IIS 6 & forms authentication & redirect

From: Grzegorz Kaczor (grzegorz.kaczor_at_cc.com.pl)
Date: 02/07/05

  • Next message: Brian: "how to configure for OWA with IIS" 
    Date: Mon, 07 Feb 2005 16:36:27 +0100

    Hello,

            I have an ASP.NET application in my website in virtual folder A. This
    folder contains the application itself. I also have a data virtual
    directory B which contains data that can be seen by authenticated users.

            I've implemented forms authentication (with application in folder A) in
    a standard way. I've also set up a redirection in IIS so that every
    request concerning folder B (for example GET /B/a/b/c) is redirected to
    A/GetFile.aspx (so the final request is A/GetFile.aspx/a/b/c). This way
    I can protect contents of the B folder with forms authentication.

            Now I use the A application to find interesting documents in folder B.
    I find them and get a list of links, starting with /B... . I click on
    one of them and I HAVE TO AUTHENTICATE ONCE AGAIN to get access to that
    file.

            Is it possible to perform a redirect in the same authentication context?

            Shall the problem occur if I make B be a subdirectory of A?

    Thanks
    Grzegorz Kaczor

  • Next message: Brian: "how to configure for OWA with IIS"

    Relevant Pages

    • Re: Forms Authentication - context changing
      ... works via the cookie (generally, if you using the default web.config ... I have an ASP.NET application in my website in virtual folder A. ... I've implemented forms authentication (with application in folder ... I've also set up a redirection in IIS so that ...
      (microsoft.public.dotnet.framework.aspnet)
    • Re: Multi Level Forms Authentication Help DESPERATELY NEEDED!
      ... Forms authentication supports this functionality. ... You can have a web.config in each folder that specifies who's allowed in. ... > to access certain files on the web site to an ASP .NET Forms ... > while still managing access to the aforementioned subdirectories. ...
      (microsoft.public.dotnet.framework.aspnet)
    • Domain Name Forging On Authentication Prompt
      ... Domain Name Forging On Authentication Prompt ... To bypass IE domain restrictions the ip of the protected folder needs ... [End Code Sample] ...
      (Vuln-Dev)
    • RE: Need to restrict remote users to access only specific folder(s
      ... This sounds like an authentication problem -- or a firewall problem. ... go through the IIS logs to look for problems authenticating or on the service ... user via file access permissions when working internally. ... Suggestions for better folder level access via RWW? ...
      (microsoft.public.windows.server.active_directory)
    • Re: Authentication login screen appears on both frames of the framset
      ... This section sets the authentication policies of the application. ... This section sets the authorization policies of the application. ... Application-level tracing enables trace log output for every page ... folder / file to set ...
      (microsoft.public.dotnet.framework.aspnet)