Windows authentication..... it doesn't work!
I upgraded to 2.0.3 from 1.9.1
Despite the settings being correct according the manual, Gemini insists on logging me in via the username password route. This was working ok before I performed the upgrade. Is there a trick I've missed or overlooked?
Cheers,
Paul
|
spire
· 1 |
|
| Thursday, March 9, 2006, 1:00:36 PM | |
0
|
Did you change the authentication tag in the web.config file to Windows? |
||||
|
|||||
0
|
Hi Mark,
Yes, the authenication method is set to windows.
The directory security is set to Anonymous, Windows Authenication |
||||
|
|||||
0
|
Please untick the directory security in IIS. If that does not help then please paste you web.config file contents. |
||||
|
|||||
0
|
Can you please elaborate on what I'm exactly unticking and where? (windows 2003) |
||||
|
|||||
0
|
Config as follows
<?xml version="1.0" encoding="Windows-1252" ?> "On" Always display custom (friendly) messages |
||||
|
|||||
0
|
Your web.config file seems to be ok. Please go to IIS, Gemini virtual directory, properties, directory security nad make sure that "Anonymous Access" is not ticked. |
||||
|
|||||
0
|
OK, I did that - and Windows Authenication seems to be ok - to a point. However,. one user is reporting that he cannot get in the system with his credentials, despite me having set his login id correctly. He's treated as a viewer only in all projects, regardless of the settings. This suggests that he's not identified on the domain correctly somehow. Have you experienced this problem before?
Thanks for your assistance so far! Paul
|
||||
|
|||||
0
|
Are you allowing anonymous access? If so then either allow user regisdtration or deny anonymous access. That way you can see the identity of this user (via registration). |
||||
|
|||||
0
|
I have just upgraded Gemini from 2.0.2 to 2.0.3 and I have encountered the same problem with Windows authentication like Paul. That's why I intended to participate in this thread. Working with Gemini now only works if the registered users log on with their complete user names consisting of the domain name and the Windows user name (e.g. gef-edv\eb). From what I saw in the users table in the database this is how the user names are stored. Unfortunately, before upgrading I only made a backup of the contents of the Gemini virtual directory but not of the settings of this directory. Besides from what has been said in the previous posts (disabling anonymous user in IIS) might there be another setting which was changed from 2.0.2 to 2.0.3? Are there other tags in web.config apart from the authentication tag which control authentication? (The authentication tag is identical to Paul's, anonymous access and user registration is both set to YES in web.config) Thanks for any help in advance. Krischan |
||||
|
|||||
0
|
Just for the record, I upgraded from 1.9.1 to 2.0.3 I originally installled 1.9.1 manually rather than using the installer. For 2.0.3 I did the same. I had the issues above, so decided to use the installer to install 2.0.3. Just like Krischan, people are having to log in as their full domain names. Windows Authentication worked for SOME people (like me), but not for one or two other users.
|
||||
|
|||||
0
|
We seem to be having the same problem, some users are having no trouble at all, and others can only view projects. |
||||
|
|||||
0
|
Exactly..... glad to see I'm not the only person suffering from this. |
||||
|
|||||
0
|
Are you both still seeing the login box? Can you post your system details (OS, IIS etc..)? |
||||
|
|||||
0
|
Unless you do not tick the 'remember login' checkbox the login box appears each time a user starts a Gemini session. After deleting the cookies the login appears again, of course. Our Gemini installation runs on
Krischan |
||||
|
|||||
0
|
Krischan, Did you change the authentication tag to Windows? <authentication mode="Windows"> Aslo, please make sure that Gemini runs using.NET 1.1 |
||||
|
|||||
0
|
The server set up is: |
||||
|
|||||
0
|
Meanwhile I have set the key ShowUserRegistrationLink to NO and: Single-sign-on resumed working again! So at least for those couple of users who I asked to start up Gemini on their browsers no logon was required anymore. I hope that this accounts for all users as Paul states that this issue occurs only for a few users not for all. Krischan
PS: Coming back to your post, Mark: My authentication tag looked exactly like in your code snippet. Furthermore the Gemini virtual directory is configured to use .NET 1.1. |
||||
|
|||||
0
|
My setup is Win2003SP1, fully patched. 2GBRam Framwork is 1.1 and 2.0 installed.
I had exacrtly the same errors in my log as above Session loss detected etc....
|
||||
|
|||||
0
|
I was having the exact same problems as those in this thread, until i made the following change, now everything is working as expected with windows authentication. <!-- AllowAnonymousUsers- Controls if anonymous users can access Gemini (e.g. no logon required)
I also turned off the anonnymous login option in IIS. Also, just a tip - make sure everyone is actually assigned to a project, and has some rights in that project! |
||||
|
|||||
0
|
We have now made this change: |
||||
|
|||||
0
|
I've now done the same and can report that Windows Authentication is working for the person that had a problem.
However, I am getting a lot of Session loss messages in the Error Log |
||||
|
|||||
0
|
Me too. |
||||
|
|||||
0
|
From the user's view Gemini has seemed to work fine again after I have set ShowUserRegistrationLink to No. Nevertheless the error log shows the same error messages the others posted in this thread. |
||||
|
|||||
0
|
From one day to the other the single-sign-on stop working again. I have then set the AllowAnonymousUsers key to no and things seem to work again. Nevertheless I have got the impression that version 2.0.3 is not very stable (see the e.g. huge error logs). I am therefore missing a final statement by Countersoft whether this issue is classified as a bug and if so whether and when it is intended to provide a bug fix for this. Thanks, Krischan |
||||
|
|||||
0
|
I'm seeing problems running on a Dual Xeon, 2G RAM, Windows 2003 Server, IIS 6, SQL Server Std 2003, .NET 1.1 Very frustrating - on one site used worldwide, I had a System Error Log several hundred (Word) pages long after just a few hours. |
||||
|
|||||
0
|
We are looking into this. We can not replicate this at the moment but are doing our best to try and track it down. We will keep you updated. If you want to disable these error (session loss detected) you can change the gemini_logerror stored procedure to not log these.
|
||||
|
|||||
0
|
Here's another user having problems. Upgraded from 2.0.1 to 2.0.3. Was using Windows authentication previously, but now it doesn't work. When I tried to register, it showed my username and password as domainname\username in lower case, but the usernames and passwords were stored as DOMAINNAME\Username. <tounge in cheek>Try: if Request.Credentials.CurrentUser.ToUpper()==DatabaseCredentials.ToUpper() and see if that fixes the problem.</tounge in cheek> We've rolled the installation back to version 2.0.1 and it is now working again. Please fix this error. |
||||
|
|||||
0
|
OK - The problems I was having was because of MY operator error. Thanks to Countersoft support for providing me w/ debug binaries which populated the error logs w/ a little more information. My situation (intranet) is that over time (over 6 months), our network folks were slowly migrating user's Authentication (domain) servers. I had modified gemini_getuserid() SPROC to manage a one-time change without creating a new (disruptive) user entry. During this upgrade, I wrote scripts to "fix" all the tables. I also "share" the 'users' table between sites (through a view). I'd forgotten to finish the table fix-ups on one of the sites - this caused most of my problems. We're still looking at error logs, but now things are MUCH better. Stay tuned. Yarko |
||||
|
|||||
0
|
[QUOTE] When I tried to register, it showed my username and password as domainname\username in lower case, but the usernames and passwords were stored as DOMAINNAME\Username. [/QUOTE] Just a point of data: In my server, this does not affect select/where clauses - select * from dbo.users where username like 'domainname\%' would find both, and windows authentication works. Regards, Yarko |
||||
|
|||||
0
|
Guys, As you can see from the posts above (yarkot), we are working closely with a customer to fix these issues. We think that we have found the problem but would like to monitor things a bit more. We hope to release a fix for this next week. |
||||
|
|||||
0
|
Yes, thanks - things are looking good (my 2.0.3 sites w/o fixes still has some no user identity error logs; sites w/ fix+debug binaries completely quiescent on this), but I've asked Countersoft if they'd wait until I get positive confirmation from the several particular users worldwide. Start of business next week, I should have response to my requests, and will share error logs, user feedback w/ Gemini folks. Regards, Yarko
|
||||
|
|||||
0
|
Has a fix been created for this? We are also using version 2.0.3 and experiencing intermittant loss of user rights. I've tried all the things mentioned in the previous posts.
Thanks |
||||
|
|||||
0
|
Hi Marta, We are working on a fix for this. We have a client who has kindly offered his help and we are working to resolve this issue. We should have the fix out next week. |
||||
|
|||||
0
|
Is there an update on this fix? We are experiencing the same syptoms with v2.0.3. Thanks, Phil |
||||
|
|||||
0
|
2.0.4 release will be out by Friday the 12th of May. |
||||
|
|||||
0
|
I've been working with them over the past weeks, and it seems things are worked out, including issue w/ authentication. I am going to check out a release candidate starting today/tonight to make sure things continue to be ok (we have over 1000 users). |
||||
|
|||||
0
|
This may not be related to the problems others have on this thread, but anyway. We are using gemini 1.9.1 and I had a problem that gemini seemed to forget me, even though I checked the "remember me" option when logging in. I found out that this happens when my link points directly to http://server/gemini/Main.aspx instead of http://server/gemini/. After removing Main.aspx from my favorite fixed my problem. |
||||
|
|||||
0
|
OK, so I am experiencing the same problems that I see many people having here, and I've tried everything I see people here have also tried. However, I have found in our case one thing that is interesting I haven't seen mentioned yet. If I add an account to Gemini and I don't specify a password that user can log in just fine using their domain account password. However, if I give the user a password, then try and unset the password so they can use their domain account password, I'm screwed. First, the profile manager doesn't let you do it. Second, when you do set USERS.PWD to NULL manually in the database, you just can't log in at all, forcing you to reset the password to something. |
||||
|
|||||
0
|
Gemini 2.0.4 has been released now: http://community.countersoft.com/forums/thread/1420.aspx |
||||
|
|||||
0
|
OK, well I have installed the upgrade and it hasn't resolved the problem. |
||||
|
|||||
0
|
The behaviour you describe sounds suspiciously like you have anonymous access still allowed. Check some of the earlier posts in this thread. SOME password is required by gemini, but ignored for win authentication - you can ignore that part of it. If you're still having problems, you might want post the authentication part of your web.config here... I remember something that was not completely intuitive (and that had changed since 1.9.1) ....
|
||||
|
|||||
0
|
"SOME password" is not required. I can add a user and not provide a password -- it's currently the only way I can add users and have them use their AD account password. |
||||
|
|||||
0
|
Your authentication section is missing: <authentication mode="Windows"> <forms name="Gemini204" loginUrl="Default.aspx" timeout="60" path="/"> </forms> </authentication> |
||||
|
|||||




