Solved

Asp.net Login control customize error message

Posted on 2010-11-09
8
1,063 Views
Last Modified: 2012-05-10
I am trying to customize the login control so when the user enters a bad username or password it will show a message in the label below, the problem is that this is not firing up, and instead the page is refreshed (when incorrect login info is entered and I see  asp.net "

message Error authenticating user. Logon failure: unknown user name or bad password"

How can I show a pop up java message or at least tell my label to show the error?

I am using the following event but doesnt seem to work? any ideaS?
Protected Sub Login1_LoginError(ByVal sender As Object, ByVal e As System.EventArgs) Handles Login1.LoginError

        'There was a problem logging in the user


        'Display the failure message in a client-side alert box
        ClientScript.RegisterStartupScript(Me.GetType(), "LoginError", _
        String.Format("alert('{0}');", Login1.FailureText.Replace("'", "\'")), True)



        'See if this user exists in the database
        Dim userInfo As MembershipUser = Membership.GetUser(Login1.UserName)

        If userInfo Is Nothing Then
            'The user entered an invalid username...
            lblLoginErrorDetails.Text = "There is no user in the database with the username " & Login1.UserName
        Else
            'See if the user is locked out or not approved
            If Not userInfo.IsApproved Then
                lblLoginErrorDetails.Text = "Your account has not yet been approved by the site's administrators. Please try again later..."
            ElseIf userInfo.IsLockedOut Then
                lblLoginErrorDetails.Text = "Your account has been locked out because of a maximum number of incorrect login attempts. You will NOT be able to login until you contact a site administrator and have your account unlocked."
            Else
                'The password was incorrect (don't show anything, the Login control already describes the problem)
                lblLoginErrorDetails.Text = String.Empty
            End If
        End If


        ''Display the failure message in a client-side alert box
        'ClientScript.RegisterStartupScript(Me.GetType(), "LoginError", _
        'String.Format("alert('{0}');", Login1.FailureText.Replace("'", "\'")), True)

    End Sub

Open in new window

0
Comment
Question by:TonyReba
  • 5
  • 3
8 Comments
 
LVL 41

Expert Comment

by:guru_sami
ID: 34094689
what is the code executed prior to that?
0
 
LVL 9

Author Comment

by:TonyReba
ID: 34094887
is a function to authenticate
Public Function IsAuthenticated(ByVal domain As String, ByVal username As String, ByVal pwd As String) As Boolean

        Dim domainAndUsername As String = domain & "\" & username
        Dim entry As DirectoryEntry = New DirectoryEntry(_path, domainAndUsername, pwd)

        Try
            'Bind to the native AdsObject to force authentication.			
            Dim obj As Object = entry.NativeObject
            Dim search As DirectorySearcher = New DirectorySearcher(entry)

            search.Filter = "(SAMAccountName=" & username & ")"
            search.PropertiesToLoad.Add("cn")
            Dim result As SearchResult = search.FindOne()

            If (result Is Nothing) Then
                Return False
            End If

            'Update the new path to the user in the directory.
            _path = result.Path
            _filterAttribute = CType(result.Properties("cn")(0), String)

        Catch ex As Exception
            Throw New Exception("Error authenticating user. " & ex.Message)
        End Try

        Return True
    End Function

Open in new window

0
 
LVL 41

Expert Comment

by:guru_sami
ID: 34094920
Ok you are getting this message:

 Error authenticating user. Logon failure: unknown user name or bad password"

That is from this catch-block:

Catch ex As Exception
            Throw New Exception("Error authenticating user. " & ex.Message)
        End Try

So you will never hit the Login_Error code.

Plus, since you are trying to authenticate against AD, what you are doing inside LoginError handler doesn't make sense because in there you are trying to use built-in memebership provider.
0
Courses: Start Training Online With Pros, Today

Brush up on the basics or master the advanced techniques required to earn essential industry certifications, with Courses. Enroll in a course and start learning today. Training topics range from Android App Dev to the Xen Virtualization Platform.

 
LVL 9

Author Comment

by:TonyReba
ID: 34095036
So how can I solve this, and have a customize error message in the login form?

Do I remove the try catch block?
0
 
LVL 9

Author Comment

by:TonyReba
ID: 34095053
can I just redirect here?

 If (result Is Nothing) Then
                Return False
            End If
0
 
LVL 41

Accepted Solution

by:
guru_sami earned 500 total points
ID: 34095102
So how can I solve this, and have a customize error message in the login form?
--> I am not sure how you would trap those errors with custom AD authentication

Do I remove the try catch block?
--> Modify catch block like this and see if it helps.
      Catch ex As Exception
           Return False
        End Try
0
 
LVL 9

Author Comment

by:TonyReba
ID: 34095127
Can I only refresh the login page when the ad username or password doesnt match?
0
 
LVL 9

Author Comment

by:TonyReba
ID: 34095142
upss I am an idiot,  that worked,,

Throw New Exception("Error authenticating user. " & ex.Message)

was messing everything!!



0

Featured Post

Courses: Start Training Online With Pros, Today

Brush up on the basics or master the advanced techniques required to earn essential industry certifications, with Courses. Enroll in a course and start learning today. Training topics range from Android App Dev to the Xen Virtualization Platform.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Shoutout to Emily Plummer (http://www.experts-exchange.com/members/eplummer26.html) for giving me this article! She did most of it, I just finished it up and posted it for her :)    Introduction In a previous article (http://www.experts-exchang…
International Data Corporation (IDC) prognosticates that before the current the year gets over disbursing on IT framework products to be sent in cloud environs will be $37.1B.
Viewers will learn one way to get user input in Java. Introduce the Scanner object: Declare the variable that stores the user input: An example prompting the user for input: Methods you need to invoke in order to properly get  user input:
The viewer will receive an overview of the basics of CSS showing inline styles. In the head tags set up your style tags: (CODE) Reference the nav tag and set your properties.: (CODE) Set the reference for the UL element and styles for it to ensu…

776 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question