Re: Forms Authentication - Does Not Redirect

• Previous message: Steve Jansen: "Re: Forms Authentication - Does Not Redirect"
• In reply to: Steve Jansen: "Re: Forms Authentication - Does Not Redirect"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Date: Wed, 30 Jul 2003 14:34:06 -0500

OK - but I need to just allow users, once they've been authenticated through
my database query...
I tried adding:
<allow users="*"/>
But that doesn't work either. Or I should say, that it works the same was as
before - it still just refreshes the Login page

I'm not sure what to put in place of names, after the asterisk, in this
case......

How can I procede here?

"Steve Jansen" <stj3@nospam.columbia.edu> wrote in message
news:%23r4jkpsVDHA.2224@TK2MSFTNGP09.phx.gbl...
> Elmo,
>
> Perhaps you are missing the "allow" child node in your web.config file?
>
> <authorization>
> <deny users="?" /> <!-- denies anonymous access -->
> <allow users="*, YourRoleName, SomeUsername, Etc" /> <!--allows all
> authenticated users -->
> </authorization>
>
> According to MSDN: "The default authorization rule in the Machine.config
> file is <allow users="*"/> so, by default, access is allowed unless
> configured otherwise." Looks like you forgot to include an allow tag.
>
> -Steve
>
> "ElmoWatson" <sputnik75043@yahoo.com> wrote in message
> news:OQBUeEsVDHA.2544@tk2msftngp13.phx.gbl...
> > Here's my problem - - I'm trying to setup Forms Authentication on my
> server.
> > I can get the login page to show up every time, but, when it
authenticates
> > (I have a database lookup setup, which apparently DOES give back good
> data),
> > it just refreshes the login page, deleting the username & password.
> >
> > I know the database routine works. It returns a user's account
properties,
> > if verified and nothing, if not - - then, if it returns data from the
> > database, I set 'blnValidUer' to True - otherwise, I set it to false.
This
> > is working as expected.
> > Then, I do this in my code:
> > if blnValidUser="True" then
> > FormsAuthentication.RedirectFromLoginPage(txtUID.text, True)
> > (I've also tried -----'response.Write (request.QueryString
> > ("ReturnURL") & "<br>")
> > else
> > lblError.text="We're sorry, but the information you provided does
not
> > match our database. Please try again."
> > End If
> >
> > Here's my Web.config Code:
> > <authentication mode="Forms">
> > <forms name="MySite"
> > loginUrl="login.aspx"
> > protection="All"
> > timeout="480"
> > path="/"
> > />
> > </authentication>
> > <authorization>
> > <deny users="?" />
> > </authorization>
> > I checked an earlier post - - my webserver is named normally, with
nothing
> > but letters (no underscores, etc) - - so that's not the problem
> >
> > Is there something I'm missing here? Why doesn't it redirect correctly?
> >
> >
>
>

• Previous message: Steve Jansen: "Re: Forms Authentication - Does Not Redirect"
• In reply to: Steve Jansen: "Re: Forms Authentication - Does Not Redirect"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]