Hello,

I use the "Mail Server .NET Edition 1.0.6.0". The "Mail Server .NET Web Interface" I have designed a little bit and translate it to german.

Now I have the problem, that some users get the exception "Invalid validation token" if they logged in. The stak trace is:

The exception occurs in UsersLogic.cs in the line:

UserRec userRec = rAdmin.GetUserRec
            (
            HttpContext.Current.User.Identity.Name,
            Context.Current.Session["token"].ToString(),
            recNo
            );

The parameters which are given to the GetUserRec-method are correct. I checked the token in the database. The token, username and record number are correct. Do you have any ideas where the problem is?

With your original code for version 1.0.6.0 the users can logged in without problems. I use in my version the same dlls and config-xmls.

thanks

Anke

The lifetime is not the problem. The time is 30 minutes and it is correct in the database.

Have you other ideas?

Anke

The problem is, that the user get the error directly after the login. So the goes to default.aspx (in root folder) and login with his data...

The token will be generated and it is saved correctly in database. The expiration date is correct, too.

Then the user will be redirected to "Auth/Default.aspx". Here I will load the user record for the user, to get some details, for example last login time or so... Here is the problem, I can't load the user record.

The method:

UserRec userRec = rAdmin.GetUserRec
            (
            HttpContext.Current.User.Identity.Name,
            Context.Current.Session["token"].ToString(),
            recNo
            );

has after correct authorization for some users an errer, everytime! The can not see an difference between the users, who can login and the users who can not... We add a new user and he can not login, too. It is very strange. I can not explain this.

I am software developers since other 4 years and word since over 6 years with C#, so I have some experiences... but i can not explain this error :-(

Anke

Yeah -  I have found the error today :-)

The problem is, that I have implement some logic from the old webmail interface, which shows the message count for folders in the treeview. For this I take the method:

IRAdmin rAdmin = (IRAdmin) Activator.GetObject(typeof (IRAdmin), dgUrl);

UserRec userRec = rAdmin.GetUserRec(HttpContext.Current.User.Identity.Name, Utilities.UserData.Token, recNo );

You use tis method in you Webmail Frontend only for the EditUsers-Page. So I had the Idea that the problem is, that our test users are all "Domain Group Admins". For testing I set the user with the problems als domain group admin and she could login correctly.

Do you have another way to get the user record, so that users which are not domain group admin can read there one properties like DisplayMessageCount and MailBoxSize? These 2 properties I like to know also for normal users ;-)

Anke

Do you have no other way, to read the own user record? It is possible to expand the method in next version, so that the user can read his own record. In the moment can only the admins use this method :-(

Anke

I like to use the method '' from file UsersLogic.cs:

UserRec userRec = rAdmin.GetUserRec
            (
            HttpContext.Current.User.Identity.Name,
            Context.Current.Session["token"].ToString(),
            recNo
            );

This method I can use only for domain group admins, all other users get an "Invalid token" exception

The settings are not that I like to have. I need to know the value for 'DisplayMessageCount' and 'MailboxSize'. Which properties are not contained in the UserSettings-object, but they contains in UserRec-object. Also, how can I get the UserRec-object for non-admins?

Anke