asp.net membership, role and profile providers

[LockH]

Is anybody successfully using the standard asp.net 2 features for membership and roles and user profile fields?

I am using the standard login controls that come with asp.net, and cannot get them to work consistently on my eukhost site although they work ok on our own machines.

A standard feature of asp.net 2 is that you can require users to have certain roles in order to access specific folders or pages on the site, but users dont pick up their roles when they log on.

You have to enter a valid username and password, or else you get an error message. But if when do enter a valid id and password, although it takes you from the login form to the home page, very often you are not properly logged on.
The login link should change to a "Welcome username" message and a logout link, but it does not, it still shows the login link. When this happens, you cannot access the restricted features, and pages that use user profile values will give errors.

Has anybody out there managed to get these features set up correctly?

[Rock]

Hi Lock, Apologies for replying late. I was working on your issue since you placed the ticket [JPT-66113-703] & replied to it approx an hour ago

[LockH]

Thanks for your efforts last week.

We still have problems with logon failing intermittently - you get past the login screen, but you are actually logged in as an anonymous user, so some pages with access restricted by roles are unavailable.

I think the problems happen less often, and the chances of a successful login are higher, (I don't have statistics to justify that, but it does seem better) but still could not go live like this.


Over the weekend I did some research on authentication etc, and found some useful material posted by Scott Guthrie, who runs ASP.NET and Visual Studio development at Microsoft - he has an ASP.NET Tips, Tricks and Gotchas page. I made a couple of changes to the web.config bsed on his advice - made sure to specify ApplicationName, and put &lt clear/ &gt at start of providers. This didn't make much difference to reliability, but when anonymous users get created they now get created with the right application name, instead of "/".



Scott also published an example that demonstrates the complete login authorisation, membership, roles, and profiles system. The example covers login, collect personal information and store it in the profile, recover forgotten password, change your own password, with 5 simple pages and 25 lines of code. I downloaded that and installed it in a fresh subdomain, changing only the connection string to get it conected to the database.

So I copied the pages into a new folder in the dogs app.

It works some of the time, and sometimes it doesn't, same as my original pages.

We have seen a new server error page this week, "validation of viewstate MAC failed". It seems to happen when you come back to a session that has ben idel for a while and try to log off, or go to another page. That has happened with the original site and with the new example pages in the new sampleprofile subdomain. I must admit I have no idea what the message is about.


I still wonder if anybody else is using these asp.net login, roles and profiles on this server?

[eUK-Martin]

Hello,

We have had a long discussion in the ticket and to be frank it seemed to be a browser issue to us as we were able to login fine in Mozilla all the time and also in IE6 & 7 after we had enabled cookies for the site. We do not see it be an issue we the server but we the settings of your site.

I really hope that one of the ASP experts can explain this well.

Regarding the "validation of viewstate MAC failed", it is nothing but a bug in ASP which can be corrected with few changes in the script. You have have a look at the link below, it is one from the ASP .NET forums.

LINK IS HERE

[LockH]

Cannot log in with Internet Explorer today, though we can with Firefox.
Client is delighted that he can target the 10% of the market who do not use IE.