asp.net-membership

aspnet Membership login control

I am building a website that is using the aspnet membership classes. When the user logs in successfully, I redirect them to a myaccount page. In this page I want to load a profile, but I need to know what user is logged in. How would I do this with the aspnet membership stack? Thanks Jim Rieck ...

Handling authentication with multiple membership providers

I have a web app using custom membership providers to access admin and inventory pages, each in a separate folder for different users from different database tables (hence the custom membership providers). There are other pages in the root and other folders which are for guest visitors. I have a login form for the admin and the invento...

ASP MVC null reference exception with MVC Membership (OpenID) controller

I'm going to apologize ahead of time. I'm new to ASP.NET and MVC and don't yet grok the internals and flow of operations. I'm trying to get the ASP.NET MVC Membershp Starter Kit integrated into a site I'm developing to get OpenID support. I've worked through several issues, but I'm stumped at where to start looking for a null reference ...

Why is the User information stored in two different tables in ASP.NET's default Membership Provider?

There are two tables: aspnet_users and aspnet_membership. Can anyone elaborate on the reasons why they don't use a single table for this? ...

Disabling account lockout with the SqlMembershipProvider

How do I disable the account lockout feature of the SqlMembershipProvider? The MSDN documentation for the MaxInvalidPasswordAttempts property does not specify how to disable it. If I can't find the correct way to do it I will set the maxInvalidPasswordAttempts attribute to the maximum value of an int which may effectively achieve the s...

Thread.CurrentPrincipal set in Application_AuthenticationRequest is not set later in the app

In the global.asax file for the Application_AuthenticationRequest I'm setting the Thread.CurrentPrincipal to a custom principal. I also set the HttpContext.Current.User to the same principal. However later in the app when I need to cast the Thread.CurrentPrincipal to our custom type, I get a runtime error saying: Unable to cast object ...

How to implement ASP.NET membership provider in my domain model

In a website, I need to integrate membership and authentication. So I want to use the functionality of ASP.NET Membership, but I have other custom stuff, that a "user" has to do. So I am sitting here with my pencil and paper, drawing lines for my domain model... And how can I best utilize the ASP.Net membership, but extend it to fill m...

Membership switch from ID to email

Currently I have a site (asp.net 3.5) that uses a unique ID for the login. I am going to need to switch it to use emails if possible. I am going to be creating all new accounts so I can wipe the membership table clean and import all the user info. We are switching from generic logins for departments to individual accounts. Any link...

ScrewTurn wiki and custom asp.net membership provider

I'm thinking of implementing the Screwturn Wiki for documenting the administration area of a website. I would like to use the existing custom asp.net membership provider so that access to the wiki is seamless. So it would look something like this: http://www.example.com/admin - Existing administrative area http://www.example.com/admin/...

where is the ActiveDirectoryMembershipProvider source

I had heard a rumour that the ActiveDirectoryMembershipProvider source code was available. I'm having some difficulty troubleshooting the our setup of the out-of-the-box provider, and stepping through the source would have been really handy. ...

SqlMembershipProvider.ApplicationName property

Hello, Q1 To configure membership provider, you also have to add section to your web.config file. One of the properties of SqlMembershipProvider is also applicationName. If you don’t specify this attribute, then membership API will associate objects in database to the root application with the “/” name. A) what is meant by r...

Two users in different membership DBs can’t use same email address

Hello, Q1 - I’ve created two membership databases ( using aspnet_regsql tool ) DB1 and DB2. I then created web applications A1 and A2. A1 uses DB1 to store user credentials, while A2 uses DB2. If the user I created in A1 ( via Asp.Net WAT tool ) uses email [email protected], then none of the users created in A2 can have the same email add...

System.Security.Principal.WindowsIdentity.GetCurrent().Name is Works

Hi i am using "System.Security.Principal.WindowsIdentity.GetCurrent().Name " to get the client machine username,with windows authentication in my web.config. My question is that whether this code works when i put the page in intranet.Did i able to get the user name who ever logged in my page by using this...b'coz i need to create a sessi...

Enabling FormsAuthentication for multiple subfolders in a site

We're trying to implement formsAuthentication on our site, but in a scenario that we haven't been able to find a solution for yet - other than creating our own HttpModule and doing the custom logic ourselves - so I thought I'd toss the question out there to see if this was indeed the only solution. We'd like to use formsAuthentication o...

Handling Login.Authenticate event

Hello, A) Book I’m learning from says that if we handle Login.Authenticate event, then we have to authenticate users on our own. Thus control won’t automatically validate username and password. I thought book suggested this would only happen if we override Login.OnAuthenticate() method, but it appears that even if only add an event ha...

Login control template and Control ID = Login

Hello, When using custom template for Login control, if we add control with ID = Login and set its CommandName to “Login”, then Login control will automatically handle authentication. Control with ID=Login can be any control that supports event bubbling. Thus I assume this control can be either Button, ImageButton, LinkButton o...

Could aspnet_regsql.exe be used to create DB capable of storing several email addresses...

Hello, Q1 A) Is there a way to create membership database ( using aspnet_regsql tool ) where each user could have several email addresses specified ( instead of just one ) during registration process? B) Is there also a way to somehow "inform" Security wizard in WAT to include new input fields ( where additional email addresses w...

Test windows authentication in Local Machine

How could i test this windows authentication functionality in local machine as i dont have intranet,and systems under domain. ...

Why should underlying membership provider decide whether…?

Hello, A) Why, when using templates with CreateUserWizard control, does including Textbox with ID=Email depend on whether CreateUserWizard.RequireEmail property is set to true, but TextBox with ID=Question is required only if underlying membership provider requires password question? In other words, why wouldn’t it also be up to und...

Why need WizardStep objects be represented as …?

Hello, This is probably a stupid question, but still.. A Wizard control is made up of a collection of WizardStep objects that represent single steps of a wizard. But why are these W*izardStep* object represented as controls ( thus they require runat=Server attribute )?Couldn’t they be handled similarly to ListItem objects, which don’...