Main form and login form in different folders using Forms Authen

[Bruce]

Having a problem on my site when the login form and the main form are in
different apps. When the main app redirects to the login form app,
authorization works but the redirect back always brings up the Windows
password dialog.

If I put the two forms in the same app folder, everything works as expected.

In the former the two apps use identical web.config files (though in
separate folders) and forms authentication is configured correctly. I've even
tried creating a custom validation key in the machine.config file of the
server but the same thing happens.

What am I doing wrong?

Bruce

[Joseph MCAD]

April 8, 2005

If the forms are in seperate folders which are configured to be virtual
directories, then you will be prompted to sign in when you browse to each
folder. This is because signing in to one application will grant access to
that application but browsing to the other folder will cause authentication
to be required for that application and folder. I hope you see what I mean.
I would check IIS and make sure that the folders are both not virtual
directories. HTH

Joseph MCAD


"Bruce" <Bruce@discussions.microsoft.com> wrote in message
news:BDA8DD65-6BA8-4D45-BD02-3884627A20B4@microsoft.com...

> Having a problem on my site when the login form and the main form are in
> different apps. When the main app redirects to the login form app,
> authorization works but the redirect back always brings up the Windows
> password dialog.
>
> If I put the two forms in the same app folder, everything works as
> expected.
>
> In the former the two apps use identical web.config files (though in
> separate folders) and forms authentication is configured correctly. I've
> even
> tried creating a custom validation key in the machine.config file of the
> server but the same thing happens.
>
> What am I doing wrong?
>
> Bruce

[Bruce]

They really have to be virtual folders/apps if the login form is an aspx page
that will be run in another folder. The real question is *how* do I do this?
How can I have a login form in another app authenticate the first application?

Bruce

"Joseph MCAD" wrote:

> April 8, 2005
>
> If the forms are in seperate folders which are configured to be virtual
> directories, then you will be prompted to sign in when you browse to each
> folder. This is because signing in to one application will grant access to
> that application but browsing to the other folder will cause authentication
> to be required for that application and folder. I hope you see what I mean.
> I would check IIS and make sure that the folders are both not virtual
> directories. HTH

[Joseph MCAD]

April 11, 2005

Actually the folder does Not have to be a virtual directory to contain
..aspx pages If it is contained within a virtual directory. Such as...

Root (VDirectory)
-SubFolder (Non VDirectory)
-Login.aspx

Even though the SubFolder is not a vdirectory, it still can contain .aspx
pages, because it is contained within Root which Is a vdirectory. I hope
this makes since. :-) Have a great day!

Joseph MCAD



"Bruce" <Bruce@discussions.microsoft.com> wrote in message
news:B69DC3BF-B085-474D-886A-87E01DA9821E@microsoft.com...

> They really have to be virtual folders/apps if the login form is an aspx
> page
> that will be run in another folder. The real question is *how* do I do
> this?
> How can I have a login form in another app authenticate the first
> application?
>
> Bruce
>
> "Joseph MCAD" wrote:
>

>> April 8, 2005
>>
>> If the forms are in seperate folders which are configured to be
>> virtual
>> directories, then you will be prompted to sign in when you browse to each
>> folder. This is because signing in to one application will grant access
>> to
>> that application but browsing to the other folder will cause
>> authentication
>> to be required for that application and folder. I hope you see what I
>> mean.
>> I would check IIS and make sure that the folders are both not virtual
>> directories. HTH

>

[Bruce]

Maybe I'm describing this incorrectly. I have two separate applications. One
of the applications has a login form aspx page. I want to use this page from
the other application. How do I do this?

"Joseph MCAD" wrote:

> April 11, 2005
>
> Actually the folder does Not have to be a virtual directory to contain
> ..aspx pages If it is contained within a virtual directory. Such as...
>
> Root (VDirectory)
> -SubFolder (Non VDirectory)
> -Login.aspx
>
> Even though the SubFolder is not a vdirectory, it still can contain .aspx
> pages, because it is contained within Root which Is a vdirectory. I hope
> this makes since. :-) Have a great day!
>
> Joseph MCAD
>
>
>
> "Bruce" <Bruce@discussions.microsoft.com> wrote in message
> news:B69DC3BF-B085-474D-886A-87E01DA9821E@microsoft.com...

> > They really have to be virtual folders/apps if the login form is an aspx
> > page
> > that will be run in another folder. The real question is *how* do I do
> > this?
> > How can I have a login form in another app authenticate the first
> > application?
> >
> > Bruce
> >
> > "Joseph MCAD" wrote:
> >

> >> April 8, 2005
> >>
> >> If the forms are in seperate folders which are configured to be
> >> virtual
> >> directories, then you will be prompted to sign in when you browse to each
> >> folder. This is because signing in to one application will grant access
> >> to
> >> that application but browsing to the other folder will cause
> >> authentication
> >> to be required for that application and folder. I hope you see what I
> >> mean.
> >> I would check IIS and make sure that the folders are both not virtual
> >> directories. HTH

> >

>
>
>

[Joseph MCAD]

April 11, 2005

I understand now. I am not quite sure (as I haven't ever heard of
something like this), but I suppose that you could use Forms Authentication
and create the authentication tickets and cookies yourself. I am not
familiar with creating them yourself, but I do know that you use the
FormAuthentication class for most of it. In both applications you could then
examine the cookie in the same way and if it is not there then redirect to
that application's login page. Having a cookie authenticate to two
applications is as secure as having two seperate ones though. I don't know
whether my above suggestion will work, but you might consider it. Sorry for
misunderstanding and I wish you the best of luck! :-)

Joseph MCAD



"Bruce" <Bruce@discussions.microsoft.com> wrote in message
news:4CC8C0E6-E991-4AC9-803C-EC0582E9320F@microsoft.com...

> Maybe I'm describing this incorrectly. I have two separate applications.
> One
> of the applications has a login form aspx page. I want to use this page
> from
> the other application. How do I do this?
>
> "Joseph MCAD" wrote:
>

>> April 11, 2005
>>
>> Actually the folder does Not have to be a virtual directory to
>> contain
>> ..aspx pages If it is contained within a virtual directory. Such as...
>>
>> Root (VDirectory)
>> -SubFolder (Non VDirectory)
>> -Login.aspx
>>
>> Even though the SubFolder is not a vdirectory, it still can contain
>> .aspx
>> pages, because it is contained within Root which Is a vdirectory. I hope
>> this makes since. :-) Have a great day!
>>
>> Joseph MCAD
>>
>>
>>
>> "Bruce" <Bruce@discussions.microsoft.com> wrote in message
>> news:B69DC3BF-B085-474D-886A-87E01DA9821E@microsoft.com...

>> > They really have to be virtual folders/apps if the login form is an
>> > aspx
>> > page
>> > that will be run in another folder. The real question is *how* do I do
>> > this?
>> > How can I have a login form in another app authenticate the first
>> > application?
>> >
>> > Bruce
>> >
>> > "Joseph MCAD" wrote:
>> >
>> >> April 8, 2005
>> >>
>> >> If the forms are in seperate folders which are configured to be
>> >> virtual
>> >> directories, then you will be prompted to sign in when you browse to
>> >> each
>> >> folder. This is because signing in to one application will grant
>> >> access
>> >> to
>> >> that application but browsing to the other folder will cause
>> >> authentication
>> >> to be required for that application and folder. I hope you see what I
>> >> mean.
>> >> I would check IIS and make sure that the folders are both not virtual
>> >> directories. HTH
>> >

>>
>>
>>