Dastardly
Guest
|
 Posted:
Mon Oct 31, 2005 9:51 pm Post subject:
Forms authentication |
|
|
Hi,
I have site using forms authentication. Host headers is switched on. Guest
access is enabled in IIS and CMS. web.config is set to forms authentication
with the login url pointing to my login page (which happens to be a CMS
posting).
When I add the guest account to a subscribers group and give it access to
all CMS objects, the redirect to the login doesn't occur - it's like the site
is wide open, and any requested page can be viewed without forms
authentication being triggered. I've deleted all cookies. The only page I
can't access is the login page.
When I only give the account access to the root channel and the channel
below it where the login posting lives, I get a "page cannot be displayed"
when requesting any page except the homepage in the root channel
This redirect to the login posting works fine in dev; so I'm guessing it's
something config related - any ideas? |
|
AC [MVP MCMS]
Guest
|
| Posted:
Tue Nov 01, 2005 1:50 pm Post subject:
Re: Forms authentication |
|
|
You said you marked the site for guest access in IIS and CMS. When a
anonymous user hits the site, they won't be prompted to login as they are
already granted access to the subscriber role as you detailed in your post.
For them to see non-anon content, they need to manually goto the login page.
This can be achieved by creating a login button somewhere in your site.
You mention your login page is a CMS posting. Is it within one of the
channels the subscribers role doens't have rights to? If so, sounds like
you've put yourself in a catch-22... they can't be granted access to the
login page if they aren't authenticated, but they can't authenticate
themselves if they can't get to the login page.
You need to move the login page to a place where the subscribers have
rights.
--
----------------------------------------
-AC [MVP MCMS]
www.andrewconnell.com
www.andrewconnell.com/mvp
"Dastardly" <Dastardly@discussions.microsoft.com> wrote in message
news:069CF200-74FF-46F4-B1DE-2D2E619A22A4@microsoft.com...
| Quote: | Hi,
I have site using forms authentication. Host headers is switched on. Guest
access is enabled in IIS and CMS. web.config is set to forms
authentication
with the login url pointing to my login page (which happens to be a CMS
posting).
When I add the guest account to a subscribers group and give it access to
all CMS objects, the redirect to the login doesn't occur - it's like the
site
is wide open, and any requested page can be viewed without forms
authentication being triggered. I've deleted all cookies. The only page I
can't access is the login page.
When I only give the account access to the root channel and the channel
below it where the login posting lives, I get a "page cannot be displayed"
when requesting any page except the homepage in the root channel
This redirect to the login posting works fine in dev; so I'm guessing it's
something config related - any ideas? |
|
|
FAQ
Memberlist
Register
Profile
Log in to check your private messages
Log in