RE: Mixed authentication schemes
From: Bassel Tabbara (basseltonline@microsoft.com)
Date: 11/14/02
- Next message: Sitaraman: "Re: RSA/RC2 key exchange"
- Previous message: Bob Willer: "SIDs"
- In reply to: Wes Weeks: "Mixed authentication schemes"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: basseltonline@microsoft.com (Bassel Tabbara (MS)) Date: Thu, 14 Nov 2002 19:43:13 GMT
Hi,
Question:
A set of pages in the web application are configured to use forms
authentication, while other pages are used for
administrative purposes. What type of configuration is needed to allow both
authentication?
Answer:
Windows and Forms authentication can be running in parallel if they are
separated
by application boundary. One web application can be configured to use
Windows authentication
and the other can use Forms Authentication. The configuration of this web
application directory can be nested
or in parallel.
For example, Web Application A uses Forms Authentication and Web
application B uses Windows Authentication.
Application A can be below application B. In this case, App B contains the
web.config with Windows Authentication
which overrides the configuration in App A. The other scenario is the usual
one where App A and App B are on the same level.
I am note sure if the admin pages are used to administer other pages in
your application. I would appreciate if you can clarify
more that point.
Thanks,
Bassel Tabbara (MS)
This posting is provided “AS IS” with no warranties, and confers no rights.
You assume all risk for your use.
© 2001 Microsoft Corporation. All rights reserved.
--------------------
| Content-Class: urn:content-classes:message
| From: "Wes Weeks" <anon@nospam.com>
| Sender: "Wes Weeks" <anon@nospam.com>
| Subject: Mixed authentication schemes
| Date: Thu, 14 Nov 2002 07:02:57 -0800
| Lines: 11
| Message-ID: <110e101c28bee$eaab5710$2ae2c90a@phx.gbl>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="iso-8859-1"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4910.0300
| Thread-Index: AcKL7uqrBuqBoXHhShaiZZM55W9xUA==
| Newsgroups: microsoft.public.dotnet.framework.aspnet.security
| NNTP-Posting-Host: TKMSFTNGXA14 10.201.226.42
| Path: cpmsftngxa06!cpmsftngxa09!cpmsftngxa08
| Xref: cpmsftngxa06 microsoft.public.dotnet.framework.aspnet.security:3005
| X-Tomcat-NG: microsoft.public.dotnet.framework.aspnet.security
|
| Is it possbile to use both Forms and Windows
| authentication schemes within the same web site? I have
| some pages that are public but require regsitration for
| viewing, while I also have some admin type pages that need
| read/write access to the website directories and files
| which need to be Windows authenticated in order to grant
| these writes. Any ideas?
|
| Thanks,
|
| Wes Weeks
|
- Next message: Sitaraman: "Re: RSA/RC2 key exchange"
- Previous message: Bob Willer: "SIDs"
- In reply to: Wes Weeks: "Mixed authentication schemes"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|