digital marketing. It's not merely about having a website; it's about crafting an immersive digital experience that captivates audiences and drives business growth. The Art of Business Website Design Your website is...
0
10003
tracyyun
by: tracyyun | last post by:
Dear forum friends, With the development of smart home technology, a variety of wireless communication protocols have appeared on the market, such as Zigbee, Z-Wave, Wi-Fi, Bluetooth, etc. Each protocol has its own unique characteristics and advantages, but as a user who is planning to build a smart home system, I am a bit confused by the choice of these technologies. I'm particularly interested in Zigbee because I've heard it does some...
0
9050
agi2029
by: agi2029 | last post by:
Let's talk about the concept of autonomous AI software engineers and no-code agents. These AIs are designed to manage the entire lifecycle of a software development projectplanning, coding, testing, and deploymentwithout human intervention. Imagine an AI that can take a project description, break it down, write the code, debug it, and then launch it, all on its own.... Now, this would greatly impact the work of software developers. The idea...
1
7546
isladogs
by: isladogs | last post by:
The next Access Europe User Group meeting will be on Wednesday 1 May 2024 starting at 18:00 UK time (6PM UTC+1) and finishing by 19:30 (7.30PM). In this session, we are pleased to welcome a new presenter, Adolph Dupr who will be discussing some powerful techniques for using class modules. He will explain when you may want to use classes instead of User Defined Types (UDT). For example, to manage the data in unbound forms. Adolph will...
0
5569
by: adsilva | last post by:
A Windows Forms form does not have the event Unload, like VB6. What one acts like?
1
4115
by: 6302768590 | last post by:
Hai team i want code for transfer the data from one system to another through IP address by using C# our system has to for every 5mins then we have to update the data what the data is updated we have to send another system
2
3730
muto222
by: muto222 | last post by:
How can i add a mobile payment intergratation into php mysql website.

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.