Small width layout Medium width layout Maximum width layout Small text Medium text Large text
     Search
Downloads Downloads Directory Directory Forums Forums Forge Forge Blogs Blogs        Marketplace Marketplace Careers Program Careers
Community › Forums Register  |  

GoGrid - Deploy a Windows Server in the Cloud in Minutes!
  Need Help?  
Professional technical support for DotNetNuke is available from DotNetNuke Corporation.
 


  Ads  
OnyakTech
 


  Sponsors  

Meet Our Sponsors

Click here to go to dev.live.com for Windows Live developer resources
SteadyRain
DataSprings - Great Ideas. Always Flowing.
R2integrated - formerly bi4ce
Jango Studios - Skins, Modules and Hosting for DotNetNuke
eUKhost.com is commited to offer exceptional UK Windows Web Hosting solutions with quality 24x7 technical support.Our plans support ASP.Net, ASP, ASP.NET Ajax extensions, XML, MSSQL, MySQL, PHP,DNN, multiple domains and Shared SSL as standard.
 


DotNetNuke Forums
 
  Forum  DotNetNuke® Pro...  Authentication ...  Can LiveID be customized for my needs?
Previous Previous
 
Next Next
New Post 6/4/2008 1:18 AM
User is offline iadalang
81 posts
10th Ranked


Can LiveID be customized for my needs? 

While using Windows LiveID,  I need to (i) disable the Standard Login on the DNN login page in order for it to display only the LiveID login option (I guess this can easily be done by disabling the standard DNN login in host settings), (ii) to force Windows LiveID to go through the secure login by default (not the standard LiveID login) and (iii) to force an auto logout from DNN as well as Windows Live whenever the DNN Logout link is clicked (Currently, we have to logout from DNN as well as LiveID, necessitating 2 logouts with LiveID. I'd like to know whether (ii) and (iii) are possible and if yes, how?

 
New Post 6/4/2008 7:49 AM
User is offline Mike Horton
2924 posts
dnn.gmss.org
5th Ranked






Re: Can LiveID be customized for my needs? 

I'm not as well versed in the LiveID code as I should be and I think Charles is away so I don't know how soon I can get an answer for your questions for you.

For 1. you can disable the Standard DNN login on the Admin->Authentication page.
2. Do you mean on a secure page? If so, then if you create a secure page and place the login on there that should do the trick.
3. I'm not sure if this would require a core change or if you could override the Logout click to include LiveID.

 
New Post 6/5/2008 1:12 AM
User is offline iadalang
81 posts
10th Ranked


Re: Can LiveID be customized for my needs? 


Thanks, Mike. Yes I suppose Charles is away, but I hope he'll respond when he's back.

First off, I forgot to say that my DNN portal needs only admin and host accounts. No other users will be required now or in the future. So what I wanted was to secure the transmission of these 2 accounts'  passwords using the LiveID option.

I consider problem 1 as solved.

About problem 2- Let me clarify -- When I login using the LiveID option, I first get a warning that I'm about to get redirected to a connection that's not secure. Don't know whether this has any security implications, but I hope not! I click OK on the warning dialog. I'm then taken to the Microsoft LiveID site (http://login.live.com) and there I see a message like "Windows Live is not affiliated with www.dotnetnuke.com and will share with it only an anonymous ID" above the Signin section (although what this means, I've yet to find out). Now, below the Standard Signin there's a link, viz., Use enhanced security <https://login.live.com)

What I desired is this : (a) When I login to DNN using LiveID, I want to be redirected to the enhanced security (https://login.live.com) instead of to the standard Signin page (http://login.live.com) AND (b) I also want the things below to get disabled (at least make them invisible) on the secure Signin page :

Forgot your password,
Remember me on this computer,
Remember my password and
Use Standard Security.

I suppose there are ways of doing (a) from within DNN. I'd be glad if someone out there can tell me how.
As regards to (b), should I have to contact Microsoft?

About my problem No.3 - Well, I'm having the same questions as you!

 
New Post 6/5/2008 7:18 AM
User is offline Brandon Haynes
517 posts
everysport.net
8th Ranked


Re: Can LiveID be customized for my needs? 

Hi Iadalang,

The LiveId site POSTs the login information to a SSL-enabled page (at https://login.live.com/ppsecure/post.srf).  Thus, credentials are never passed across an unsecured connection, despite the fact that the initial login page is served via unsecured HTTP.  This is a standard, secure setup and you should have no concerns about it.  I am unsure if the provider supports initial redirection to the LiveId site via HTTPS -- if it does not, I would suggest logging it as an enhancement in Gemini at http://support.dotnetnuke.com.  Again, however, you really do not need to be initially GET-HTTPS to be secure.  It's only the POST that matters.

I am not aware of a way to synchronize logouts between DNN's forms authentication and the LiveId site.  DNN does not support a Logout function at the provider level (I've requested this at http://support.dotnetnuke.com/issue/ViewIssue.aspx?id=4532&PROJID=2).  However, such a call would never be guaranteed to be executed, so it would only cover "some" cases at best.

You might be able to implement SOME synchronization via a modification to the Logout skinobject, but this would only cover explicit logouts.  You're probably just going to have to live with some DNN-LiveId decoupling.

Hope this helps!

Brandon


Brandon Haynes
BrandonHaynes.org
 
New Post 6/6/2008 5:32 AM
User is offline iadalang
81 posts
10th Ranked


Re: Can LiveID be customized for my needs? 

This question might be more appropriately directed at Microsoft but I'm sure you can also explain - what's the difference between Standard login and Enhanced login if both were to go through an SSL-enabled channel anyway.

Actually what I wanted was to force admin/host accounts of DNN to login to LiveID only through the Enhanced Security option. This could be possible if the DNN provider supports redirection to this option as you said, but that's not enough. I also need to disable the option to click on Standard Security link as well as the other options I mentioned when the DNN user lands on Windows Live. But I guess that's beyond DNN's control?

 

 
Previous Previous
 
Next Next
  Forum  DotNetNuke® Pro...  Authentication ...  Can LiveID be customized for my needs?
 


Forum Policy

These Discussion Forums are dedicated to the discussion of the DotNetNuke Web Application Framework.

For the benefit of the community and to protect the integrity of the project, please observe the following posting guidelines:

1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DotNetNuke.
2. Discussion or promotion of DotNetNuke product releases under a different brand name are strictly prohibited.
3. No Flaming or Trolling.
4. No Profanity, Racism, or Prejudice.
5. Site Moderators have the final word on approving/removing a thread or post or comment.
6. English language posting only, please.

 


DNN Outsourcing
50% more affordable services comparing to Western Europe and US: Custom DotNetNuke module development, skins, consulting, maintainence... Over 15.000 working hours of experience in custom DotNetNuke Solutions development, 8 years experience in outsourcing, excellent references!
www.dnnoutsourcing.com
Expressnet - DotNetNuke Hosting
Expressnet provide premium quality ASP.NET Web Hosting. We specialise in Windows based products including ASP.NET and Microsoft SQL Server. We offer fantastic value packages for DotNetNuke hosting. We also offer free asp.net web hosting
www.expressnet.com.au
Softech Development, Inc.
We help your business work smarter with DotNetNuke. Whether you need a new implementation, a custom module or skin for an existing implementation, or integration with your business processes, Softech has the experience and expertise to make it happen.
www.softechdevelopment.com

DotNetNuke Corporation   Terms Of Use  Privacy Statement
DotNetNuke®, DNN®, and the DotNetNuke logo are trademarks of DotNetNuke Corporation
Hosted by MaximumASP