Windows authentication difficulties

I am having problems trying to perform authorization in a web
application using windows authentication. According to the
instructions I should be able to use the following elements in the
<authorization> section of my config to only allow selected users to
access the service.

<allow users="[comma separated list of users]"/>
<deny users="*"/>

However, if I try this I get the login prompt but it does not allow
anyone to be authorized, even those users in the allow list. I have
tried several different combination with odd results.

My test machine has two users, one an administrator (let us call this
"A") and one a restricted user (B).

If I put <allow users="B"/> <deny users="*"/> then trying to access the
application from either a local machine or a remote machine causes the
login dialog to be displayed but B does not get authenticated.

If I put <allow users="B"/> <deny users="A"/> then accessing the
application from the local machine just works without any login dialog
being displayed. If you access the application from a remote machine
you get the login dialog but any valid user can login successfully.

Does anyone know why I cannot get this to work. I am using windows
2000 Professional and .Net version 1.1 on both the development and test
computers.

Thanks

Alex

.

Relevant Pages

  • Re: asp.net windows authentication
    ... if the browser requests a resource and get a 401, the browser asks a new login. ... you could write a handler that checked for the 401 and if the user had sent a valid login, redirect to an access denied page instead of responding with a 401. ... when a user trys to access a page that they do not have access to, they are given the annoying windows authentication popup, which is useless because they are denied in the web.config file. ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Websites require a login
    ... I am an admin on the local machine. ... just to see if authorization is the problem. ... I login with the same login I have already logged in with, it works, if I ...
    (microsoft.public.dotnet.framework.aspnet)
  • Websites require a login
    ... if I am not a user on the local machine. ... I am using windows authentication, ... authorization is the problem. ... Still requires a login. ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Credentials not being passed with remote access
    ... allowed windows authentication to work, ... I had assumed johnx was a domain user rather than a local Windows account. ... johnx was set up as a local login on sql server. ...
    (microsoft.public.sqlserver.security)
  • Re: AUTHORIZATION with WINDOWS AUTHENTICATION -- HELP!!
    ... > basic windows authentication for this .NET application ... There was no way for you to know it, but this* is a classic asp newsgroup. ... > how IIS is involved. ... > manipulated for the authorization process? ...
    (microsoft.public.inetserver.iis.security)