Foms Authentication questions

I have been working through the quickstart tutorials at www.asp.net

Everything was going very well until I got the section : Creating a Site
Navigation Hierarchy > Using the Site Navigation API > Site Navigation
Security

The documentation and example for this section state that forms
authentication is being setup to use the credentials section of web.config
to authenticate users and that roles are assigned programmatically in
Application_PostAuthenticateRequest.
I have set things up according to the example but anytime I try to log in
the whole process hangs trying to access SQL server to do the
authentication. Other docs state that SqlServer is the default store for
authentication/role data. Is the example completely bogus in stating that
the web.config/Application_PostAuthenticateRequest data can be used or is
there some configuration setting somewhere that they failed to mention that
needs to be set in order to get this to work ?

Additionally, I set a breakpoint in Application_PostAuthenticateRequest and
am really confused because after I enter username & password & hit submit ,
this method is called, IsAuthenticated is false, and then SQL server is
accessed - shouldn't the attempt to authenticate against SQL server happen
BEFORE Application_PostAuthenticateRequest is called ?

Gerry



.

Relevant Pages

  • How can you tell is current user is authenticated within an ascx?
    ... I have a user control that I use for header graphics and navigation. ... current users Name value from the Authentication Ticket. ... Dim objUserIdentity As FormsIdentity ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: How can you tell is current user is authenticated within an ascx?
    ... > I have a user control that I use for header graphics and navigation. ... > current users Name value from the Authentication Ticket. ... > Dim objUserIdentity As FormsIdentity ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Windows Authentication in asp.net 2005 to SQL Server?
    ... If the domains do not trust each other, Windows authentication is not going ... Basic authentication sometimes makes the need for Kerberos delegation go ... generic account to do the backend data stuff on our SQL Server. ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: I dont want to re-invent the Login/Login Wheel - Help with utilities
    ... Yes, if you use .NET1.1, there isn't built-in login control, and more importanltly there isn't ready-to-use membership component to use. ... the membership provider uses SQL Server or SQL Server Express. ... We feel that having the capability to force password change would be a better benefit in securing our application and data access. ... Both Windows authentication and authorization wolud be be fine if we wanted the world to have access to our application data, but not very intuitive for maintaining integrity over our data. ...
    (microsoft.public.vstudio.general)
  • RE: IIS (ASP) -> SQLServer Authentication Issue
    ... I understand that you'd like to use IIS Intergration authentication in the ... and ASP "impersonates" authencitaed users to access SQL Server on ... only kerberos authentication allows double-hops from clients ...
    (microsoft.public.sqlserver.security)