Description As of January 2020 Microsoft has released an update that will enforce both LDAP Signing and LDAP Channel Binding on all supported Windows versions. Below are some considerations based on teh supported CMS systems that Episerver currently supports. Steps Episerver: The only built-in component in the Episerver CMS that communicates with Active Directory using LDAP is ActiveDirectoryRoleProvider, so it is only those who uses that provider that might get affected.The ActiveDirec...

Issue:In our environment logs we notice at several time error messages against the EPiServer.Licensing.CloudLicenseValidator:   2018-07-24 23:52:30:058+0000 - severity=ERROR thread=15 category=EPiServer.Licensing.CloudLicenseValidator operation=(null) trace=(null) reference={reference} sessionIdHash=(null) message=Failed while reporting status to licensing server: [ReportStatus] The underlying connection was closed: An unexpected error occurred on a receive.EPiServer.Licensing.LicenseExceptio...

A few cases have been reported where users haven't been able to reset their passwords on the portal to authenticate. This seems to be caused by a browser security validation issue. Please take the below steps if you are running into issues authenticating.   Request a password reset from our support team. submit a ticket via email if needed to support@episerver.com Navigate to https://support.episerver.com. Performing this action will load the ssl cert for the site. Once you receive the pa...

Description Setting up the ServiceAPI: http://world.episerver.com/documentation/Items/Episerver-Service-API/Configuration-and-overview/Setting-up-EPiServerServiceApi/ If the serviceAPI nuget package is added to the solution, and you have checked that tblUserPermission hasEPiServerServiceApi, and you have gone to url myurl.no/episerverapi/version to get version number and that works. When you then go to myurl.no/episerverapi/token you get unsupported_grant_type which is correct too.   We...

We are changing the way you authenticate to support.episerver.com to access and submit tickets. For a while now, we have been using integration with Episerver World which stores users in a different way. To make things easier and allow you to access tickets quicker, we will be using a new authentication mechanism for our portal going forward.  If you have an existing World account you will need to setup and verify your account before accessing the support system. Below are the steps needed to...

Most of the customers always prefer a custom login page to the default one which should only be accessible by WebAdmins and WebEditors users. There was a blog article about this before (Creating a custom login page in Episerver and MVC). The method was described as using the standard SQLMembershipProvider. In the newest version of Alloy sample we've encountered the AspNetIdentityUserProvider which required an update of how to create a custom login page using Owin Authentication. The inst...

Description You may experience an issue where you are unable to access the ticketing system to view tickets, attachments, create and update tickets. This article explains how the process works as well as what can be done to correct these types of issues. Resolution While viewing the help center, you will be prompted to login in order to submit a ticket, view attachments, and update or create a new ticket.  Click on Sign In at the top right of the help center.  If you already ...

Description When attempting to register a user or perform an owin authentication action, you may run into the following error. Server Error in '/' Application. No owin.Environment item was found in the context. Description: An unhandled exception occurred during the execution of the current web request. Please review the stack trace for more information about the error and where it originated in the code. Exception Details: System.InvalidOperationException: No owin.Environment item was...

Description This article describes the out of the box limitation in mixing Active Directory membership providers with SQL role provider. Resolution Product Development Engineering has reviewed this use case and provided information.   After the review they clarified that "ActiveDirectoryMembership/SQLRoleProvider" combination is not a tested and supported configuration.   In the documentation there is the following:Authentication and AuthorizationSeparation of authentication a...

Description If you create a new group in Episerver, for example an Editors group because you do not want them to have Publishing permissions like other groups may have, you may run into the issue where members of that group can not log in.  This is because you need you authorize logins for that group through your Web.config. Resolution In your Web.config file you will find a section similar to this:   <location path="EPiServer/CMS/admin">    <system.web>      <authorization>  ...

  When importing users or user groups into the CMS not all users or user groups are getting pulled into the CMS. Cause There is a LDAP limitation as a query typically limits queries to 1000 for both users and directories. This can cause the CMS to only import portions of the total AD users and user groups. Resolution There is not a simple configuration change that can be made in the site's web.config file to alter this behavior, but customization to the site/server may po...

This error occurs when calling on the EditUser.aspx and AdminGroup.aspx repectively. [DirectoryServicesCOMException (0x80072030) There is no such object on the server] Resolution The error is associated with an incorrect reference to an LDAP path that is invalid. In order to resolve the actual account issue please review the following article for more information. Exposing the root cause of ActiveDirectoryRoleProvider errors

Active Directory LDAP queries are limited to returning 1000 objects (users and groups). Here are some suggestions to get around the query limit. Resolution It might be possible to change this server side, as suggested in this link: http://stackoverflow.com/questions/3488394/c-sharp-active-directory-services-findall-returns-only-1000-entries. One other possible way to override this value is to look at a class called AdsiDataFactory in EPiServer.Security namespace. There is a ...