Solved

Asp.net Login control customize error message

Posted on 2010-11-09
8
1,057 Views
Last Modified: 2012-05-10
I am trying to customize the login control so when the user enters a bad username or password it will show a message in the label below, the problem is that this is not firing up, and instead the page is refreshed (when incorrect login info is entered and I see  asp.net "

message Error authenticating user. Logon failure: unknown user name or bad password"

How can I show a pop up java message or at least tell my label to show the error?

I am using the following event but doesnt seem to work? any ideaS?
Protected Sub Login1_LoginError(ByVal sender As Object, ByVal e As System.EventArgs) Handles Login1.LoginError



        'There was a problem logging in the user





        'Display the failure message in a client-side alert box

        ClientScript.RegisterStartupScript(Me.GetType(), "LoginError", _

        String.Format("alert('{0}');", Login1.FailureText.Replace("'", "\'")), True)







        'See if this user exists in the database

        Dim userInfo As MembershipUser = Membership.GetUser(Login1.UserName)



        If userInfo Is Nothing Then

            'The user entered an invalid username...

            lblLoginErrorDetails.Text = "There is no user in the database with the username " & Login1.UserName

        Else

            'See if the user is locked out or not approved

            If Not userInfo.IsApproved Then

                lblLoginErrorDetails.Text = "Your account has not yet been approved by the site's administrators. Please try again later..."

            ElseIf userInfo.IsLockedOut Then

                lblLoginErrorDetails.Text = "Your account has been locked out because of a maximum number of incorrect login attempts. You will NOT be able to login until you contact a site administrator and have your account unlocked."

            Else

                'The password was incorrect (don't show anything, the Login control already describes the problem)

                lblLoginErrorDetails.Text = String.Empty

            End If

        End If





        ''Display the failure message in a client-side alert box

        'ClientScript.RegisterStartupScript(Me.GetType(), "LoginError", _

        'String.Format("alert('{0}');", Login1.FailureText.Replace("'", "\'")), True)



    End Sub

Open in new window

0
Comment
Question by:TonyReba
  • 5
  • 3
8 Comments
 
LVL 41

Expert Comment

by:guru_sami
ID: 34094689
what is the code executed prior to that?
0
 
LVL 9

Author Comment

by:TonyReba
ID: 34094887
is a function to authenticate
Public Function IsAuthenticated(ByVal domain As String, ByVal username As String, ByVal pwd As String) As Boolean



        Dim domainAndUsername As String = domain & "\" & username

        Dim entry As DirectoryEntry = New DirectoryEntry(_path, domainAndUsername, pwd)



        Try

            'Bind to the native AdsObject to force authentication.			

            Dim obj As Object = entry.NativeObject

            Dim search As DirectorySearcher = New DirectorySearcher(entry)



            search.Filter = "(SAMAccountName=" & username & ")"

            search.PropertiesToLoad.Add("cn")

            Dim result As SearchResult = search.FindOne()



            If (result Is Nothing) Then

                Return False

            End If



            'Update the new path to the user in the directory.

            _path = result.Path

            _filterAttribute = CType(result.Properties("cn")(0), String)



        Catch ex As Exception

            Throw New Exception("Error authenticating user. " & ex.Message)

        End Try



        Return True

    End Function

Open in new window

0
 
LVL 41

Expert Comment

by:guru_sami
ID: 34094920
Ok you are getting this message:

 Error authenticating user. Logon failure: unknown user name or bad password"

That is from this catch-block:

Catch ex As Exception
            Throw New Exception("Error authenticating user. " & ex.Message)
        End Try

So you will never hit the Login_Error code.

Plus, since you are trying to authenticate against AD, what you are doing inside LoginError handler doesn't make sense because in there you are trying to use built-in memebership provider.
0
 
LVL 9

Author Comment

by:TonyReba
ID: 34095036
So how can I solve this, and have a customize error message in the login form?

Do I remove the try catch block?
0
Enabling OSINT in Activity Based Intelligence

Activity based intelligence (ABI) requires access to all available sources of data. Recorded Future allows analysts to observe structured data on the open, deep, and dark web.

 
LVL 9

Author Comment

by:TonyReba
ID: 34095053
can I just redirect here?

 If (result Is Nothing) Then
                Return False
            End If
0
 
LVL 41

Accepted Solution

by:
guru_sami earned 500 total points
ID: 34095102
So how can I solve this, and have a customize error message in the login form?
--> I am not sure how you would trap those errors with custom AD authentication

Do I remove the try catch block?
--> Modify catch block like this and see if it helps.
      Catch ex As Exception
           Return False
        End Try
0
 
LVL 9

Author Comment

by:TonyReba
ID: 34095127
Can I only refresh the login page when the ad username or password doesnt match?
0
 
LVL 9

Author Comment

by:TonyReba
ID: 34095142
upss I am an idiot,  that worked,,

Throw New Exception("Error authenticating user. " & ex.Message)

was messing everything!!



0

Featured Post

Find Ransomware Secrets With All-Source Analysis

Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

Join & Write a Comment

I found this questions asking how to do this in many different forums, so I will describe here how to implement a solution using PHP and AJAX. The logical flow for the problem should be: Write an event handler for the first drop down box to get …
This article demonstrates how to create a simple responsive confirmation dialog with Ok and Cancel buttons using HTML, CSS, jQuery and Promises
The viewer will learn how to look for a specific file type in a local or remote server directory using PHP.
The viewer will learn the basics of jQuery, including how to invoke it on a web page. Reference your jQuery libraries: (CODE) Include your new external js/jQuery file: (CODE) Write your first lines of code to setup your site for jQuery.: (CODE)

760 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

23 Experts available now in Live!

Get 1:1 Help Now