Getting forms auth challenge

From: MarkMurphy (murphy_at_murphysw.com)
Date: 07/28/04


Date: 28 Jul 2004 12:04:34 -0700

I'm implementing forms authentication on a site and can't get the
redirection to the login page to work happen. It is behaving as
though still doing windows authentication.

In web.config:

    <authentication mode="Forms">
                <forms loginUrl="login.aspx" name=".ASPXFORMSAUTH"
protection="All"/>
    </authentication>

        <!-- AUTHORIZATION
          This section sets the authorization policies of the
application. You can allow or deny access
          to application resources by user or role. Wildcards: "*"
mean everyone, "?" means anonymous
          (unauthenticated) users.
    -->

    <authorization>
        <allow users="*" /> <!-- Allow all users -->
            <!-- <allow users="[comma separated list of users]"
                             roles="[comma separated list of roles]"/>
                  <deny users="[comma separated list of users]"
                             roles="[comma separated list of roles]"/>
            -->
    </authorization>

Am I missing something?

Thanks in advance, Mark



Relevant Pages

  • Re: I cant login to Sql no matter what i try! im ignorant and i need help :)
    ... It sounds like your server is configured for Windows authentication ... >requested in login 'T254DN_Staging'. ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Return credentials with anonymous authentication?
    ... When you navigate to a site that is uses windows authentication I am ... I need to implement login page. ... >> I need this because if login is successfull I need to redirect user to ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Windows Authentication (asp.net 1.1 C#)
    ... i wouldn't recommend using your internal AD for customer accounts. ... There is no easy way to get a forms based login for IIS integrated auth - this would require to craft the authentication headers on the client - maybe ... If I use windows authentication, I can validate with my domain and I wouldn't have a problem with that, unless that would cause a problem with my internal security. ... Can you point me at another method of secure login, like forms but with encryptation, that can allow me to not have to validate with my domain. ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Return credentials with anonymous authentication?
    ... I was now authenticating in an windows authentication site (with the gray ... This way if i will ne next navigation to real windows authentication site I ... place of its current credentials. ... > Have a login page in Application 1 with Anoynoumous authentication. ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Logout from windows authentication??
    ... I came across this in a forum, so I guess it's in the windows authentication ... The user credentials are being cached by the client browser, ... server (either via a login dialog or automatic submission under IE ...
    (microsoft.public.dotnet.framework.aspnet)