| Author |
 Topic  |
|
|
ptalindstrom
Starting Member
Canada
2 Posts |
 Posted - 29 September 2003 : 04:15:36
|
Thought this was similar to: http://forum.snitz.com/forum/topic.asp?ARCHIVE=true&TOPIC_ID=34873
and tried Nikkol’s fix but didn’t help.
I have a Snitz test forum MOSTLY working but I was wondering if anyone can clear up a little of my confusion on permissions for both IIS, MS SQL and how this all relates to Snitz.
To start with my config is:
- running IIS (WinXP) with NT Authorization set for my TestWeb site.
- using MS SQL for Snitz database
- Snitz ver is 3.4.03
- my connection string at the moment is:
strConnString = "Driver={SQL Server};Description=sqldemo;SERVER=work;DATABASE=master"
o as you may notice no UID or PWD given
o which I think means it connects as GUEST to SQL server – but I am not too clear on how SQL server permissions work
o originally I think I didn’t have access to Snitz tables with this connect and then I went into Enterprise Manager (SQL manager) and set Snitz table privileges up for GUEST account and it worked
Now when I log on to my web I must use valid NT account info to access the site. Once I am in, I can see the page where I link in Snitz.
If I log in as myself, Snitz knows it is me and states my SnitzUID as well as my connect UID. It realizes I am the ADMIN and gives me the link to Admin options (I have NT Authorization defined for Snitz). This is all good.
MY PROBLEM
- when I connect to web as someone else (but a valid NT user) it gives me the Snitz default page but requires me to register. When I register it puts me back to the same page but doesn’t realize I am registered.
- when I look at the FORUM_MEMBERS table it has correctly defined the new user but has not populated the M_USERNAME field
o even though it does state account = NT USERID when I do the register form
- if I reconnect to the web as this user I get the same thing – it doesn’t know who this user is and it needs me to register.
- if I manually fill in the M_USERNAME field with the NT userid that should be associated with the SnitzID (M_NAME field) then it does the right thing and knows who I am and shows me as registered.
Another Thing
- not really understanding all of this I tried setting the Admin Option – Use NT AutoLogon
- this was interesting – now when I log on as a unregistered Snitz user (but valid NT ID) I instantly (when going to Snitz default page) get the following error message:
There Was A Problem With Your Details - E-mail Address already in use, Please Choose Another
- and it has added a record for the M_NAME = NT Userid but, again without filling out M_USERNAME field
One last comment:
- at the beginning I mentioned that when I log in as myself it does know my NT useid and match that to my SnitzID (which is the Snitz administrator). The FORUM_MEMBERS table does have the record for myself filled out correctly (i.e. mapping M_USERNAME is filled in, mapping NT userid to SnitzID)
o I believe this worked correctly because it is done through the setup process (which I guess works the way I think it should) rather than the normal register process (which I don’t think is working correctly).
I am pretty sure that my issue is with some sort of simple privileges thing that I have missed – but I just don’t get it.
If anyone has any clues to all of this please comment.
Thanks,
|
|
|
Nikkol
Forum Moderator
USA
6907 Posts |
Posted - 29 September 2003 : 07:50:03
|
| It sounds more like a cookie problem to me. Try clearning your cookies, closing all browser windows, and then registering someone new. If that person is then logged in after registeration, then cookie was your problem. |
Nikkol ~ Help Us Help You | ReadMe | 3.4.03 fixes | security fixes ~ |
 |
|
|
ptalindstrom
Starting Member
Canada
2 Posts |
Posted - 30 September 2003 : 23:55:24
|
Well I deleted cookies and I thought that had fixed things – since it now worked differently.
This is what I got:
- I was logged into computer as PETER
- I logged into web as TEST
o when I go to Snitx page it already has me registered as TEST
o I checked the table and it created a new M_NAME and M_USERNAME as TEST
I thought that was kinda cool, that I didn’t even need to register, but I guess that is the NT AutoLogon feature. Of course I haven’t (as TEST) actually registered so it doesn’t know any of my profile info – but I can select profile and update.
The problem then comes with the next time I log into the web site as MARK (a valid NT user but I am still logged in to computer as PETER I am just re-loging into the web site – which is using NT authorization). This time when I go to the discussion page I get error message:
There Was A Problem With Your Details
E-mail Address already in use, Please Choose Another
Now, as before, it has generated a record for MARK but with the M_USERNAME field blank. This error message persists whenever I log in as MARK – even if I delete cookies and try again.
Final test – I now delete cookies again, go into database and delete the “busted” MARK record. Re-login in to web site as MARK. Now when I go to discussion forum I get the same thing as when I first went in as TEST. Auto login has kicked in.
So, I thought this behaviour was a little odd but possibly it is by design and it is simply a function of how the cookies work – i.e. cookies aren’t cleared when I log into web site as a different user ???
Bottom line is that I don’t think I am too worried about all of this since eventually (with production version of web site) I will not be using NT authorization but a higher level site registration which will populate snitz registration table. I am sure all will work fine in that case.
Thanks for your quick response to my original post.
Peter Lindstrom
All Analog - High Speed Design Consulting
Ottawa, ON
Voice: 613-612-1419
Email: pta@allanalog.com
Web: www.allanalog.com
|
|
|
| |
Topic |
|
|
|
Topic Locked
