W3SVC and asp.net

I ran into some problems between my test and production web servers.

TEST SERVER:
2003 Server 32bit
Default IIS setup
Default SQL setup
SELFSSL test cert
..net 2 running 32BIT

PRODUCTION SERVER:
2003 Server 64bit
NTFS locked down to prohibit WEBUSERS (IUSR/IWAM)
IIS:
not on system drive
site id is NOT 1
AppPools Enable32BitAppOnWin64 = 1 for UserType SERVER
IUSR and IWAM were placed in a WEBUSERS security group
SQL:
Data is not on system drive
startup as a user account
SERVER service among others disabled.
IPSEC to open only necessary ports.
VeriSign SSL cert
..net 2 running 32BIT
Administrator account renamed to ■

Everything works fine on the test server...
My problem occurs with the LOGINSTAUS asp control on the production server.
When I click >>Logout<< to log out a user, JS _dopostback is called on a page
that invertantely attempts to read a HTTPcontext.current.profile when there
is NONE because the user just logged out!

Value cannot be null.
Parameter name: username
Description: An unhandled exception occurred during the execution of the
current web request. Please review the stack trace for more information about
the error and where it originated in the code.

Exception Details: System.ArgumentNullException: Value cannot be null.
Parameter name: username

Source Error:


Line 293: ' 2/5/07: Get email from profile
Line 294: If profile.Email = "" Then
Line 295: MyEmail = Membership.GetUser(profile.UserName).Email
Line 296: Else
Line 297: MyEmail = profile.Email


This gets triggered on the PROD SERVER but the TEST SERVER completely omits
this and when a user logs out the login control takes him back to the login
screen and asks for USER/PW input.

What the heck is going on?

--
Message posted via WinServerKB.com
http://www.winserverkb.com/Uwe/Forums.aspx/iis-security/200703/1

.

Relevant Pages

  • Re: test environment windows 2003
    ... an authorative restore after the demote and system state restore. ... This document was prepared for the building of a copy of the production ... Remove the physical cable for the new pc and build the member server ... Master Operation roles (FSMO and the File Replication service). ...
    (microsoft.public.windows.server.active_directory)
  • Re: Homegrown synchronization
    ... copying the zip file sitting there on the server to ... It is a filecopy of the zipped backend file from the server to the ... with the server whose SyncApp zips ups the production backend file ...
    (microsoft.public.access.replication)
  • RE: how analyze malfunctioning asp.net application?
    ... a product server, correct? ... unhealthy and teh worker process will be recycled. ... production debugging in your environment. ...
    (microsoft.public.dotnet.framework.performance)
  • Re: ISA/VPN difficulty
    ... W2K/ISA/VPN server and replacing it. ... The current one (production) works fine in terms of ISA and VPN ... The new machine does everything fine EXCEPT allow clients to do ...
    (microsoft.public.isa.vpn)
  • Re: WSS 3.0 beta 2 and Vista Server 2007 Beta 7
    ... r2) machine (not in production), and work with it from there. ... server that's in production? ... I'd suggest posting to the beta newsgroup but I don't know whether to ... System.Web.HttpApplication.InitInternal(HttpContext context, ...
    (microsoft.public.sharepoint.windowsservices)