Unable to login

This forum is only for questions or discussions about working with the mojoPortal source code in Visual Studio, obtaining the source code from the repository, developing custom features, etc. If your question is not along these lines this is not the right forum. Please try to post your question in the appropriate forum.

Please do not post questions about design, CSS, or skinning here. Use the Help With Skins Forum for those questions.

This forum is for discussing mojoPortal development

This forum is only for questions or discussions about working with the mojoPortal source code in Visual Studio, obtaining the source code from the repository, developing custom features, etc. If your question is not along these lines this is not the right forum. Please try to post your question in the appropriate forum.

You can monitor commits to the repository from this page. We also recommend developers to subscribe to email notifications in the developer forum as occasionally important things are announced.

Before posting questions here you might want to review the developer documentation.

Do not post questions about design, CSS, or skinning here. Use the Help With Skins Forum for those questions.
This thread is closed to new posts. You must sign in to post in the forums.
3/26/2015 12:53:00 AM
Gravatar
Total Posts 13

Unable to login

Till yesterday everything worked fine. But when I generated the new machine key through IIS and updated in web.config. I am not able to login to mojo site. 

I also tried registering new user  but still the problem persists.

Any help friends ?

 

Thanks

AV

3/26/2015 3:35:47 AM
Gravatar
Total Posts 13

Re: Unable to login in GoDaddy

Till yesterday everything worked fine. But when I generated the new machine key through IIS and updated in web.config. I am not able to login to mojo site. 

I also tried registering new user  but still the problem persists.

The problem is in GoDaddy servers. In local it works fine. I tried debugging code locally connecting godaddy database.

 

Any help friends ?

 

Thanks

AV

3/26/2015 8:17:36 AM
Gravatar
Total Posts 13

Re: Unable to login

More information.

a. We have hosted one application in Arvixe.

b. The same application we have deployed to GoDaddy but with different machine key (generated through local IIS).

c. When we register new users, the page is redirected to login page without logged-in using user's credentials however the user details is correctly stored in database.

d. And when we try to logged in using new user credentials nothing happens.

e. We also try to generate machine key through Site-Settings->Security Advisor but we didn't find any key generator. It only shows 

green color right tick mark icon.

 

Please suggest.

 

Thanks

AV

 

3/26/2015 9:02:39 AM
Gravatar
Total Posts 108
Community Expert

Re: Unable to login

Hi probably you have your psw stored as encrypted, so changing the machinekey make the psw don't match. To get into the web again replace the machinekey with the old one and then change your preference for psw to plain text before putting back the new machine key.

 

 

3/26/2015 9:06:33 AM
Gravatar
Total Posts 13

Re: Unable to login

But it should allow atleast new user to login, right? And it correctly stores the user details in database. The current setting is plain text.

   

3/26/2015 11:25:58 AM
Gravatar
Total Posts 18439

Re: Unable to login

I suggest also go away from the site and clear all web browser cookies (it won't clear the cookie if the site is currently open in the browser).

Even with clear text and hashed password the machine key is used to encrypt the authentication token in the cookie so you need to clear the cookie and get a new one.

With encrypted passwords the machine key is also used in the encryption so it will lock out users if you change the machine key with encrypted passwords. Generally once you have a custom machine key you should never change it when using encrypted password unless you think it has been compromised, in which case you should change to clear text first, then change the machine key, then change back to encrypted. Still even then it is possible some user rows won't be corrected especially if it is a lot of rows, it could time out. For this reason I think hashed is the best way to keep thing secure and reliable even if the machine key is later changed.

The built in machine key generator is only shown if the current machine key is the default machine key which is in our source code and public and therefore should never be used in production. You can use a different copy of mojoportal on a local dev machine to generate machine keys, it does not matter what machine is used to generate one.

3/26/2015 12:54:33 PM
Gravatar
Total Posts 13

Re: Unable to login

Hi Joe, Thanks for the reply. But I do not understand one thing, the old users were locked out if machine key is changed. But at-least new registered user should be able to successfully logged in. Also only one user which was created before machine key is changed is able to successfully logged in as administrators.

As you suggested I also cleared cookie, temp file, history but no help.

 

3/26/2015 1:07:28 PM
Gravatar
Total Posts 18439

Re: Unable to login

sounds like something is blocking the cookie to me. are you able to login if you restore the old machine key?

beware of things like godaddy url forwarding or url masking or other url tricks they may provide, with those things they host your site inside a frame from the main domain but the site is inside the a different domain and only the outer frame page is really in the domain, and that kind of thing prevents a cookie from being set

You must sign in to post in the forums. This thread is closed to new posts.