How do I configure forms authentication? (resolved)

Here is my directory structure

Code:

---

[opsreport]
  web.config
  clientside.js
  styles.css
  logon.aspx
  default.aspx
  summary.aspx
  [dataentry]
      event.aspx
      followup.aspx

---

[opsreport] is a virtual directory set as an application. [dataentry] is just a sub directory.

I want anyomous access for all files in the [opsreport] and forms authentication for all the files in [dataentry]. I would also like this all configured from 1 web.config file.

I finally found an answer!

http://www.theserverside.net/article...Authentication
web.config

Code:

---

<location path="dataentry">
  <system.web>
    <authorization>
      <deny users="?" />
      <allow users="*" />
    </authorization>
  </system.web>
</location>
<location>
  <system.web>
    <authentication mode="Forms" >
      <forms
        name=".opsreport"
        loginUrl="logon.aspx"
        protection="All"
        slidingExpiration="true"
        timeout = "10"
      />
    </authentication>
    <authorization>
      <allow users="?" />
    </authorization>
...

---

I can't get it to work :(
I have a login aspx page and a main aspx page.
I have used:

Code:

---

    <authentication mode="Forms" >
      <forms
        name=".opsreport"
        loginUrl="login.aspx"
        protection="All"
        slidingExpiration="true"
        timeout = "10"
      />
    </authentication>
    <authorization>
        <allow users="*" />
        <deny users="?" />
    </authorization>

---

in my config file, but it still allows me to view the main.aspx when I haven't logged in :(
What am I doing wrong?

Woka

This line in your web.config

PHP Code:

---

<allow users="*" /> 


---

is allowing all(*) users access to your site. Just delete or comment out that line and you should be fine with just <deny users="?" />.

Not wanting to keep this running in 2 threads I thought I'd give you the link to the full thread.
Cheers for the help.

http://www.vbforums.com/showthread.p...hreadid=293629

Woka