Re: Forms Authentication - "Deny users = ?" necessary

From: bob biris (bobbiris_at_hotmail.com)
Date: 09/04/03 

Date: 4 Sep 2003 07:15:05 -0700

Thanks for your reply Hernan.

I can't believe Authentication and Authorization are mixed...

If I want to identify/authenticate a user (for example to retrieve his
settings from the server, let's say), the only way is to direct him to
a page which denies him access for him to be presented with a login
page. I'm surpised there is no way to force everybody to authenticate
(through forms authentication) and then leave the authorization doing
what it does best: "authorize" or not access to it to the page.

Relevant Pages

  • asp.net vulnerability
    ... From: Windows NTBugtraq Mailing List ... More details on ASP.NET vulnerability ... There has been some confusion with the ASP.NET forms authentication issue ... authorization issue, not an authentication issue. ...
    (microsoft.public.sharepoint.portalserver)
  • Re: application pool custom identity
    ... Kerberos becomes a possibility when the web server is in a Domain, ... The problem happens when the browser/server selects Kerberos authentication, ... LocalSystem credentials will work for Kerberos; custom AppPool Identity ... Authorization. ...
    (microsoft.public.inetserver.iis)
  • Re: Kerberos OpenLDAP Frontend
    ... Jonathan Javier Cordoba Gonzalez wrote: ... but then you are mixing the authentication with the authorization. ... A KDC with passwords and LDAP ...
    (comp.protocols.kerberos)
  • Re: ASP.NET Authentication exception case
    ... It doesn't seem to like the authorization tag underneath the location tag ... This section sets the authentication policies of the application. ... <!-- SESSION STATE SETTINGS ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: Brackets across includes
    ... I am trying to create a user authentication system, ... separate the authentication code into include files. ... separate concepts and should be implemented as separate procedures. ... Authorization could be ...
    (comp.lang.php)