Security

Re: user.identity.name doesn't work on server

BhaveshPatel — Tue, 17 Apr 2007 21:29:17 GMT

No answer for it guys???

Re: user.identity.name doesn't work on server

BhaveshPatel — Tue, 17 Apr 2007 21:27:37 GMT

No answer for it guys???

Re: user.identity.name doesn't work on server

BhaveshPatel — Fri, 13 Apr 2007 15:34:34 GMT

Hi guys... back to this topic after long time.

as per me i tried all different way. my final conclusion is as below:

In my intranet website i have created a different hierarchy( kind of folders inside folders).

for example project -> Images -> HRImages

project -> Images -> ITImages etc....

as well as the same kind of folder hierarchy for web forms too...

like project-> welcome.aspx

project -> HR -> welcome.aspx, (All HR pages).aspx

project -> HR -> welcome.aspx, (All IT pages).aspx

and I have just one web.config for whole project, as per me i think that is what causing problem for poping up at client machine for authentication for each folder. so may be i have to put web.config in each and every folder( and that's weired.)... is there any one has any better idea for this kind of hierarchical project management... without adding bunch of web.config for each folder...... i m pointing to something like (site map.-- i m not sure whether it helps of not.)

please reply

Re: user.identity.name doesn't work on server

andiisuper — Thu, 12 Apr 2007 20:51:18 GMT

I've got the same problem for my intranet Application.

Everyone have encounter the same problem about nothing having User.Identity.Name updated. I believed that the Web.Config should always have something like these here

authentication mode="Windows"/>

deny users="?" />

authorization>

Also make sure you have Authentication Methods of your Virtual directory checked with Integrated Window Authentication.

One more thing, make sure your browser support windown authentication by go to Menu -> Tools -> Internet Options -> Advanced -> Security -> check Enabled Integrated Windown Authentication.

This works perfectly for me with 95% of my end user in my company, there there's some other user whose still get the pop up window message.

I believe that this is not about the code, it's about your server security setup which I missed somewhere.

WHOEVER ENCOUNTERED THIS AND GOT IT FIX, PLEASE POST IT UP TO HELP US WHO ARE IN FRUSTRATION WITH THIS.

Thanks Guys

Re: user.identity.name doesn't work on server

andiisuper — Thu, 12 Apr 2007 20:47:59 GMT

I've got the same problem for my intranet Application.

Everyone have encounter the same problem about nothing having User.Identity.Name updated. I believed that the Web.Config should always have something like these here

authentication mode="Windows"/>

deny users="?" />

authorization>

Also make sure you have Authentication Methods of your Virtual directory checked with Integrated Window Authentication.

One more thing, make sure your browser support windown authentication by go to Menu -> Tools -> Internet Options -> Advanced -> Security -> check Enabled Integrated Windown Authentication.

This works perfectly for me with 95% of my end user in my company, there there's some other user whose still get the pop up window message.

I believe that this is not about the code, it's about your server security setup which I missed somewhere.

WHOEVER ENCOUNTERED THIS AND GOT IT FIX, PLEASE POST IT UP TO HELP US WHO ARE IN FRUSTRATION WITH THIS.

Thanks Guys

Re: user.identity.name doesn't work on server

nobe prince — Wed, 24 Jan 2007 19:31:54 GMT

HI Bavesh

try this

System.Security.Principal.WindowsIdentity.GetCurrent().Name.ToString();

prince

Re: user.identity.name doesn't work on server

ranganh — Tue, 16 Jan 2007 07:07:22 GMT

Bhavesh,

"My" namespace is relevant in VB.NET.

Regarding your point on IIS - Allow anonymous access, you are right. However, IIS Still passes on the credentials of the windows logon. I would suggest, you setting "Allow Anonymous Access" and in the Web.Config deny users="?

Check if it shows up an username in a simple ASPX Page using User.Identity.Name. If it doesnt show up, then there is some other issue. This has worked for many folks very well and denying anonymous access in IIS would always popup the Windows Login Modal, which is ugly for a web application.

Thanks.

Re: user.identity.name doesn't work on server

BhaveshPatel — Fri, 12 Jan 2007 21:21:54 GMT

Hi jae, thanks for yr answer... I tried your second comment my.user.isauthenticated , but it is giving me compilation error like below:

" The name 'my' does not exist in the current context "

Is that any library or directory that I need to add in my project to use this "my" object or class ????

Also guys, here is one more thing that I tried, I created very simple page with one label on it and applying text to that label from code behind file as below :

protected

void Page_Load(object sender, EventArgs e)

{

lbl_UserName.Text = "Your are: " + Page.User.Identity.Name.ToString(); }

with Web.cofig as following:

system.web>

compilation debug="true"/>

authentication mode="Windows"/>

authorization>

deny users="?" /> // To disable Anonymous User

authorization>

system.web>

Then I uploaded this whole application to our server (server 2003, IIS 6)..... The output is so confusing me.

OutPut : its kind of random, sometimes the page displays the DOMAINNAME\USERNAME with out any pop up and sometimes its just keep poping up the window for username and password,even if i entered the correct password and username, it redirects the IE to this message "you are not authorized to view this page"

its real kind of weired for me..... cant come up with any idea on this, any further help???

Re: user.identity.name doesn't work on server

jae.lee — Fri, 12 Jan 2007 19:54:13 GMT

<authentication> tags only determine how your IIS will either allow or not allow connections to the server. (it's a behavior issues)

However, you should really look at my second comment on using my.user.isauthenticated to design your authentication criteria rather than to just check if user is missing username or not.

It's incorrect methods also will not return constant results amongs differnt settings and servers.

Let me know....

Hope this helps.

Jae.

Re: user.identity.name doesn't work on server

BhaveshPatel — Fri, 12 Jan 2007 15:20:04 GMT

Hi folks... first of all thanks for replying.... thanks a lot

To Harrish, as u mentioned "Allow Anonymous Access" checkbox should be checked", which shouldnt be, bcoz if To Anonymous Access is checked(on), then IIS wont even bother for username or any credantials from which the web page is being requested and the output for the user.Identity.Name will be NULL string only. I have already tried it and it is returning Null string, so by either a way, "Allow Anonymous Access" should be checked off or by using web.config <authorization> <deny users="?"/> </authorization>... I have to disable the Anonymous access.

To Jae,

I am basically using this code Visible='<%# Page.User.IsInRole("DOMAINNAME\\USERNAME") %>' in a one button in each page and also using Page.User.Identity.Name concept in my master page. so to keep that two things on working, I have to disable the anonymous access and enable Windows authentication. I tried using all below different configuration in web.config:

(1) Anonymous Access Box checked off(disabled)

compilation debug="true"/>

authentication mode="Windows"/>

authorization>

authorization>

(2) Anonymous Access Box checked on(enabled) [NOTE: but still I am disabling it by below web.config]

compilation debug="true"/>

authentication mode="Windows"/>

authorization>

</authorization>

I think this would help you guys in better way to solve this issue....

Once again thanks a lot for your previous reply and time.

Re: user.identity.name doesn't work on server

jae.lee — Fri, 12 Jan 2007 12:37:16 GMT

when you validate, you indicated you are using user.identity.name being nothing as indicator for valid authentication.

you can do two things.

1. configure web.config to have: (this will allow you server's AD or integrated authentication to take care of authentication.

		<authentication mode="Windows"/>
		<authorization>
			<deny users="?"/>
		</authorization>

2. instead of using USER.IDENTITY.NAME, use following:

My.User.IsAuthenticated

this is a BOOLEAN which will return if your user is authenticated or not.

hope this helps.

Jae.

Re: user.identity.name doesn't work on server

ranganh — Fri, 12 Jan 2007 12:20:57 GMT

In the IIS, make sure that for this virtual directory, you have turned on "Allow Anonymous Access" It would be in the "Directory Security" Tab of the Virtual Directory Properties.

Basically the "Allow Anonymous Access" checkbox should be checked.

Write back if this still doesnt help.

Thanks.

Re: user.identity.name doesn't work on server

BhaveshPatel — Thu, 11 Jan 2007 16:54:10 GMT

I tried as u mentioned.. as making changes like below to my web.config and turning off the anonymous access. still it is poping up the username and password window.

system.web>

compilation debug="true"/>

authentication mode="Windows"/>

authorization>

deny users="?" />

authorization>

system.web>

is there anything like this application(when I am publishing to the server) has not enough privileges to access the username from IIS? I am not master of asp.net or IIS.. I just started working on it.

or is there any other Idea for it???

Re: user.identity.name doesn't work on server

Skip_Frog — Thu, 11 Jan 2007 15:03:34 GMT

I had the same problem that I resolved by turning off anonymous access in IIS. Not sure if I should have done in the web.config file instead?

Re: user.identity.name doesn't work on server

ranganh — Thu, 11 Jan 2007 08:40:41 GMT

Hi,

If you are using User.Identity.Name and implementing Windows Authentication, make sure that you turn off anonymous access in your Web.Config.

Your Web.Config should read as follows:-

Write back if this still doesnt help.

Thanks.