How do I configure forms authentication? (resolved)

[jmeckley]

Here is my directory structure

[opsreport]
   web.config
   clientside.js
   styles.css
   logon.aspx
   default.aspx
   summary.aspx
   [dataentry]
      event.aspx
      followup.aspx

[opsreport] is a virtual directory set as an application. [dataentry] is just a sub directory.

I want anyomous access for all files in the [opsreport] and forms authentication for all the files in [dataentry]. I would also like this all configured from 1 web.config file.

[jmeckley]

I finally found an answer!

http://www.theserverside.net/article...Authentication
web.config

<location path="dataentry">
  <system.web>
    <authorization>
      <deny users="?" />
      <allow users="*" />
    </authorization>
  </system.web>
</location>
<location>
  <system.web>
    <authentication mode="Forms" >
      <forms
        name=".opsreport" 
        loginUrl="logon.aspx" 
        protection="All"
        slidingExpiration="true" 
        timeout = "10"
      />
    </authentication>
    <authorization>
      <allow users="?" />
    </authorization>
...

[Wokawidget]

I can't get it to work
I have a login aspx page and a main aspx page.
I have used:

    <authentication mode="Forms" >
      <forms
        name=".opsreport" 
        loginUrl="login.aspx" 
        protection="All"
        slidingExpiration="true" 
        timeout = "10"
      />
    </authentication>
    <authorization>
        <allow users="*" /> 
        <deny users="?" />
    </authorization>

in my config file, but it still allows me to view the main.aspx when I haven't logged in
What am I doing wrong?

Woka

[Fishcake]

This line in your web.config

<allow users="*" /> 

is allowing all(*) users access to your site. Just delete or comment out that line and you should be fine with just <deny users="?" />.

[Wokawidget]

Not wanting to keep this running in 2 threads I thought I'd give you the link to the full thread.
Cheers for the help.

http://www.vbforums.com/showthread.p...hreadid=293629

Woka