Ask a Question related to ASP.NET Security, Design and Development.
-
www.MSmobiles.com #1
forms authentication: redirects for *.aspx pages only, not for other extensions, not for static content
Hi!
I am using something like this in web.config :
<authentication mode="Forms">
<forms name=".MSMOBILES_COM___COOKIE"
loginUrl="login.aspx"
protection="All"
timeout="30"
path="/">
<credentials passwordFormat="Clear">
<user name="user1" password="password1"/>
</credentials>
</forms>
</authentication>
</authentication>
then, when I try to access some *.aspx page, for example:
myserver.com/kirk.aspx
I get redirection to:
myserver.com/login.aspx?ReturnUrl=%2fportal%2fdupa.aspx
and then everything is OK, but when try to access some other pages and
content for example:
myserver.com/test1.html
or
myservrc.com/test1.gif
..... then NO REDIRECTION takes place and the server allows access to this
content!!!!
How to force IIS to make rediredction also in case of static (i.e. not
*.aspx) content????
www.MSmobiles.com Guest
-
Solution to Forms Authentication redirecting to bogus default.aspx page with RedirectFromLoginPage
hi, i've read a lot of posts here about people who ran into problems using forms authentication, and the RedirectFromLoginPage() method, which... -
forms authentication doesn't work for static pages/files like GIF/HTML/PDF ?
do I understand it correctly that forms authentication doesn't work for static pages/files like GIF/HTML/PDF ? so I cannot convince IIS to... -
Forms Auth and none aspx pages
I have forms authentication working for any aspx page (I'm doing this on both a folder level and also individual files). The problem I have is if... -
Two authentication dialogs displayed for aspx pages
I have a web application that uses both asp and aspx pages. We are using basic authentication. When someone tries to access an asp page, they... -
Adding aspx pages to a static FrontPage site
I have a very simple website, built in FrontPage 2002, which displays static information only. I would like to add some ASP.NET web forms... -
Hardip Wadhwa #2
Re: forms authentication: redirects for *.aspx pages only, not for other extensions, not for static content
You can only redirect " .aspx pages" with default IIS Settings. If you want
to redirect for other content i.e. .htm, .gif you have to map those files in
IIS to get it processed by aspnet_isapi.dll.
"www.MSmobiles.com" <nospam@msmobiles.com> wrote in message
news:OYUdXZFbEHA.1292@TK2MSFTNGP10.phx.gbl...> Hi!
>
> I am using something like this in web.config :
>
> <authentication mode="Forms">
> <forms name=".MSMOBILES_COM___COOKIE"
> loginUrl="login.aspx"
> protection="All"
> timeout="30"
> path="/">
> <credentials passwordFormat="Clear">
> <user name="user1" password="password1"/>
> </credentials>
> </forms>
> </authentication>
> </authentication>
>
> then, when I try to access some *.aspx page, for example:
>
> myserver.com/kirk.aspx
>
> I get redirection to:
>
> myserver.com/login.aspx?ReturnUrl=%2fportal%2fdupa.aspx
>
> and then everything is OK, but when try to access some other pages and
> content for example:
>
> myserver.com/test1.html
> or
> myservrc.com/test1.gif
>
> .... then NO REDIRECTION takes place and the server allows access to this
> content!!!!
> How to force IIS to make rediredction also in case of static (i.e. not
> *.aspx) content????
>
>
>
>
>
>
>
Hardip Wadhwa Guest
-
Hardip Wadhwa #3
Re: forms authentication: redirects for *.aspx pages only, not for other extensions, not for static content
You can only redirect " .aspx pages" with default IIS Settings. If you want
to redirect for other content i.e. .htm, .gif you have to map those files in
IIS to get it processed by aspnet_isapi.dll.
"www.MSmobiles.com" <nospam@msmobiles.com> wrote in message
news:OYUdXZFbEHA.1292@TK2MSFTNGP10.phx.gbl...> Hi!
>
> I am using something like this in web.config :
>
> <authentication mode="Forms">
> <forms name=".MSMOBILES_COM___COOKIE"
> loginUrl="login.aspx"
> protection="All"
> timeout="30"
> path="/">
> <credentials passwordFormat="Clear">
> <user name="user1" password="password1"/>
> </credentials>
> </forms>
> </authentication>
> </authentication>
>
> then, when I try to access some *.aspx page, for example:
>
> myserver.com/kirk.aspx
>
> I get redirection to:
>
> myserver.com/login.aspx?ReturnUrl=%2fportal%2fdupa.aspx
>
> and then everything is OK, but when try to access some other pages and
> content for example:
>
> myserver.com/test1.html
> or
> myservrc.com/test1.gif
>
> .... then NO REDIRECTION takes place and the server allows access to this
> content!!!!
> How to force IIS to make rediredction also in case of static (i.e. not
> *.aspx) content????
>
>
>
>
>
>
>
Hardip Wadhwa Guest



Reply With Quote

