Forms Authentication and SSL

From: Marco Roello (marco.roello_at_cnrservice.it)
Date: 07/15/03 

Date: Tue, 15 Jul 2003 09:54:32 +0200

Hi, I read some posts here, but I haven't found the full solution of my
problem.

I,ve configured my web application to use SSL with Server Certificates
(Tested and works).

Only one subfolder (/secure) of my webapp works with SSL. (Tested and works)

Web.Config
authentication mode="Forms">
      <forms loginUrl="/secure/login.aspx" protection="All" timeout="30"
requireSSL="true">
.....

The users search a page of my webapp (example:
"http://myserver/mywebapp/webform1.aspx") on a non secure SSL channel.
If the user isn't authenticated, he will be redirected to the loginUrl. The
problem is that he will not be redirected with the https:// prefix, so he
has to manually change the address in from http:// to https://.

I've tried putting the full address in the loginUrl, like
loginUrl="https://myserver/mywebapp/secure/login.aspx", but in this case,
when redirecting on the login.aspx, I receive an Access denied Error
(401.2).

I've tried to configure IIS security, with anonimous access only, windows
authentication, both, but nothing changes.

So, the question is simple: how can I redirect a user to a SSL login page
when he isn't authenticated, don't matter if he comes from an http:// or
https:// address
Thank you in advance

Marco Roello
marco.roello@cnrservice.it

How can I configure my app

Relevant Pages

  • Re: IIS in DMZ accessing OWA on internal network
    ... I'm assuming your redirecting from DMZ (https) to internal network. ... To add SSL all the way through, you'll need to configure SSL on internal box ...
    (microsoft.public.windows.server.networking)
  • Exchange 2003 OWA and IIS over SSL
    ... I have setup Exchange 2003 OWA to run over SSL and everything is working ... My questions is more apart of domain forwarding or redirecting. ... When my users type in http://www.mydomain.com they should be able to get my ...
    (microsoft.public.inetserver.iis.security)
  • OWA via SSL & redirect stopped working????
    ... I have been using OWA with SSL and have been redirecting ... the http to https per TechNet Q279681. ...
    (microsoft.public.inetserver.iis.security)
  • Re: Mixed Mode Authentication in .net 2.0
    ... There are two parts to SSL, which is why this can be confusing. ... encryption and authentication of the server. ... ADFS supports a component called the federation service proxy which is ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Search not working
    ... Management>Authentication Providers>Edit Authentication, does not provide the ... ability to indicate whether the web application is using SSL or not. ... I changed IIS Authentication for the web site back to Integrated ... I have installed an SSL certificate and required SSL ...
    (microsoft.public.sharepoint.windowsservices)
Quantcast