Invalid Password
Printed From: IdeaBlade
Category: DevForce
Forum Name: DevForce Classic
Forum Discription: For .NET 2.0
URL: http://www.ideablade.com/forum/forum_posts.asp?TID=660
Printed Date: 20-Apr-2026 at 4:42pm
Topic: Invalid Password
Posted By: Darren
Subject: Invalid Password
Date Posted: 17-Jan-2008 at 3:03am
|
This error seems to only occur in my 3-tier release build, i cannot replicate it in my dev environment.
This error occurs randomly ,but it occurs more if you leave the app idle for more than the timeout settings in IIS(default 20 mins).
 Here is the full exception:
(Note below exception is from another instance of this error.)
************** Exception Text ************** IdeaBlade.Persistence.LoginException: Invalid Password for user 'testerkb' in this application. Server stack trace:
at Server.LoginManager.Login(ILoginCredential pCredential, PersistenceManager pManager) at IdeaBlade.Persistence.Server.SessionManager.GetPrincipal(ILoginCredential pCredential) at IdeaBlade.Persistence.Server.SessionManager.GetPrincipal(SessionBundle pSessionBundle, Boolean pErrorIfNotFound) at IdeaBlade.Persistence.Server.PersistenceServer.Fetch(SessionBundle pSessionBundle, IEntityQuery pEntityQuery) at System.Runtime.Remoting.Messaging.StackBuilderSink._PrivateProcessMessage(IntPtr md, Object[] args, Object server, Int32 methodPtr, Boolean fExecuteInContext, Object[]& outArgs) at System.Runtime.Remoting.Messaging.StackBuilderSink.PrivateProcessMessage(RuntimeMethodHandle md, Object[] args, Object server, Int32 methodPtr, Boolean fExecuteInContext, Object[]& outArgs) at System.Runtime.Remoting.Messaging.StackBuilderSink.SyncProcessMessage(IMessage msg, Int32 methodPtr, Boolean fExecuteInContext) Exception rethrown at [0]:
at IdeaBlade.Persistence.PersistenceManager.HandlePersistenceServerException(Exception pException, Boolean pTryToHandle, PersistenceOperation pOperation) at IdeaBlade.Persistence.PersistenceManager.XFetchDataSet(IEntityQuery pEntityQuery) at IdeaBlade.Persistence.PersistenceManager.XFetch(IEntityFinder pEntityFinder, WorkState pWorkState) at IdeaBlade.Persistence.PersistenceManager.XGetEntities(IEntityQuery pEntityQuery, QueryStrategy pQueryStrategy, WorkState pWorkState) at IdeaBlade.Persistence.PersistenceManager.GetEntities[T](IEntityQuery pEntityQuery, QueryStrategy pQueryStrategy) at IdeaBlade.Persistence.PersistenceManager.GetEntities[T](QueryStrategy pQueryStrategy) at UI.frm002_START_FORM_MainApplicationWindowMDI.QuestionEnginePrepopBW_DoWork(Object sender, DoWorkEventArgs e) at System.ComponentModel.BackgroundWorker.OnDoWork(DoWorkEventArgs e) at System.ComponentModel.BackgroundWorker.WorkerThreadStart(Object argument) |
Replies:
Posted By: davidklitzke
Date Posted: 17-Jan-2008 at 2:59pm
|
There is not enough information to determine what is going on. At a minimum, I would like to have the server-side DebugLog. It would also be great to have the SQL Profiler logs as well. Please send this information to mailto:support@ideablade.com - support@ideablade.com .
You might consider adding more debugging information in the Login Manager.
s
|
Posted By: Darren
Date Posted: 18-Jan-2008 at 6:18am
|
Another thing david that might help you out is that, i have changed the EncryptPassword Function in the LoginClientCore Class to use :
Security.Cryptography.MD5CryptoServiceProvider The reason for this is that the users must be able to login on back office and also field mobile application which of course uses the compact framework.
As the Mobile Developer could not use :
IdeaBlade.Util.CryptoFns.MD5HashUTF16ToString I am currently running tests and trying to replicate the error, i will send the debuglog.xml and sql profiler log to shortly. |
Posted By: davidklitzke
Date Posted: 23-Jan-2008 at 1:54pm
|
The error that you are getting is coming from the LoginManager method which runs on the Server. Normally, this code is executed in response to a Client-side request However, unless I am mistaken, you now occasionally get "Invalid Password" exceptions when you are not trying to login.
I think you need to understand how and why the LoginManager is being called. Perhaps there is some daemon that calls the LoginManager when your IIS timeout occurs.
|
Posted By: Darren
Date Posted: 03-Mar-2008 at 7:44am
|
Had some more time to try and find out what is going on with the loginmanager.
Something weird going on.....
Steps i take to replicate this bug.
1. Load my application as normal and login
2. Restart IIS
3. Open a form from within the MDI Shell
4. Breakpoint the login method
After restarting IIS, when the login breakpoint hits again the domain part of pCredential is populated with half of the text from my encrypted password string.
Iam not populating the domain field at all and cant find out where there is happening.
The first time after logging in the Credentials are:
Username: admin
Passsword: 452367016922117324923810110923817314423813725
Domain: Nothing
After restarting IIS the Credentials are:
Username: admin
Passsword: 452367016922117324923810110923
Domain: 817314423813725 See Attached image
Cheers
 |