IIS7 Forms Auth with Classic ASP

[Ricci Hammond]

I have an ASP.NET site that also contains some classic asp pages. I am using
forms auth and roles with sitemap and menu controls so users only see
sections and pages they have access to. This works perfectly, all content is
protected.

But, when trying to retrieve any posted form details using Request.Form I
get an error: 80004005 unspecified error

If I change the app pool from integrated to classic mode then the pages work
correctly but then the forms auth ignores asp pages.

I have tried debugging the site and it appears that the form data is in
place when the global.asax Application_BeginRequest event fires, but when
it gets to the asp page the request.form information is missing.

Failed Request Tracking does not help, it just confirms an error occurred.

Process Mon logs a buffer overrun in the w3wp process.

Any ideas, I am a bit stuck at the moment.

[WenJun Zhang[msft]]

Hi,

Could you please narrow down if the ASP code works on a blank web site with
IIS7 integrated pipeline mode enabled? We have to first find out if the
different behavior is caused by ASP.net or just the classic ASP code
itself. Also please test if a simple ASP form page also hits the same issue.

Thanks.

Sincerely,

WenJun Zhang

Microsoft Online Community Support

Delighting our customers is our #1 priority. We welcome your comments and
suggestions about how we can improve the support we provide to you. Please
feel free to let my manager know what you think of the level of service
provided. You can send feedback directly to my manager at:
msd...@microsoft.com.

==================================================
Get notification to my posts through email? Please refer to
http://msdn.microsoft.com/en-us/subscriptions/aa948868.aspx#notifications.

MSDN Managed Newsgroup support offering is for non-urgent issues where an
initial response from the community or a Microsoft Support Engineer within
2 business day is acceptable. Please note that each follow up response may
take approximately 2 business days as the support professional working with
you may need further investigation to reach the most efficient resolution.
The offering is not appropriate for situations that require urgent,
real-time or phone-based interactions. Issues of this nature are best
handled working with a dedicated Microsoft Support Engineer by contacting
Microsoft Customer Support Services (CSS) at
http://msdn.microsoft.com/en-us/subscriptions/aa948874.aspx
==================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

[Ricci Hammond]

Hi, after a load of testing it looks to be how I created the website. I
built it as a Web Application in VS2008 to get around another problem. I
recreated the site as a web site and the asp pages work correctly, however..
My original problem has returned:

On my local pc in cassini and iis the site works correctly, but when it gets
copied to Win2k8 server the authentication stops working.

When you try to login you get instantly redirected to the login page, I can
see in IIS that the destination page returns a 302 forcing the site back to
the login page. I thought it may be down to machine keys but currently the
credentials are unencrypted in the database. If I enter an incorrect
password then I get the "invalid details" message in the login box, but when
I enter correct details there is no message.

It appears that the auth cookie is not being sent but I can't work out why.

Thanks,

Ricci
""WenJun Zhang[msft]"" <wjz...@online.microsoft.com> wrote in message
news:pY4$#Zc5JH...@TK2MSFTNGHUB02.phx.gbl...

[WenJun Zhang[msft]]

Hi Ricci,

I'd suggest you go through the steps in below article to test if it can
work well and verify what's the difference between your current case. You
can change it to use SQL membership provider instead of using the custom
XML membership provider.

How to Take Advantage of the IIS 7.0 Integrated Pipeline
http://learn.iis.net/page.aspx/244/how-to-take-advantage-of-the-iis7-integra
ted-pipeline/

[WenJun Zhang[msft]]

Hi Ricci,

Any progress on this issue?

[Ricci Hammond]

Hi, I still have the problem but it appears to be an issue with IE8 and the
cookie.

On my local pc it all works fine, I can log into the site. Trace shows the
auth cookie being sent back to the server on page request.

Copy the site to IIS7 on the webservers and can no longer login.. with IE8
that is. When I login the cookie gets sent from server to IE8, but when IE8
requests the page it does not pass the cookie back so gets dumped back to
the login page.

So I installed google chrome. It works.. firefox also works as well. try IE8
and it fails.

So for some reason IE is not passing the cookie to the server but I can't
find out why.

I will keep looking....

Ricci

""WenJun Zhang[msft]"" <wjz...@online.microsoft.com> wrote in message

news:vseX4ya7...@TK2MSFTNGHUB02.phx.gbl...

[Ricci Hammond]

Arrrggghhhhhhh........

My test hosts entry for the IIS7 server contains an underscore which causes
IE8 to drop the cookie.

"Ricci Hammond" <del...@nospam.nospam> wrote in message
news:D6E54DDE-EC98-4B52...@microsoft.com...

[rami....@gmail.com]

Hey guys,

This is still an issue on IIS 7.5 windows 7. I am running asp.net mixed with classic asp pages in integrated mode to take advantage of Forms Authentication for my classic ASP pages. Enabling Integrated mode works fine and I'm able to browse both .net pages(.aspx) and classic asp pages. However as soon as I re-add formsauthenitcationmodule in webconfig(need to remove and add to ignore managed only precondition), Request.Form throws above error when used in classic asp. I am running app pool in 32bit mode.

Regards,
Rami