Allow anonymous access to subdirectory

Okay, so I thought this would be easy, but it's not turning out that
way. Let's see how good you guys are! :-)

I have a windows authentication-based Intranet application. An excerpt
from the web.config in the root of the application is as follows:

<authentication mode="Windows" />
<authorization>
<allow roles="mydomain\Domain Users" />
<deny users="*" />
</authorization>
<roleManager enabled="true"
defaultProvider="AspNetWindowsTokenRoleProvider"/>
<siteMap defaultProvider="XmlSiteMapProvider" enabled="true">
<providers>
<add name="XmlSiteMapProvider" description="Default SiteMap provider."
type="System.Web.XmlSiteMapProvider" siteMapFile="Web.sitemap"
securityTrimmingEnabled="true"/>
</providers>
</siteMap>
</system.web>
-----------------------------

Then in the /admin subdirectory, I have this:
<authorization>
<allow roles="mydomain\Admins,mydomain\Developers,mydomain\Budget
Admins" />
<deny users="*" />
</authorization>
Then in the a subdirectory inside /admin I have /property which has no
web.config and then inside property I have a folder called /external.
I want to grant anonymous users access to this /external directory...
so I added the following web.config to the /external directory:

<authorization>
<allow users="?" />
</authorization>
As for IIS, the root application authentication is integrated windows
authentication. Then for the external directory, I checked only
anonymous. This used to work in asp.net 1.x but now I'm using these
web.configs for security and it now prompts the user to log in.
However, if the user hits cancel, it shows the page. I just want to
prevent the login prompt from showing up.

Thanks in advance!

.

Relevant Pages

  • asp.net vulnerability
    ... From: Windows NTBugtraq Mailing List ... More details on ASP.NET vulnerability ... There has been some confusion with the ASP.NET forms authentication issue ... authorization issue, not an authentication issue. ...
    (microsoft.public.sharepoint.portalserver)
  • RE: ActiveDirectory and user page Access
    ... since you are going to use AD memberships ... Windows Integrated Authentication instead of Form. ... Create an authorization store ...
    (microsoft.public.vsnet.general)
  • RE: ActiveDirectory and user page Access
    ... From the code you just gave can you please revised it to use windows ... Windows Integrated Authentication instead of Form. ... role manager with Authorization Manager (AzMan) tool, ... Create an authorization store ...
    (microsoft.public.vsnet.general)
  • Re: Windows GSSAPI ssh connection via cross-realm authentication problems
    ... } Subject: Re: Windows GSSAPI ssh connection via cross-realm authentication ... with Windows kerberos tickets, regardless of presence of a local account. ... to use that for some authorization decisions, ...
    (comp.protocols.kerberos)
  • Re: Change in ASP.Net authentication between Win2000 and Win2003
    ... > is turning on/off Kerberos is occuring. ... It control how IE deals with "Authentication: ... when you put IIS6 in a domain and have "Integrated Windows Authentication" ...
    (microsoft.public.windows.server.security)
Loading