RE: Login control and restricted member pages



Hi Nick,

From your description, your ASP.NET application is using Forms
Authentication and you make one of the folder protected from
unauthenticated user. However, you find that after you login, you will
still get a popup window for windows credential when visit pages in a
certain folder, correct?

Regarding on this problem symptom, I think it is likely caused by windows
NTFS permission limitation. By default, even you use Forms Authentication,
ASP.NET runtime will perform file authorization checking on each aspx file
being requested. That means it will ensure the current user(security
account) has the permission to access that certain aspx page's physical
file(through NTFS permission setting). For your scenario, you're using
Forms Authentication(and assume you haven't perform impersonate in your
web.config), the security context is your ASP.NET worker process
identity(in IIS5, the default one is MACHINE\ASPNET, in IIS6, the default
one is "Network Service" account). Therefore, you need to make sure that
account have the permission to access the asp.net page file(will be
requested in your application).

Here are some reference about ASP.NET process identity and
authorization(include url authorization):

#ASP.NET Process Identity
http://msdn2.microsoft.com/en-us/library/aa291339(VS.71).aspx

#Configuring ASP.NET Process Identity
http://msdn2.microsoft.com/en-us/library/dwc1xthy.aspx

#ASP.NET Authorization
http://msdn2.microsoft.com/en-us/library/wce3kxhd.aspx


If you have anything unclear, welcome to post here.

Sincerely,

Steven Cheng

Microsoft MSDN Online Support Lead



==================================================

Get notification to my posts through email? Please refer to
http://msdn.microsoft.com/subscriptions/managednewsgroups/default.aspx#notif
ications.



Note: The MSDN Managed Newsgroup support offering is for non-urgent issues
where an initial response from the community or a Microsoft Support
Engineer within 1 business day is acceptable. Please note that each follow
up response may take approximately 2 business days as the support
professional working with you may need further investigation to reach the
most efficient resolution. The offering is not appropriate for situations
that require urgent, real-time or phone-based interactions or complex
project analysis and dump analysis issues. Issues of this nature are best
handled working with a dedicated Microsoft Support Engineer by contacting
Microsoft Customer Support Services (CSS) at
http://msdn.microsoft.com/subscriptions/support/default.aspx.

==================================================


This posting is provided "AS IS" with no warranties, and confers no rights.



--------------------
From: "NickP" <a@xxxxx>
Subject: Login control and restricted member pages
Date: Wed, 21 Nov 2007 16:17:38 -0000

Hi there,

I have setup a website to use the login control and have been
following
this tutorial,

http://msdn2.microsoft.com/en-us/library/879kf95c(VS.80).aspx

All of my member-only pages are stored in a directoy access that has
annonymous access set to deny all. Unfortunately when login occurs and
the
default member page is navigated to a Windows Forms dialog appears and
asks
for my username and password, to which I have to supply my hosting
credentials in order to see the site correctly. If I leave the entries
blank and press cancel, I see the page but the graphics / styles to not
load.

Any ideas what I am doing wrong here? Many thanks for your time and
help.

Nick.




.



Relevant Pages

  • RE: GDI+ error with Remote Desktop
    ... The application runs well if not running through Remote Desktop. ... you have a WinForm application on a Windows ... Microsoft Online Community Support ... where an initial response from the community or a Microsoft Support ...
    (microsoft.public.dotnet.framework.windowsforms)
  • RE: System time change notification
    ... have a windows UI, it is not an actual issue for me. ... But since server application will run in Session 0 in Vista, ... Microsoft Online Community Support ... where an initial response from the community or a Microsoft Support ...
    (microsoft.public.win32.programmer.tools)
  • Re: interrupting a lengthy sequence
    ... Winform GUI normally runs in a single thread, so when the GUI thread is ... Windows messages currently in the message queue. ... Microsoft Online Community Support ... where an initial response from the community or a Microsoft Support ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: Forms Authentication - Sudden Redirect Failure on Login
    ... login page and executable to the production environment failed, ... web app in VS 2005 using forms authentication. ... Microsoft Online Community Support ... where an initial response from the community or a Microsoft Support ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • RE: Problem with Process.GetCurrentProcess() when starting a servi
    ... System is Windows XP. ... to send the sample project to me by removing "online." ... Microsoft Online Community Support ... where an initial response from the community or a Microsoft Support ...
    (microsoft.public.dotnet.general)