ASP.NET 2.0 Form Security Error

[Sumi]

Hi,

I've the following code in my web.config -

<authentication mode="Forms">
<forms loginUrl="Login.aspx"
protection="All"
timeout="30"
name=".ASPXAUTH"
requireSSL="false"
slidingExpiration="true"
defaultUrl="default.aspx"
cookieless="UseDeviceProfile"
enableCrossAppRedirects="false" />
</authentication>

And if I try "Default.aspx" directly in the browser; it is not pointing to
Login.aspx!

Please advice!

[Bruno Piovan]

try to add it to web.config

<authorization>
<deny users="?"/>
</authorization>

Bruno

"Sumi" <re*********@msn.com> wrote in message
news:OE**************@TK2MSFTNGP09.phx.gbl...

Hi,

I've the following code in my web.config -

<authentication mode="Forms">
<forms loginUrl="Login.aspx"
protection="All"
timeout="30"
name=".ASPXAUTH"
requireSSL="false"
slidingExpiration="true"
defaultUrl="default.aspx"
cookieless="UseDeviceProfile"
enableCrossAppRedirects="false" />
</authentication>

And if I try "Default.aspx" directly in the browser; it is not pointing to
Login.aspx!

Please advice!

[S. Justin Gengo]

Sumi,

Have you added who's allowed in the application?

You don't just need to set forms authentication you also have to set who has
access to what like this:

<authorization>

<allow roles="Admin" />

<deny users="*" />

</authorization>

Regards,

--
S. Justin Gengo
Web Developer / Programmer

Free code library:
http://www.aboutfortunate.com

"Out of chaos comes order."
Nietzsche
"Sumi" <re*********@msn.com> wrote in message
news:OE**************@TK2MSFTNGP09.phx.gbl...

Hi,

I've the following code in my web.config -

<authentication mode="Forms">
<forms loginUrl="Login.aspx"
protection="All"
timeout="30"
name=".ASPXAUTH"
requireSSL="false"
slidingExpiration="true"
defaultUrl="default.aspx"
cookieless="UseDeviceProfile"
enableCrossAppRedirects="false" />
</authentication>

And if I try "Default.aspx" directly in the browser; it is not pointing to
Login.aspx!

Please advice!