ASP.NET 2.0 Form Security Error

03-21-2006

Hi,

I've the following code in my web.config -

<authentication mode="Forms">
<forms loginUrl="Login.aspx"
protection="All"
timeout="30"
name=".ASPXAUTH"
requireSSL="false"
slidingExpiration="true"
defaultUrl="default.aspx"
cookieless="UseDeviceProfile"
enableCrossAppRedirects="false" />
</authentication>

And if I try "Default.aspx" directly in the browser; it is not pointing to
Login.aspx!

Please advice!

03-21-2006

add a <authorization> element that denies anonymous users

<authorization>
<deny users="?" />
</authorization>

---------------------------------------
Dominick Baier - DevelopMentor
http://www.leastprivilege.com

> Hi,
>
> I've the following code in my web.config -
>
> <authentication mode="Forms">
> <forms loginUrl="Login.aspx"
> protection="All"
> timeout="30"
> name=".ASPXAUTH"
> requireSSL="false"
> slidingExpiration="true"
> defaultUrl="default.aspx"
> cookieless="UseDeviceProfile"
> enableCrossAppRedirects="false" />
> </authentication>
> And if I try "Default.aspx" directly in the browser; it is not
> pointing to Login.aspx!
>
> Please advice!
>

03-21-2006

Thanks!
It worked out pretty well.

"Dominick Baier [DevelopMentor]" <>
wrote in message news:. com...
> add a <authorization> element that denies anonymous users
>
> <authorization>
> <deny users="?" />
> </authorization>
>
> ---------------------------------------
> Dominick Baier - DevelopMentor
> http://www.leastprivilege.com
>
>> Hi,
>>
>> I've the following code in my web.config -
>>
>> <authentication mode="Forms">
>> <forms loginUrl="Login.aspx"
>> protection="All"
>> timeout="30"
>> name=".ASPXAUTH"
>> requireSSL="false"
>> slidingExpiration="true"
>> defaultUrl="default.aspx"
>> cookieless="UseDeviceProfile"
>> enableCrossAppRedirects="false" />
>> </authentication>
>> And if I try "Default.aspx" directly in the browser; it is not
>> pointing to Login.aspx!
>>
>> Please advice!
>>
>
>

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
How to retrieve form field value if form is EncType=multipart/form-dataForm?	Li Zhang	ASP .Net	4	02-27-2009 01:23 AM
com.ms.security, com.ms.security.PermissionID.FILEIO and error in compiling	Marco	Java	1	01-28-2006 11:18 PM
<form>...</form> - how to supress blank space after </form> in IE?	rob c	Javascript	4	12-30-2005 01:18 PM
IT-Security, Security, e-security	COMSOLIT Messmer	Computer Support	0	09-05-2003 08:34 AM
How secure is the security from my security form?	Aaron	Java	1	08-04-2003 06:16 PM