Authorization, Authentication in Web.config

Ask a Question related to ASP.NET Security, Design and Development.

  1. #1

    Default Authorization, Authentication in Web.config

    Hi

    I am trying to ensure that users can only enter my Web
    service on a specific Login web page.

    I've amended Web.config so that authorization and
    authentication are as follows:

    <authentication mode="Forms">
    <forms name="logincookie"
    loginUrl="/LoginForm.aspx"/>
    </authentication>

    and

    <authorization>
    <deny users="?"/>
    </authorization>

    Then I build the solution.

    When I go into Internet Explorer I find that I can still
    go into another web page instead of being directed to the
    LoginForm web page.

    Any ideas?

    Thanks in advance.
    ..


    Guest

  2. Similar Questions and Discussions

    1. windows pass through authentication\authorization....
      I have a requirement for a company intranet where they want to use a single sign-on with their windows 2003 domain (AD) so I was thinking of using...
    2. Secure authentication and authorization
      Hello, I am new to asp.net and try to lean as much as can. I read all about from based authentication and cookie based authorization. In real...
    3. how to limit authorization in admin subfolder from web.config
      I'm in quite of a dilemma, and for the first time: all the articles and discussion forums on the 'net hasn't helped me get rid of my page errors :(...
    4. Really confused about authorization/authentication methods in ASP.Net
      I have been reading and reading the Microsoft best practices, articles on and on but still I can't figure out which method to chose to get started....
    5. authentication and authorization in subfolders
      Hello, I went through several posts and found out that it is only possible to have the authentication tag only at an app level but the...
  3. #2

    Default Re : Authorization, Authentication in Web.config

    Hi

    Try using FormsAuthentication.RedirectFromLoginPage
    method

    The following link may be helpful to you
    [url]http://www.4guysfromrolla.com/webtech/110701-1.3.shtml[/url]

    -Gopi
    >-----Original Message-----
    >Hi
    >
    >I am trying to ensure that users can only enter my Web
    >service on a specific Login web page.
    >
    >I've amended Web.config so that authorization and
    >authentication are as follows:
    >
    > <authentication mode="Forms">
    > <forms name="logincookie"
    >loginUrl="/LoginForm.aspx"/>
    > </authentication>
    >
    >and
    >
    > <authorization>
    > <deny users="?"/>
    > </authorization>
    >
    >Then I build the solution.
    >
    >When I go into Internet Explorer I find that I can still
    >go into another web page instead of being directed to
    the
    >LoginForm web page.
    >
    >Any ideas?
    >
    >Thanks in advance.
    >..
    >
    >
    >.
    >
    S Gopikrishna Guest

Posting Permissions

  • You may not post new threads
  • You may post replies
  • You may not post attachments
  • You may not edit your posts

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139