Windows Server 2008 R2 and Windows Authentication

[noahlschultz]

Has anyone successfully enabled windows authentication in a Windows Server 2008 R2 environment?  We keep getting redirected to the login page after the site hits the WinAuth page and I see an Authorization Token can not be null error in the web server's event logs.

[MikeSpragg]

I'm just setting up a fresh image with Win2008R2, SQL2008 (all 64bit) and SLX 7.5.2 so will let you know.
BTW If anyone else is using 2008R2 with VMWare 7.0 - don't forget to enable 3D Acceleration and install the Windows Experience (under features in server setup) and enable Themes and reboot (important) - this gives you *full* Aero support (i.e. Windows Vista/7 look at feel).

[MikeSpragg]

Worked fine for me:

(a) Ensure you login to Admin and set the user concerned to use Windows Authentication and then pick the relevant user for the domain from the list
(b) When using the URL - it's http://xxxxx/windows.aspx
(c) This should bring you to a Windows login (not SLX) and in here you will put the user's windows credentials (not the SLX credentials) - very important

In other words (using demo db)

(a) Modify the Lee Hogan record and register him to use the preferred window login (domain\MyLeeUser) will be my example
(c) When the dialog invokes - make sure you put in MyLeeUser and domain password (not the SLX ones).

This worked fine for me on the platform of : Windows 2008 R2 x64 with SQL2008SP1 x64.

Regards
Mike

[charles_mega]

In the implementation guide 7.5 I found that:

"On the Web Server computer, log on as a domain administrator or as a user with rights to

modify the Active Directory.

This user should be the Application Pool user."

What does it mean? In this case, we have to set our WebDll user as domain user with high privileges (with rights to modify Active Directory). We are implementing Saleslogix Web in a big organization (more than 1200 users). We need to understand why "rights to modify Active Directory" is necessary to configure Windows authentication. It could be a security problem to give too much rights to a user in order to launch saleslogix application pool. I understand that we need some rights to modify the SPN's to link webdll user with  server in a domain but why rights to modify Active Directory.

I follow different steps  (on W2003 sp2) in the implementation guide except to modify user right with active directory but I receive an error after launching start url:

http://crmlab:3334/SlxClient/windows.aspx Object reference not set to an instance of an object. at Sage.Platform.Application.UI.Web.ApplicationPage.PersistLocalState() at Sage.Platform.Application.UI.Web.ApplicationPage.OnUnload(EventArgs e) at System.Web.UI.Adapters.ControlAdapter.OnUnload(EventArgs e) at System.Web.UI.Control.UnloadRecursive(Boolean dispose) at System.Web.UI.Page.UnloadRecursive(Boolean dispose) at System.Web.UI.Page.ProcessRequestCleanup() at System.Web.UI.Page.ProcessRequest(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) at System.Web.UI.Page.ProcessRequest() at System.Web.UI.Page.ProcessRequestWithNoAssert(HttpContext context) at System.Web.UI.Page.ProcessRequest(HttpContext context) at ASP.windows_aspx.ProcessRequest(HttpContext context) in c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\slxclient\d838b69d\f994c4a4\App_Web_adeyhjcg.19.cs:line 0 at System.Web.HttpApplication.CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute() at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)

Any ideas?

[RJLedger]

Give it User Rights and it should work - as per Sage's instructions.

[charles_mega]

Hi All,

I want a custom redirection after the windows.aspx page.

Purpose is to start SLX on a specific AccountId given in a parameter to the Windows.aspx page.

It already works with the standard login.aspx but not with windows.aspx: SLX always goes to the user default page.

Is it possible to give a parameter such "ReturnUrl" to windows.aspx?

Example:

http://MyServer/SlxClient/windows.aspx?ReturnUrl=%2fslxclient%2fAccount.aspx%3fentityid%3dAQF8AA0000...

Thanks

Sincerly,

Charles

[jperona]

Unfortunately, do the Mixed Mode Authentication this is not possible. It is possible to create  Windows Auth only membership provider that could acheive what you are needing.  Review ASP.NET membership providers.

John

[Bavien]

My environment is similar:

SalesLogix 7.5.3 running on Windows 2008 R2

Backend database is SQL 2008 on a separate box (Windows 2008 R2 as well).

For the life of me I can't get the Windows Authentication going for the Web Client users. It keeps redirecting the user to the standard SalesLogix Web login page.

I followed the Sage instructions per line (even added the WebDLL account into Domain Admin group but to no avail). I am not sure what I am doing wrong and I think I followed the instructions correctly. The link that user used to connect is:

http://MySalesLogixServer/SLXclient/Windows.aspx

Any input/help is greatly appreciated.

PS: The documentation that I followed is 

How to configure Windows Authentication on Windows Server 2008 for SalesLogix Web Client  

Thanks.

BN

[elliotrodriguez]

I'm having the exact same problem as described above except in Windows 2003. I'm pretty sure I followed everyrthing to the letter.

[elliotrodriguez]

Win Auth works fine for me, except when I want to link directly to entities. Each time I try to, it takes me to the login.aspx page. Looks like Forms Auth won't let me override this.

That being said - what are my options? Has anyone implemented this scenario before?