Re: Web Site Configuration for remote users

in theory it works remotely - but if you inspect the source, there is an explicit check for local connection...


so it was designed to be used local only - every other scenario is not officially supported (though it will work - but requires thorough testing)

-----
Dominick Baier (http://www.leastprivilege.com)

Developing More Secure Microsoft ASP.NET 2.0 Applications (http://www.microsoft.com/mspress/books/9989.asp)

use the tool to remote administer the site?

However, I'm possibly a little confused.

Is the ASP.Net Configuration Tool designed for live use? Or is it just
something for VS2005 to work against?

My site uses Accounts, Roles etc and I'd like to rip out my custom
code and use this tool instead. I want my users to create their own
accounts and then I will add them to the Role that allows access to
the PaySite bits.

So, I guess I want the following:

1. A proper method to distribute this to my provider (a .net hosting
company) 2. Prevent my users from using it through Forms
Authentication

I'm starting to suspect that this might not be possible. For example;
it uses the Machine.config file which I won't have access to as I'm
using a shared host.

All the info/articles I can find are about standard usage of this Tool
(Providers, App. Settings etc). Nothing about actually rolling this
out.

Then again, if it's not designed for live use, what's the point?

Also, on a brand new WS2003 machine, the Config site is there, but
still no login.aspx page. I think this Tool only works with Windows
Authentication?

M.

MCDBA : MCSD

"Dominick Baier" wrote:



.

Relevant Pages

  • Re: Win2K3 domain account connecting to Win2K VPN server in an NT4
    ... - since the server is not in the AD domain, you can't add it to the AD ... NT4 accounts can still authenticate, ... I verified that my test accounts could connect to the VPN before migrating ... > The authentication server did not respond to authentication requests in a ... ...
    (microsoft.public.win2000.ras_routing)
  • Re: Removing SPA from POP3 service of Windows 2003 Server
    ... If you wish to change the authentication type from "Local Accounts" to ... right-click on the server and bring up the properties. ... I think what you need to do is configure your Outlook accounts, ...
    (microsoft.public.windows.server.security)
  • RE: Separating authentication and authorization for admins was: RE: AD across both DMZ & LAN
    ... Subject: Separating authentication and authorization for admins was: RE: ... administrators and/or admin actions on the ... > internet from their PC's. ... so that we only have one set of user accounts to ...
    (Security-Basics)
  • Re: Strange auth denial with IE Integrated Security and IIS; but not Firefox, Netscape
    ... You can't configure this in IIS MMC, ... > Can someone explain why "NTAuthenticationProviders" would be missing> from the Metabase? ... > I had a problem where users would not be able to authenticate even> though I turned on Windows Authentication and configured my ASP.Net> app to use impersonation. ... By default when a machine is added to the AD the machine's>>> LOCAL and NETWORK service accounts are registered with AD. ...
    (microsoft.public.inetserver.iis.security)
  • Re: IIS6, SQL authentication and logging, can it be done?
    ... It is easier in Apache due to the weaker model for user accounts ... authentication, and authorization (IOW you do not want to use Windows ...
    (microsoft.public.dotnet.framework.aspnet.security)