Quantcast
Channel: Security
Viewing all articles
Browse latest Browse all 4737

Windows Identity Framework Error on site not using WIF and Windows Authentication broken

$
0
0

On my dev box I'm getting an WIF error on a site for which WIF has not been referenced.  The error occurs only when I host the site as an Application under the Default Web Site.

If I host the site as a "Web Site" I do not get the WIF Error, however Windows Authentication seems to be broken.  I have to enable anonymous access to get into the sight.  Otherwise it behaves as though the credentials I'm entering are incorrect. 

I've tried turning on Failed Request Tracing, and set DACLS on the log folder, however nothing is logged. 

Perhaps these are unrelated issues but I suspect they are connected.

I had used WIF on another unrelated project.  I've since uninstalled Windows Identity Framework.  I've searched for the Microsoft.Identity.dll and requireSsl references to it in all .config on my hard disks, to no avail.  I've tried adding...

      <remove name="WSFederationAuthenticationModule" />      <remove name="SessionAuthenticationModule" />

...to the httpModules and system.webserver modules.

My next step is a reinstall of the OS unless anyone has a better suggestion.

The error I get when the I host the site as an Application under the default web site is...

ID1059: Cannot authenticate the user because the URL scheme is not https and requireSsl is set to true in the configuration, therefore the authentication cookie will not be sent. Change the URL scheme to https or set requireSsl to false on the cookieHandler element in configuration. Description: An unhandled exception occurred during the execution of the current web request. Please review the stack trace for more information about the error and where it originated in the code.

Stack Trace: [InvalidOperationException: ID1059: Cannot authenticate the user because the URL scheme is not https and requireSsl is set to true in the configuration, therefore the authentication cookie will not be sent. Change the URL scheme to https or set requireSsl to false on the cookieHandler element in configuration.]   

Microsoft.IdentityModel.Web.WSFederationAuthenticationModule.OnEndRequest(Object sender, EventArgs args) +784    System.Web.SyncEventExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute() +182    System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously) +165  

----- END ERROR ----

Web config...

 

<?xml version="1.0" encoding="utf-8"?><configuration>  <configSections>    <section name="log4net" type="log4net.Config.Log4NetConfigurationSectionHandler,log4net" />  </configSections>  <appSettings>    <!-- ommitted -->  </appSettings>  <connectionStrings>    <!-- ommitted -->  </connectionStrings>  <system.web>    <globalization culture="auto:en-AU" />    <siteMap defaultProvider="SiteMAP">      <providers>        <add name="SiteMAP" type="SQLSiteMAPProvider" />      </providers>    </siteMap>    <compilation debug="true" targetFramework="4.0">      <assemblies>        <add assembly="Microsoft.ReportViewer.WebForms, Version=10.0.0.0, Culture=neutral, PublicKeyToken=B03F5F7F11D50A3A" />        <add assembly="Microsoft.ReportViewer.Common, Version=10.0.0.0, Culture=neutral, PublicKeyToken=B03F5F7F11D50A3A" />        <add assembly="System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=B03F5F7F11D50A3A" />        <add assembly="System.Speech, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" />        <add assembly="System.Web.Extensions.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" />        <add assembly="System.DirectoryServices, Version=4.0.0.0, Culture=neutral, PublicKeyToken=B03F5F7F11D50A3A" />        <add assembly="System.Data.Entity, Version=4.0.0.0, Culture=neutral, PublicKeyToken=B77A5C561934E089" />        <add assembly="System.Transactions, Version=4.0.0.0, Culture=neutral, PublicKeyToken=B77A5C561934E089" />      </assemblies>      <buildProviders>        <add extension=".rdlc" type="Microsoft.Reporting.RdlBuildProvider, Microsoft.ReportViewer.WebForms, Version=10.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a" />      </buildProviders>    </compilation>    <authentication mode="Windows" />    <customErrors mode="Off" defaultRedirect="~/ErrorPage.aspx">      <error<s

Viewing all articles
Browse latest Browse all 4737

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>