Re: WEB.CONFIG ISSUE

From: jib (jib_0_at_hotmail.com)
Date: 02/23/04

  • Next message: Andrea D'Onofrio [MSFT]: "Re: Passing security credentials to ASP from .net" 
    Date: Mon, 23 Feb 2004 08:42:50 -0800

    Hi Arvind,

    Did you happen to add something to your <authentication> method? E.g. look
    for something similar to:

    <authentication mode="Forms" >
        <forms loginUrl="login.aspx" />
    </authentication>

    This would be responsible for redirecting your page to login.aspx. Also
    keep in mind that the web.config pages are 'layered'. If you required
    a login page somewhere on your site and have entered this in the top
    web.config, you may need to install another web.config at a lower level
    with the login directive removed.

    Good luck

    Jib

    "Arvind P Rangan" <arvind99@hotmail.com> wrote in message
    news:OajqxXh%23DHA.2524@TK2MSFTNGP11.phx.gbl...
    > Hi ALL
    > I have all my root files under Forms Type Authentication mode and i have
    > another folder where in i need no permission or a direct access to that
    > folder.
    >
    > So i did make some changes in WEb.Config.
    > I added the following at the end of WEB.Config.
    > <location path="ALL"> -- ALL is the folder name
    > <system.web>
    > <authorization>
    > <allow users="*"/>
    > </authorization>
    > </system.web>
    > </location>
    >
    > Few days back it worked now its diverting all the pages back to login.aspx
    > and as there is not login.aspx in that folder it raises error. ieok.
    >
    > But, what is the reason that the security changed.
    >
    > If am wrong kindly give me the way to make a folder in the wwwroot
    available
    > to all while the main folder is restricted.
    >
    > Thanks
    >
    > ARvind.
    >
    >

  • Next message: Andrea D'Onofrio [MSFT]: "Re: Passing security credentials to ASP from .net"

    Relevant Pages

    • Re: Multi Level Forms Authentication Help DESPERATELY NEEDED!
      ... Forms authentication supports this functionality. ... You can have a web.config in each folder that specifies who's allowed in. ... > to access certain files on the web site to an ASP .NET Forms ... > while still managing access to the aforementioned subdirectories. ...
      (microsoft.public.dotnet.framework.aspnet)
    • Domain Name Forging On Authentication Prompt
      ... Domain Name Forging On Authentication Prompt ... To bypass IE domain restrictions the ip of the protected folder needs ... [End Code Sample] ...
      (Vuln-Dev)
    • RE: Need to restrict remote users to access only specific folder(s
      ... This sounds like an authentication problem -- or a firewall problem. ... go through the IIS logs to look for problems authenticating or on the service ... user via file access permissions when working internally. ... Suggestions for better folder level access via RWW? ...
      (microsoft.public.windows.server.active_directory)
    • Re: Authentication login screen appears on both frames of the framset
      ... This section sets the authentication policies of the application. ... This section sets the authorization policies of the application. ... Application-level tracing enables trace log output for every page ... folder / file to set ...
      (microsoft.public.dotnet.framework.aspnet)
    • Re: How to securely publish a Click Once application
      ... the folder hierarchy in tact. ... Forms authentication, deny all anonymous users and the mime setting to add ... non-asp.net apps to the forms authentication protection looks like the right ... for any updates - but because the update location doesn't allow ...
      (microsoft.public.dotnet.framework)