Forms Authentication - Does Not Redirect

[Steve Jansen]

Elmo,

Perhaps you are missing the "allow" child node in your web.config file?

<authorization>
<deny users="?" /> <!-- denies anonymous access -->
<allow users="*, YourRoleName, SomeUsername, Etc" /> <!--allows all
authenticated users -->
</authorization>

According to MSDN: "The default authorization rule in the Machine.config
file is <allow users="*"/> so, by default, access is allowed unless
configured otherwise." Looks like you forgot to include an allow tag.

-Steve

"ElmoWatson" <sputnik75043@yahoo.com> wrote in message
news:OQBUeEsVDHA.2544@tk2msftngp13.phx.gbl...

> Here's my problem - - I'm trying to setup Forms Authentication on my

server.

> I can get the login page to show up every time, but, when it authenticates
> (I have a database lookup setup, which apparently DOES give back good

data),

> it just refreshes the login page, deleting the username & password.
>
> I know the database routine works. It returns a user's account properties,
> if verified and nothing, if not - - then, if it returns data from the
> database, I set 'blnValidUer' to True - otherwise, I set it to false. This
> is working as expected.
> Then, I do this in my code:
> if blnValidUser="True" then
> FormsAuthentication.RedirectFromLoginPage(txtUID.t ext, True)
> (I've also tried -----'response.Write (request.QueryString
> ("ReturnURL") & "<br>")
> else
> lblError.text="We're sorry, but the information you provided does not
> match our database. Please try again."
> End If
>
> Here's my Web.config Code:
> <authentication mode="Forms">
> <forms name="MySite"
> loginUrl="login.aspx"
> protection="All"
> timeout="480"
> path="/"
> />
> </authentication>
> <authorization>
> <deny users="?" />
> </authorization>
> I checked an earlier post - - my webserver is named normally, with nothing
> but letters (no underscores, etc) - - so that's not the problem
>
> Is there something I'm missing here? Why doesn't it redirect correctly?
>
>

[ElmoWatson]

Has anyone got any ideas on this? I still can't seem to get it to redirect
after authentication......(it still just refreshes the login page)

"ElmoWatson" <sputnik75043@yahoo.com> wrote in message
news:Of%236NGtVDHA.1680@tk2msftngp13.phx.gbl...

> OK - but I need to just allow users, once they've been authenticated

through

> my database query...
> I tried adding:
> <allow users="*"/>
> But that doesn't work either. Or I should say, that it works the same was

as

> before - it still just refreshes the Login page
>
> I'm not sure what to put in place of names, after the asterisk, in this
> case......
>
> How can I procede here?
>
> "Steve Jansen" <stj3@nospam.columbia.edu> wrote in message
> news:%23r4jkpsVDHA.2224@TK2MSFTNGP09.phx.gbl...

> > Elmo,
> >
> > Perhaps you are missing the "allow" child node in your web.config file?
> >
> > <authorization>
> > <deny users="?" /> <!-- denies anonymous access -->
> > <allow users="*, YourRoleName, SomeUsername, Etc" /> <!--allows all
> > authenticated users -->
> > </authorization>
> >
> > According to MSDN: "The default authorization rule in the Machine.config
> > file is <allow users="*"/> so, by default, access is allowed unless
> > configured otherwise." Looks like you forgot to include an allow tag.
> >
> > -Steve
> >
> > "ElmoWatson" <sputnik75043@yahoo.com> wrote in message
> > news:OQBUeEsVDHA.2544@tk2msftngp13.phx.gbl...

> > > Here's my problem - - I'm trying to setup Forms Authentication on my

> > server.

> > > I can get the login page to show up every time, but, when it

> authenticates

> > > (I have a database lookup setup, which apparently DOES give back good

> > data),

> > > it just refreshes the login page, deleting the username & password.
> > >
> > > I know the database routine works. It returns a user's account

> properties,

> > > if verified and nothing, if not - - then, if it returns data from the
> > > database, I set 'blnValidUer' to True - otherwise, I set it to false.

> This

> > > is working as expected.
> > > Then, I do this in my code:
> > > if blnValidUser="True" then
> > > FormsAuthentication.RedirectFromLoginPage(txtUID.t ext, True)
> > > (I've also tried -----'response.Write (request.QueryString
> > > ("ReturnURL") & "<br>")
> > > else
> > > lblError.text="We're sorry, but the information you provided does

> not

> > > match our database. Please try again."
> > > End If
> > >
> > > Here's my Web.config Code:
> > > <authentication mode="Forms">
> > > <forms name="MySite"
> > > loginUrl="login.aspx"
> > > protection="All"
> > > timeout="480"
> > > path="/"
> > > />
> > > </authentication>
> > > <authorization>
> > > <deny users="?" />
> > > </authorization>
> > > I checked an earlier post - - my webserver is named normally, with

> nothing

> > > but letters (no underscores, etc) - - so that's not the problem
> > >
> > > Is there something I'm missing here? Why doesn't it redirect

correctly?

> > >
> > >

> >
> >

>
>

[Stage]

Can you post the URL that is showing in the browers address window when you
get the login screen.


"ElmoWatson" <sputnik75043@yahoo.com> wrote in message
news:eWsTJmGWDHA.1900@TK2MSFTNGP10.phx.gbl...

> Has anyone got any ideas on this? I still can't seem to get it to redirect
> after authentication......(it still just refreshes the login page)
>
> "ElmoWatson" <sputnik75043@yahoo.com> wrote in message
> news:Of%236NGtVDHA.1680@tk2msftngp13.phx.gbl...

> > OK - but I need to just allow users, once they've been authenticated

> through

> > my database query...
> > I tried adding:
> > <allow users="*"/>
> > But that doesn't work either. Or I should say, that it works the same

was

> as

> > before - it still just refreshes the Login page
> >
> > I'm not sure what to put in place of names, after the asterisk, in this
> > case......
> >
> > How can I procede here?
> >
> > "Steve Jansen" <stj3@nospam.columbia.edu> wrote in message
> > news:%23r4jkpsVDHA.2224@TK2MSFTNGP09.phx.gbl...

> > > Elmo,
> > >
> > > Perhaps you are missing the "allow" child node in your web.config

file?

> > >
> > > <authorization>
> > > <deny users="?" /> <!-- denies anonymous access -->
> > > <allow users="*, YourRoleName, SomeUsername, Etc" /> <!--allows all
> > > authenticated users -->
> > > </authorization>
> > >
> > > According to MSDN: "The default authorization rule in the

Machine.config

> > > file is <allow users="*"/> so, by default, access is allowed unless
> > > configured otherwise." Looks like you forgot to include an allow tag.
> > >
> > > -Steve
> > >
> > > "ElmoWatson" <sputnik75043@yahoo.com> wrote in message
> > > news:OQBUeEsVDHA.2544@tk2msftngp13.phx.gbl...
> > > > Here's my problem - - I'm trying to setup Forms Authentication on my
> > > server.
> > > > I can get the login page to show up every time, but, when it

> > authenticates

> > > > (I have a database lookup setup, which apparently DOES give back

good

> > > data),
> > > > it just refreshes the login page, deleting the username & password.
> > > >
> > > > I know the database routine works. It returns a user's account

> > properties,

> > > > if verified and nothing, if not - - then, if it returns data from

the

> > > > database, I set 'blnValidUer' to True - otherwise, I set it to

false.

> > This

> > > > is working as expected.
> > > > Then, I do this in my code:
> > > > if blnValidUser="True" then
> > > > FormsAuthentication.RedirectFromLoginPage(txtUID.t ext, True)
> > > > (I've also tried -----'response.Write (request.QueryString
> > > > ("ReturnURL") & "<br>")
> > > > else
> > > > lblError.text="We're sorry, but the information you provided

does

> > not

> > > > match our database. Please try again."
> > > > End If
> > > >
> > > > Here's my Web.config Code:
> > > > <authentication mode="Forms">
> > > > <forms name="MySite"
> > > > loginUrl="login.aspx"
> > > > protection="All"
> > > > timeout="480"
> > > > path="/"
> > > > />
> > > > </authentication>
> > > > <authorization>
> > > > <deny users="?" />
> > > > </authorization>
> > > > I checked an earlier post - - my webserver is named normally, with

> > nothing

> > > > but letters (no underscores, etc) - - so that's not the problem
> > > >
> > > > Is there something I'm missing here? Why doesn't it redirect

> correctly?

> > > >
> > > >
> > >
> > >

> >
> >

>
>