We are running our application using Active Directory Authentication behind a load balancer that holds the certificate. The application itself seems to be loading all the pages over https, but the logout link however attempts to reach a "login.aspx" (that I cannot find) using http and fails. In thre redirect URL in DNN we have it set to back to the home page.
Has anyone encountered something like this before when using DNN for an application behind a load balancer?
Any suggestions would be greatly appreciated!
Hello! Which Active Directory Authentication provider are you using? Do you know? If not, the video below will help you figure it out.
https://youtu.be/RE2i5mmVApU
I just had one of developers take a look and apparently, we have no default authentication provider set. We have several extensions for authentication installed, but I suspect the one actually in us is DNN_ActiveDirectoryAuthentication version 7.0.0.
*Edit*
Looks like we found some additional details under the site settings. Our provider is set to ADSIAuthenticationProvider with the authentication type set to Delegation.
Oh? With that being the case, you may want to double-check that everything is still working as expected. When an authentication provider isn't installed and configured using the normal methods, there are often workarounds implemented in various ways to get it to work the way you would have originally expected.
You're using the open-source one that used to ship with DNN itself.
https://github.com/DNNCom.../DNN.ActiveDirectory
With that being said, the original issue was with the redirect URL You may want to walk through the configuration steps again to be sure it's all set up correctly.
I'd also suggest ensuring that you're using the most recent version of the AD provider (which is now 7.2.0), and DNN too, if it has any upgrades available for your instance (which is now 9.13.2).
Also with a load balancer or reverse proxy, there is a header to indicate the original request source to handle URLs in the context of having SSL termination elsewhere than in the final server. For that you would need to go in Security -> More -> Security Settings then select the Advanced mode and you will see a field called "SSL Offload Header Value" where you can enter the name of that header. Setting that up will depend on your proxy or load balancer.
These Forums are for the discussion of the open source CMS DNN platform and ecosystem.
For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:
Awesome! Simply post in the forums using the link below and we'll get you started.