Disable form authentication for public pages

In my development environment everything works as I expect. I can access all the pages and as soon as I get to a secured page I check the Request.IsAuthenticated and redirect to the login page if needed. The problems starts when I deploy the project under IIS7. When I access the site I'm being redirected to the login page (as defined in the web.config) although it suppose to be a public page... If I disable the Form Authentication in the admin console Request.IsAuthenticated always return true. So

How can I make IIS behaves like my ASP.NET development server?

p.s. I'm working with asp.net MVC

Thanks, Eden.


Probably you have authorization section in your web.config and it denies all requests for unauthenticated users. Check this article for some details about authorization section. And it will be better to allow access for unauthenticated users evidently by adding

<allow users="*" />

Edit 26/02:
Probably there are some specific IIS authorization rules (IIS 7 introduces a new authorization mechanism). I recommend you to check all rules that are defined for application using IIS management tool (this article explains how to check them). And probably it'll be interesting and useful for you to check changes between IIS 6 and IIS 7 and IIS 7 url authorization feature in details.

Also I checked it on my box (windows 7). I created a simple asp.net mvc application and deployed it to IIS (version 7.5). And all was working as expected. Probably there are some restrictions on your server that are placed in the root config (a config in a root folder) or in machine.config.

Category:asp.net Time:2010-02-24 Views:1

Related post

  • How to disable forms authentication 2009-09-16

    I have a folder in my web site for which I secured with forms-based authentication. I now have to develop two new pages in that folder and I want to turn security off while I test and debug the new forms. I have changed the authentication mode in the

  • Showing User's personal public page after login instead of Site's public page 2011-02-21

    I am new to liferay. I created a new user (not Power-user) and created personal Public and Private pages, but when I login I see public pages of the site. How can I make it to display personal Public pages by default? --------------Solutions---------

  • Disable windows authentication on single location 2011-03-07

    I have a web application and I want to provide anonymous access to a couple of the web services in it so that we can access the web services from computers without a windows login on our network. I've tried the stuff here Disable authentication on su

  • Tomcat FORM based authentication, on every page 2011-05-28

    I would like to use authentication form on every page (in the header of the page), so user could authenticated from any page. I'm using Tomcat's FORM based authentication, but when i go to my index page, and try to login using the form in the header,

  • Get public page statuses using Facebook Graph API without Access Token 2011-10-03

    I'm trying to use the Facebook Graph API to get the latest status from a public page, let's say http://www.facebook.com/microsoft According to http://developers.facebook.com/tools/explorer/?method=GET&path=microsoft%2Fstatuses - I need an access

  • Rails + Devise: redirect to a specific url upon public page Facebook Login 2011-10-17

    I have a public assessable page "http://www.example.com/gift/5" There is a Facebook connect button on it. I want the user to click the Facebook connect button and then be redirected to "http://www.example.com/gift/5/coupon" Currently Devise/Omniauth

  • How can I disable basic authentication on Tomcat 5.5.27 2008-11-27

    Please let me know how can I disable basic authentication on Tomcat 5.5.27 --------------Solutions------------- Authentication is there only if you configure it yourself. By default web applications do not use authentication.

  • Disabling flash[:notice] to make page caching make sense 2009-09-04

    We make heavy use of page caching, and sometimes pages get cached with a "You are now signed in" message. We can't disable the page caching for logged in users, or make it unique to them. So the only option I can think of is to disable the flash when

  • ASP.NET is it possible to access public page variables from ListView.EmptyDataTemplate? 2010-06-13

    is it possible to access public page variables from ListView.EmptyDataTemplate ? Can i do that and if can, how ? thanks --------------Solutions------------- Basically with: <%= this.YourPagesPublicProperty%> Example, my ASP.NET File: <p>I

  • Disable all controls on a page except controls in a particular div using jquery 2010-10-18

    I want to disable all controls in a page using jquery except controls contained in a particular div. $('input,select,textarea,div:not("#viewNotice")').attr('disabled', 'disabled'); I have tried using above selector, but its not working good. Here I a

  • In Expression Engine 1.6, how do I disable caching for a specific page? 2011-04-20

    In Expression Engine 1.6, how do I disable caching for a specific page? I'm working on tweaking a page, and it is annoying that after I make changes I am still seeing the cached copy. I don't want to turn off caching for the whole site because it get

  • Disabling basic authentication? 2011-06-24

    How can i disable basic authentication in websphere 6.1? I have written example servelet In my war application i have defined something like this: <user-data-constraint> <transport-guarantee>CONFIDENTIAL</transport-guarantee> </u

  • Sharing authentication between new pages built in MVC and existing WebForms ASP.NET project 2011-06-27

    I'm working on a project that is built using Web Forms framework. We are trying to move to MVC by building all the new pages using MVC. Both types of pages are in same project. I'm curious to know how people went about sharing authentication between

  • Why does a public page feed require an access token? 2011-09-15

    Possible Duplicate: Changing graph feed to public and private Why is it that the graph api now requires an access token for a public feed? i.e. You can see a feed publicly on that page without even being logged into facebook, yet you can't parse it u

  • How do i get all public pages in DotNetNuke? 2011-10-20

    I am new to DNN web sites, and would like to display a list of the root level pages (Home, Contact Us, etc..) at the top of my skin. Right now I have: TabController.GetPortalTabs(0,-1, false, "", false, false, false, true,false); Feeding my repeater

  • How I disable Windows authentication in SQL Server 2011-11-29

    I have a local SQL Server 2005 running and I need to disable Windows authentication, I want that the only way to be connected to the server is by using an specific SQL user (SQL authentication). --------------Solutions------------- You can't disable

  • Text mining on Facebook public page 2011-11-30

    I'm a graduate student. I would like to do a text mining on Facebook public pages for my research. Anybody knows how to export all the wall comments posted on a particular public page into csv or html/xml format? In addition, I found the 'R' coding t

  • Retrieving Facebook stats from public pages 2012-02-01

    Is there a way to retrieve Facebook statistics—number of likes, number talking about—from public pages that do not require a log in without having the owner of the page authorize my app to get the stats? I have a web page written with PHP where the o

  • How to apply activeadmin authentication to external page? 2012-02-02

    I am using activeadmin gem which is going fine, now i want to add its authentication to some external pages or as MVC you say to some action. don't mix it with the actions which can be added from admin/users.rd files. these are those action that resi

Copyright (C) pcaskme.com, All Rights Reserved.

processed in 0.842 (s). 13 q(s)