Small width layout Medium width layout Maximum width layout Small text Medium text Large text
     Search
Downloads Downloads Directory Directory Forums Forums Forge Forge Blogs Blogs        Marketplace Marketplace Careers Program Careers
Community › Forums Register  |  

  Ads  
Biz Modules provides professional business modules and solutions for DotNetNuke
 


  Sponsors  

Meet Our Sponsors

telerik
ExactTarget email software solutions
Merak Mail Server
WebSecureStores -- ASP.NET & DotNetNuke Hosting Solutions
FCKeditor Project
Salaro -- Skins and more
 


DotNetNuke Forums
 
  Forum  General DotNetN...  Configure It! (...  Revealing Unhandled Error Page!!
Previous Previous
 
Next Next
New Post 7/1/2008 11:34 AM
Unresolved
User is offline Kellie
70 posts
10th Ranked


Revealing Unhandled Error Page!! 
Modified By Kellie  on 7/1/2008 1:35:26 PM)

I occasionally get an error message that contains the below message. It includes the domain and the server name, which suggests a whole slew of problems exist there, but this raises some security concerns. I've been trying to find where this error message is constructed to take out this line that prints the server account name. Any idea where this is located?
(Even better, anyone seen this error before with their portal?)

 

Unhandled Error

Error Details

File  
Error   Login failed for user 'DOMAIN\SERVERNAME$'.
 
New Post 7/2/2008 8:41 AM
User is offline Kellie
70 posts
10th Ranked


Re: Revealing Unhandled Error Page!! 

I have searched through the application and found several error/execption pages, but none that appear to construct one like the above.

Can anyone help? :)

 
New Post 7/7/2008 9:05 AM
User is offline Brian Lovett
22 posts
10th Ranked


Re: Revealing Unhandled Error Page!! 

I am interested in this as well.  Has anyone thought of a solution?

 
New Post 8/19/2008 2:52 PM
User is offline cathal connolly
2829 posts
www.cathal.co.uk
5th Ranked










Re: Revealing Unhandled Error Page!! 

it's not a page, it's actually a function of the logging provider. If theres an error the logging provider tries to log it. By default the logging provider uses the database (DBLoggingProvider in your web.config), so if the database is not available the error can't be logged. In this case the error is written to the output stream so is visible. The actual error text comes from the exception, in this case sqlexception, which shows the failed user. This information is not hugely useful to anyone as it's a windows authenticated user, so theres not an easy way for potential hackers to use the details. However if you want to remove these messages edit Library\Components\Shared\HtmlUtils.vb and update the WriteError function so it doesn't write out the message parameter.

Cathal

 
Previous Previous
 
Next Next
  Forum  General DotNetN...  Configure It! (...  Revealing Unhandled Error Page!!
 


Forum Policy

These Discussion Forums are dedicated to the discussion of the DotNetNuke Web Application Framework.

For the benefit of the community and to protect the integrity of the project, please observe the following posting guidelines:

1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DotNetNuke.
2. Discussion or promotion of DotNetNuke product releases under a different brand name are strictly prohibited.
3. No Flaming or Trolling.
4. No Profanity, Racism, or Prejudice.
5. Site Moderators have the final word on approving/removing a thread or post or comment.
6. English language posting only, please.

 


Data Springs Inc. - Module Development
Data Springs is a leader in the DNN community offering high quality modules, custom module development, enhancements to the DNN core product and overall DNN support.
www.datasprings.com
XCESS expertise center b.v.
Custom made modules and complete solutions for the DNN framework. Maatwerk modules en complete webtoepassingen gebaseerd op het DNN framework.
www.xcess.nl
EMAS Pro
Strategic Enrollment Management Software for Higher Education Recruitment, Retention and Financial Aid
www.emaspro.com

DotNetNuke Corporation   Terms Of Use  Privacy Statement
DotNetNuke®, DNN®, and the DotNetNuke logo are trademarks of DotNetNuke Corporation
Hosted by MaximumASP