MOSS2007 Write your own custom authentication provider (Part 4)

Transcription

1 MOSS2007 Write your own custom authentication provider (Part 4) So in the last few posts we have created a member and role provider and configured MOSS2007 to use this for authentication. Now we will create a new form for logging in and replace the current MOSS2007 one with our own. This form will handle the login via the authentication provider and then once authenticated pass it onto SharePoint for access to the Portal. NOTE: I will state that I am not too concerned with any error handling at this point. So to begin lets create a new website project within Visual Studio. Create this as a File System web site. For this example it will be called LynxAuthProviderFBA and be added to the current provider solution. Once the new project has loaded delete the default.aspx page and create two pages. Login.aspx ProcessLogin.aspx You will also need to add a Web.Config if it does exist. Firstly we need to configure the Web.Config file with the correct syntax for using the Custom Authentication Provider. The following is the syntax for this file: <?xml version="1.0"?> <configuration> <appsettings/> <connectionstrings/> <system.web> <compilation debug="false" /> <authentication mode="forms" /> <!--// Start Custom Member and Role Provider //--> <membership defaultprovider="lynxauthentication"> <providers> <add name="lynxauthentication" type="lynxauthprovider.users.lynxuserprovider,lynxauthprovider, Version= , Culture=neutral, PublicKeyToken=72641c709e22e2e6" /> </providers> </membership> <rolemanager enabled="true" defaultprovider="lynxroleauthentication">

2 <providers> <add name="lynxroleauthentication" type="lynxauthprovider.users.lynxroleprovider,lynxauthprovider, Version= , Culture=neutral, PublicKeyToken=72641c709e22e2e6" /> </providers> </rolemanager> <!--// End Custom Member and Role Provider //--> </system.web> </configuration> Now we can start adding the login control to the main Login.aspx page. To do this simply open the page and expand the Login toolbox and drag the Login control onto the page. This should then look as below: To style this click the Auto Format and select the style you want. In this demo the login screen is nice and simple as below:

3 We now need to modify the code slightly so when the user clicks the login button the processing is completed using the ProcessLogin.aspx page. The code block currently looks as below: <asp:login ID="Login1" runat="server" BackColor="#F7F6F3" BorderColor="#E6E2D8" BorderPadding="4" BorderStyle="Solid" BorderWidth="1px" Font-Names="Verdana" Font- Size="0.8em" ForeColor="#333333"> <TitleTextStyle BackColor="#5D7B9D" Font-Bold="True" Font-Size="0.9em" ForeColor="White" /> <InstructionTextStyle Font-Italic="True" ForeColor="Black" /> <TextBoxStyle Font-Size="0.8em" /> <LoginButtonStyle BackColor="#FFFBFF" BorderColor="#CCCCCC" BorderStyle="Solid" BorderWidth="1px" Font-Names="Verdana" Font-Size="0.8em" ForeColor="#284775" /> </asp:login> The modified code should now read: (The change is in bold) <asp:login ID="Login1" runat="server" BackColor="#F7F6F3" BorderColor="#E6E2D8" BorderPadding="4" BorderStyle="Solid" BorderWidth="1px" Font-Names="Verdana" Font- Size="0.8em" ForeColor="#333333" DestinationPageUrl="~/ProcessLogin.aspx"> <TitleTextStyle BackColor="#5D7B9D" Font-Bold="True" Font-Size="0.9em" ForeColor="White" /> <InstructionTextStyle Font-Italic="True" ForeColor="Black" /> <TextBoxStyle Font-Size="0.8em" /> <LoginButtonStyle BackColor="#FFFBFF" BorderColor="#CCCCCC" BorderStyle="Solid" BorderWidth="1px" Font-Names="Verdana" Font-Size="0.8em" ForeColor="#284775" /> </asp:login> Now we need to add some code to the ProcessLogin.aspx page. The completed page should be as below: using System; using System.Data; using System.Configuration; using System.Collections; using System.Web; using System.Web.Security; using System.Web.UI; using System.Web.UI.WebControls; using System.Web.UI.WebControls.WebParts; using System.Web.UI.HtmlControls; public partial class ProcessLogin : System.Web.UI.Page { protected void Page_Load(object sender, EventArgs e) { bool aboolvalue = true; FormsAuthentication.RedirectFromLoginPage(Context.User.Identity.ToString(), aboolvalue); } } This code will simply accept the username that has already been validated by the authentication provider and passes this to MOSS2007. Now we need to compile the code and configure MOSS2007

4 to use this custom login page. Firstly once it has been compiled you need to copy the whole LynxAuthProviderFBA folder to the following location: C:\Program Files\Common Files\Microsoft Shared\web server extensions\12\template\layouts Within Internet Information Server (IIS) we need to create this as an application. To do this open IIS and expand the site that is configured for Forms Based Authentication. Right click the newly copied folder and select Properties. Once this has loaded select the Create button from the Directory page.

5 You will need to set the Application Pool to the current account that is being used by this site. Now we need to modify the Web.Config file that is being used by the portal site. To do this, open the file within an XML editor. The file I am changing here is found here: C:\Inetpub\wwwroot_CUSTOMEXT Edit the current code to the following: At this point you need to do an IISRESET or the changes will not work. When you try to access the portal site now you should now be presented with the following page:

6 Once you pass the credentials as below it will then log you into the site as below: As you can see from this simple post you can create a custom form for authentication without really writing any code. Obviously for a proper solution you would need to write that, in another post coming up I will show the full login screen I am creating.