I am having problems trying to perform authorization in a web
application using windows authentication. According to the
instructions I should be able to use the following elements in the
<authorization> section of my config to only allow selected users to
access the service.
<allow users="[comma separated list of users]"/>
<deny users="*"/>
However, if I try this I get the login prompt but it does not allow
anyone to be authorized, even those users in the allow list. I have
tried several different combination with odd results.
My test machine has two users, one an administrator (let us call this
"A") and one a restricted user (B).
If I put <allow users="B"/> <deny users="*"/> then trying to access the
application from either a local machine or a remote machine causes the
login dialog to be displayed but B does not get authenticated.
If I put <allow users="B"/> <deny users="A"/> then accessing the
application from the local machine just works without any login dialog
being displayed. If you access the application from a remote machine
you get the login dialog but any valid user can login successfully.
Does anyone know why I cannot get this to work. I am using windows
2000 Professional and .Net version 1.1 on both the development and test
computers.
Thanks
Alex
