Wrox Programmer Forums
|
ASP.NET 4 General Discussion For ASP.NET 4 discussions not relating to a specific Wrox book
Welcome to the p2p.wrox.com Forums.

You are currently viewing the ASP.NET 4 General Discussion section of the Wrox Programmer to Programmer discussions. This is a community of software programmers and website developers including Wrox book authors and readers. New member registration was closed in 2019. New posts were shut off and the site was archived into this static format as of October 1, 2020. If you require technical support for a Wrox book please contact http://hub.wiley.com
 
Old December 14th, 2011, 05:25 PM
Registered User
 
Join Date: Jul 2011
Posts: 4
Thanks: 1
Thanked 0 Times in 0 Posts
Default ASP.NET site security

For months, I have been using sites with Integrated Authentication. Now, everytime I make an app pool and a new site, the user is prompted on Integrated Authentication. I even tried it on a blank page, Integrated Authentiction, and Allow All Users. All users are prompted saying connecting to xxx.com and can not access the site at all even after typing in their username/password (unless we're all doing it wrong). The only way I can access the site is to remote desktop into the computer first. Windows Digest Authentication works exactly as it should even remotely, as does Anonymous Authentication and Forms Authentication. I set the site to use an old app pool created before this started happening and it works fine. I open an old app pool, change ANYTHING, and save. All sites using that app pool suddenly start prompting on Integrated Authentication.

I've looked at every single setting in the app pool with one working correctly and one working incorrectly and I can't see a single difference.

This suddenly started happening on all my web servers about a month ago out of nowhere. Also, if I re-boot a server, all the app pools start behaving like this. If I run out of app pools, I'll have to switch everything over to Windows Digest Authentication or create my own database-based security with Forms Authentication, the advantage of the second approach would be that everything would not be so hidden and mysterious. Thanks in advance for any help or suggestions.





Similar Threads
Thread Thread Starter Forum Replies Last Post
how to access the other site information in Asp.Net web site arunkongara ASP.NET 4 General Discussion 1 July 28th, 2011 10:16 AM
Security in ASP.NET sanjibsinha BOOK: Beginning ASP.NET Security 4 June 25th, 2010 09:00 AM
Article: ASP.NET Security Preventing Cross-Site Scripting jminatel BOOK: Professional ASP.NET 3.5 Security, Membership, and Role Management ISBN: 978-0-470-37930-1 1 June 18th, 2010 06:36 PM
Security In Asp.net 2.0 mallikalapati ASP.NET 2.0 Professional 2 February 11th, 2008 10:15 AM
ASP.NET Security unclehughie Wrox Book Feedback 0 July 16th, 2003 03:45 PM





Powered by vBulletin®
Copyright ©2000 - 2020, Jelsoft Enterprises Ltd.
Copyright (c) 2020 John Wiley & Sons, Inc.