ASP.NET 2.0 Form Security Error

[Sumi]

Hi,

I've the following code in my web.config -

<authenticati on mode="Forms">
<forms loginUrl="Login .aspx"
protection="All "
timeout="30"
name=".ASPXAUTH "
requireSSL="fal se"
slidingExpirati on="true"
defaultUrl="def ault.aspx"
cookieless="Use DeviceProfile"
enableCrossAppR edirects="false " />
</authentication>

And if I try "Default.as px" directly in the browser; it is not pointing to
Login.aspx!

Please advice!

[Bruno Piovan]

try to add it to web.config

<authorizatio n>
<deny users="?"/>
</authorization>

Bruno

"Sumi" <re*********@ms n.com> wrote in message
news:OE******** ******@TK2MSFTN GP09.phx.gbl...

Hi,

I've the following code in my web.config -

<authenticati on mode="Forms">
<forms loginUrl="Login .aspx"
protection="All "
timeout="30"
name=".ASPXAUTH "
requireSSL="fal se"
slidingExpirati on="true"
defaultUrl="def ault.aspx"
cookieless="Use DeviceProfile"
enableCrossAppR edirects="false " />
</authentication>

And if I try "Default.as px" directly in the browser; it is not pointing to
Login.aspx!

Please advice!

[S. Justin Gengo]

Sumi,

Have you added who's allowed in the application?

You don't just need to set forms authentication you also have to set who has
access to what like this:

<authorizatio n>

<allow roles="Admin" />

<deny users="*" />

</authorization>

Regards,

--
S. Justin Gengo
Web Developer / Programmer

Free code library:
http://www.aboutfortunate.com

"Out of chaos comes order."
Nietzsche
"Sumi" <re*********@ms n.com> wrote in message
news:OE******** ******@TK2MSFTN GP09.phx.gbl...

Hi,

I've the following code in my web.config -

<authenticati on mode="Forms">
<forms loginUrl="Login .aspx"
protection="All "
timeout="30"
name=".ASPXAUTH "
requireSSL="fal se"
slidingExpirati on="true"
defaultUrl="def ault.aspx"
cookieless="Use DeviceProfile"
enableCrossAppR edirects="false " />
</authentication>

And if I try "Default.as px" directly in the browser; it is not pointing to
Login.aspx!

Please advice!