Forums (Obsolete)

Installation and deployment Questions on installation, system configuration and deployment to the live server.

Version 5.x > Installation and deployment > Can't login into CMSDesk using the domain alias

View modes:

Member

Member

martinh.reg-gmail - 5/25/2010 9:19:26 PM

Can't login into CMSDesk using the domain alias

I have a site with a domain alias. I am able to successfully log in to CMSDesk from the primary domain e.g. www.site1.prod.example.com/cmsdesk but I cannot get past the login page on the alias domain e.g. site1.example.com/cmsdesk.

Does the CMSDesk managemnt site have to be accessed from the primary domain only?


Member	Martin H. - 5/26/2010 1:59:19 AM RE:Can't login into CMSDesk using the domain alias Additional Information. The Kentico CMS environment includes two web servers and the web farm module is enabled. There seems to be issues with the license keys for some requests and I'm wondering if this may be a sync issue between the servers.

Kentico Support

Kentico Support

kentico_radekm - 5/26/2010 3:50:27 AM

RE:Can't login into CMSDesk using the domain alias

Hello.

You can access CMSDesk via any domain name, for which the site is configured. Do you have the second URL set as site domain alias, and do you have a valid license key for it used in Site Manager -> Licenses section?

Have you defined web servers as per our documentation (http://devnet.kentico.com/docs/devguide/defining_web_farm_servers.htm)? Thank you.

Best Regards,
Radek Macalik

Member

Member

Martin H. - 5/27/2010 8:20:30 PM

RE:Can't login into CMSDesk using the domain alias

Yes the second domain has a valid license and is set as a domain alias. The problem environment is a web farm with two servers. The web farm sync is taking place and I have waited until all of the tasks have been processed.

When I trace the http traffic I can see that the username / password authentication works but as soon as I am redirected to the content page, I am then redirected back to the logon page.


Kentico Support	kentico_radekm - 6/11/2010 8:37:18 AM RE:Can't login into CMSDesk using the domain alias Hello. Could you please check that you have same machineKey element in both web.config files, on both servers? Thank you. Best Regards, Radek Macalik

Member

Member

Martin H. - 6/15/2010 7:04:12 PM

RE:Can't login into CMSDesk using the domain alias

I have double checked and can confirm that the machineKey element is the same in both web.config files.

As I said earlier I can see (using Fiddler) that the login post succeeds and I get redirected from the logon page back to /CMSDesk/default.aspx but this request is then redirected back to /CMSPages/logon.aspx?ReturnUrl=%2fcmsdesk%2fdefault.aspx.

Member

Member

Martin H. - 6/17/2010 5:14:09 PM

RE:Can't login into CMSDesk using the domain alias

Some further information.

I enabled security debugging using the various CMSDebugSecurity settings as described in http://devnet.kentico.com/Blogs/Martin-Hejtmanek/January-2010/Debugging-options-in-Kentico-CMS-5-0.aspx. These settings did switch on the security debugging but although I was able to see lots of interesting messages, I did not see any failures that would account for my problem.

My next "theory" is that the problem is not security related as such so I will be trying the request debugging facility to see why the request to /CMSDesk/default.aspx gets redirected after I have already logged in.

Member

Member

Martin H. - 7/1/2010 5:26:14 PM

RE:Can't login into CMSDesk using the domain alias

We have finally tracked this down! Our problem was that we had configured the domain attribute of the asp.net forms authentication element to be a particular domain as described in http://devnet.kentico.com/docs/devguide/index.html?single_sign_on.htm.

The object of this was to allow single sign-on for for a number of the sites hosted on the kentico instance. Unfortunately this has an un-anticipated side effect for the other sites on that are not subdomains of the domain specified.

At least we know what the problem is now. We will probably have to modify the logon.aspx page to take explicit control of the authentication cookie domain and kentico support has suggested we have a look at http://www.15seconds.com/issue/971108.htm.

Top