Re: My web forms will not allow users to submit.

From: David Wang [Msft] (someone_at_online.microsoft.com)
Date: 10/26/05


Date: Tue, 25 Oct 2005 18:29:35 -0700

All you need to do is:
1. Configure authentication on IIS for the Page containing the FORM to
determine the user identity that performs the submit
2. Make sure the user identity from #1 has write permissions to wherever
they are trying to submit the FORM

For example, I have a sample Form submittal page that writes form data to a
file. To allow any user to be able to submit the form, all I did was:
1. Enable only anonymous authentication on teh Form submittal page itself
2. Obtained the anonymous user identity name (default is IUSR_MACHINENAME)
3. Configured Write ACL for IUSR_MACHINE on the FileSystem where my Form was
writing its post data

That's it. Full security enabled, no one has full-control, and nothing extra
is turned on. The proper way to configure an application, especially on a
secure platform like IIS6. Though you did upgrade, which is less than
optimal for full security benefits.

-- 
//David
IIS
http://blogs.msdn.com/David.Wang
This posting is provided "AS IS" with no warranties, and confers no rights.
//
"Loyal" <Loyal@discussions.microsoft.com> wrote in message
news:66C666FB-04F2-4A43-BC14-029F57CD9CE0@microsoft.com...
I upgraded from server 2000 to standard 2003.  I can get all of my Intranet
to work with exception to web forms.  The users are asked to submit a user
name and password to complete.  In the past they have never been asked to do
this.  Also the only user name and password the site will take is that of a
Domain Admin.  I will not give that out obviously to line staf.  How do I
allow the forms to be used with no username or password?  I have everyone
set
to basicaly no security, full control, read write and anything eles that can
be checked.  I am also allowing anonomus access.  Any Ideas?  The web forms
are developed with Frontpage 2003.


Relevant Pages

  • Re: FormsAuthentication.SignOut() and User.Identity
    ... As for the Forms Authentication, the current User Identity is attached ... so as to let the client make a new request to the page (or any other ... | From: Mark Olbert ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Capture Handle using authentication
    ... user identity while both Anonymous Access and Integrated Windows ... When Anonymous Access is enabled in IIS, ... no authentication will be made against the user ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Capture Handle using authentication
    ... user identity while both Anonymous Access and Integrated Windows ... When Anonymous Access is enabled in IIS, ... no authentication will be made against the user ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Upgrade Questons
    ... Advanced security indeed requires a sql 2000 database. ... computer account authentication in advanced security. ... And as far as I know there is no possibility to upgrade the ... that secondary site server licenses are free in sms 2003. ...
    (microsoft.public.sms.setup)