Re: Bypassing authentication

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance



As I said, no tilde. ;-)

allow="?" means just that allow unauthenticated users to access the page
(not sure if that makes difference here, but that depends on how you users
are accessing it). allow="*" means that all are allowed.

--
Teemu Keiski
ASP.NET MVP, AspInsider
Finland, EU
http://blogs.aspadvice.com/joteke



"John" <John@xxxxxxxxxxxxxxxxxxxx> wrote in message
news:%23$vm5RkYGHA.1200@xxxxxxxxxxxxxxxxxxxxxxx
This worked (below). Note the * and no ~.

<location path="FolderA/FolderB/a.asmx">
<system.web>
<authorization>
<allow users="*"></allow>
</authorization>
</system.web>
</location>


"Teemu Keiski" <joteke@xxxxxxxxxxxxxxx> wrote in message
news:OwDFBEhYGHA.4652@xxxxxxxxxxxxxxxxxxxxxxx
Try without tilde (~ ) in path attribute

Here's docs about <location> element:
http://msdn2.microsoft.com/en-US/library/b6x6shw7(VS.80).aspx

--
Teemu Keiski
ASP.NET MVP, AspInsider
Finland, EU
http://blogs.aspadvice.com/joteke

"John" <John@xxxxxxxxxxxxxxxxxxxx> wrote in message
news:%238O$OAgYGHA.460@xxxxxxxxxxxxxxxxxxxxxxx
I have used below but no luck. Am I missing something?

Thanks

Regards

<location path="~FolderA/FolderB/a.asmx">
<system.web>
<authorization>
<allow users="?"/>
</authorization>
</system.web>
</location>


"Teemu Keiski" <joteke@xxxxxxxxxxxxxxx> wrote in message
news:%23wW4hxeYGHA.508@xxxxxxxxxxxxxxxxxxxxxxx
In web.config with <location> element

<configuration>
<location path="exclude.aspx">
<system.web>
<authorization>
<allow users="?"/>
</authorization>
</system.web>
</location>

<! -- Normal config goes here as before -->
<system.web>

</system.web>
</configuration>


--
Teemu Keiski
ASP.NET MVP, AspInsider
Finland, EU
http://blogs.aspadvice.com/joteke


"John" <John@xxxxxxxxxxxxxxxxxxxx> wrote in message
news:ew6G9jdYGHA.508@xxxxxxxxxxxxxxxxxxxxxxx
Hi

I have established form authentication so every page on the site send
the access to a specific login page. I need however to bypass the
authentication for my web service page to allow it to be accessed
without login. How can I selectively exclude a page from form
authentication?

Thanks

Regards











.



Relevant Pages

  • Re: Bypassing authentication
    ... Teemu Keiski ... I have established form authentication so every page on the site send ... the access to a specific login page. ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Bypassing authentication
    ... Teemu Keiski ... I have established form authentication so every page on the site send ... the access to a specific login page. ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: How to prevent a webservice from responding anything at all?
    ... ASP.NET Web services application uses the same authentication method as your ... and disallow unauthenticated users from accessing your web service AT ALL. ... > server resources. ... I would like my webservice not to respond *at all* so ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Authentication
    ... >I usually use Forms Authentication in one of four models, ... excepting a couple of directories that require login. ... > unauthenticated users, drop in a stripped-down Web.config that looks like ...
    (microsoft.public.dotnet.framework.aspnet)
  • authorization element in web.config
    ... I tried to deny access through the authorization element in web.config ... Itried to deny the unauthenticated users with? ...
    (microsoft.public.dotnet.framework.aspnet.security)