Re: Does Msft Tech monitor this group?

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: Kyle Eberle (kyle_eberle_at_hotmail.com)
Date: 11/05/04 

Date: Fri, 5 Nov 2004 08:24:22 -0800

I would have expected IIS authentication to be the same (meaning the default
behavior) on any path that was excluded. That is certainly the implication
that I read into excluded paths. And in some ways that is true. Example:
if I enable Anonymous access to sharepoint and then remove the anonymous
access (in IIS) to an excluded path then I am prompted user validation by
IIS when trying to browse to the excluded path. This leads me to believe
that at least some level of the excluded path authentication will pass
through. However, the same does not seem to be true for ASP.Net
authentication on the excluded paths. (as in the type defined in the
web.config of an app root) Unfortunately I don't know enough about the
intent of the excluded paths to know if they are supposed to bypass the
ASP.Net authentication or if this is just some unforseen use of that
feature.

After searching Google groups I found a posting with a reference to this:
http://support.microsoft.com/?kbid=825214

So clearly sharepoint itself won't support the Forms ASP.Net authentication
but it would appear that it overrides it on excluded paths as well. I think
one of the things that is confusing about Sharepoint (to people other than
myself) is what else does it override from an authentication/excluded path
point of view and are there any Microsoft recommended work arounds for those
of us who will probably have to implement something anyway. (and yes, I
will probably be dusting off my ISAPI skills to find a work around)

If you know of other Newsgroup threads or Sharepoint SDK references that
discuss the authentication considerations on excluded paths I would
appreciate a nudge in the right direction. So far I have been unsuccessful
in finding them for myself.

"David McKenzie" <DavidMcKenzie@bonbon.net> wrote in message
news:eeSvfE0wEHA.2192@TK2MSFTNGP14.phx.gbl...
> Impersonation has been covered in this ng and the portal server
development
> group.
> There are also excellent samples in MSDN and the Sharepoint SDK.
> As to my specific issue where I do not have to explicitly undo
impersonation
> and everybody else (evidently) has to: I have never seen a definitive
> answer, nor do I really need one bad enough to open a support call.
>
> As to authentication and excluded paths: do you have any reason to think
it
> would work any differently?
> (Just curious, as I haven't had to do too much with excluded pathe *yet*
but
> would assume that IIS authentication would be essentially the same
> regardless of isapi filter)
>
> Google groups is a great resource for threads which are no longer on the
> server in whole or part.
>
> David
> (a frequent long esoteric thread participant)
>
> "Mike Walsh" <englantilainen@hotmail.com> wrote in message
> news:ewvnBBowEHA.3528@tk2msftngp13.phx.gbl...
> > They monitor it if you post a question as a person who has signed up to
> > "managed newsgroups". People with TechNet Plus and MSDN subscriptions
can
> > register for this but there's also as far as I remember a free
> registration
> > (check out TechNet) with only this managed newsgroups stuff.
> >
> > (The long esoteric threads you see with Chinese participation tend to be
> > those)
> >
> > Otherwise there have occasionally been a couple of guys from Microsoft
> > (close to the developers I suspect) here but it's been a while since I
saw
> > the most usual visitor (of the two) here.
> >
> > Mike Walsh, Helsinki, Finland
> > WSS FAQ at http://wss.collutions.com
> > Please reply to the newsgroup
> >
> > "Jeff Webb" <jwebb5@cfl.rr.com> wrote in message
> > news:epgD8MnwEHA.3724@TK2MSFTNGP10.phx.gbl...
> > > There are a couple techincal questions that are going unaswered, and
it
> > > would be great if Msft (or any expert) would weigh in on
authentication
> in
> > > WSS and how it works with excluded paths.
> > >
> > > There are also some good questions on impersonation, and a code
example
> > > would be nice.
> > >
> > > Thanks,
> > >
> > > Jeff
> > >
> >
> >
>
>

Relevant Pages

  • Re: Does Msft Tech monitor this group?
    ... seem to pass through to excluded paths and other don't. ... >I would have expected IIS authentication to be the same (meaning the ... > So clearly sharepoint itself won't support the Forms ASP.Net ...
    (microsoft.public.sharepoint.windowsservices)
  • Re: App Root Authentication on Paths Below Virtual Server
    ... SP seems to take charge of authentication even in excluded paths. ... >I have an App Root below the Sharepoint Virtual Server. ... My guess is that the sharepoint domain authentication is ...
    (microsoft.public.sharepoint.windowsservices)
  • RE: Adding javascript to Default.aspx?
    ... Inetpub/wwwroot folder, not in the SharePoint 60 directories. ... > Excluded Paths, but am confused about what to enter as the path. ... >> When I create a new site based on this template and I do a view source, ...
    (microsoft.public.sharepoint.windowsservices)
  • Re: HTTP Connectivity - David Wickert
    ... Sharepoint tends to pretty much take over IIS on a machine. ... screen that lets you specify excluded paths, ... msolap.asp as one of these excluded paths. ...
    (microsoft.public.sqlserver.olap)
  • Adding Sites from an external WebApplication
    ... I have an web application that I cannot put inside sharepoint (as ... recommended with Excluded paths) and I want to add from it Sites and ... subsites to sharepoint. ... is not in the config database. ...
    (microsoft.public.sharepoint.windowsservices)