ASP.Net Authentication using <credentials> in web.config

Question

I need to publish a demo website to the web. I need to secure access to the site.

The live site with use SQL Server as the membership provider. However, for the demo site I can only publish to a simple web host and have no access to SQL Server.

I need only a single user, and they don't need option to change password etc. Therefore, I thought easiest way to achieve this would be to use the member of within the web.config. I have created as follows:

<?xml version="1.0"?>
<configuration xmlns="http://schemas.microsoft.com/.NetConfiguration/v2.0">
  <system.web>
      <authentication mode="Forms">
      <forms name="ProjectApple" loginUrl="~Login.aspx">
        <credentials passwordFormat="Clear">
          <user name="lawyer" password="Super12."/>
        </credentials>
      </forms>
    </authentication>
    <compilation debug="true"/>
  </system.web>
</configuration>

I will use SHA1 hash when I can get this working. Problem is, it recognises when I've entered an invalid password. However, when I enter the correct password I get the following:

Cannot open user default database. Login failed.
Login failed for user 'RB-T510\Rob'. 
Description: An unhandled exception occurred during the execution of the current web          request. Please review the stack trace for more information about the error and where it   originated in the code. 

Exception Details: System.Data.SqlClient.SqlException: Cannot open user default   database. Login failed.
Login failed for user 'RB-T510\Rob'.

I don't know why it's looking for SQL? Can anyone help please?

I'm using VS2010 and .Net 3.5

Many thanks,

Rob

Is it possible that the login is succeeding, but the next step (whatever page is opening) is attempting to execute sql? Could you post the rest of the web.config? — Judah Sali
– Judah Sali, Commented Mar 22, 2011 at 23:01
Do you still have the references to the Membership provider in your demo config? — Jonas
– Jonas, Commented Mar 22, 2011 at 23:25
I would post the whole config file and the whole stack trace. — steinar
– steinar, Commented Mar 22, 2011 at 23:32
It won't be too cumbersome if you want to write you own MembershipProvider which uses XML file as the datasource. You can add Username and Password field in XML file and just override the ValidateUser(username, password) method of the custom MembershipProvider. It won't be too hard to write your own MembershipProvider and the benefit of it is that you can reuse it in future too. — DotNetInfo
– DotNetInfo, Commented Mar 23, 2011 at 1:34

Dan Atkinson · Accepted Answer · 2022-12-16 10:42:17Z

4

To use forms authentication with credentials in web.config you must use FormsAuthentication.Authenticate method. Looks like you have default Login control that is trying to access membership class.

edited Dec 16, 2022 at 10:42

Dan Atkinson

11.8k14 gold badges89 silver badges116 bronze badges

answered Mar 23, 2011 at 2:18

gbs

7,2665 gold badges47 silver badges70 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

Dr. Rajesh Rolen · Accepted Answer · 2012-04-11 08:17:28Z

0

I am going to guess, based on the format of the user name in the error, that you still have a connection string in your web.config with Integrated Security=True and there is some control on the page that is opening that is requesting data from SQL.

edited Apr 11, 2012 at 8:17

Dr. Rajesh Rolen

14.3k42 gold badges111 silver badges181 bronze badges

answered Mar 23, 2011 at 2:32

Judah Sali

1,0981 gold badge7 silver badges12 bronze badges

Comments

Dan Atkinson · Accepted Answer · 2022-12-16 10:42:38Z

-1

First Check out your Authentication mode. if SQLAuthentication, Give UserId,and Password in your Connection String. Example:

<"Data source="";Initial Catalog="Dbname";UserId=sa;Password=1234">

edited Dec 16, 2022 at 10:42

Dan Atkinson

11.8k14 gold badges89 silver badges116 bronze badges

answered Apr 10, 2012 at 17:33

PCMVenkatesh

71 bronze badge

Collectives™ on Stack Overflow

ASP.Net Authentication using <credentials> in web.config

3 Answers 3

Comments

Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

3 Answers 3

Comments

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related