Forms Authentication, .Net 3.5 + IIS 6

Question

I changed the Intranet site's authentication method from Windows to Forms, using AD authentication. It works when I launch it from VS 2008, goes directly yo login.aspx page and after loggin in goes to default.aspx. When I use the URL it tries to go to default.aspx directly and says you are not authorized to view this page, instead of going to login.aspx page. Not sure what I am missing here. In IIS, I enabled anonymous access and checked everything else off. In web.config I have the following:

    <authentication mode="Forms">
    <forms name=".ADAuthCookie" loginUrl="Account/Login.aspx" defaultUrl="Default.aspx" timeout="5" />
</authentication>

<authorization>
    <deny users="?"/>
    <allow users="*"/>
</authorization>

<membership defaultProvider="CMSOracleMembershipProvider">
   <providers>
      <add name="CMSOracleMembershipProvider"
          type="Oracle.Web.Security.OracleMembershipProvider, Oracle.Web, Version=2.112.2.0, Culture=neutral, PublicKeyToken=89b483f429c47342"
          connectionStringName="CMSConnectionString"
          applicationName="/"
          enablePasswordRetrieval="false"
          enablePasswordReset="true"
          requiresQuestionAndAnswer="false"
          requiresUniqueEmail="false"
          passwordFormat="Hashed"
          maxInvalidPasswordAttempts="4"
          minRequiredPasswordLength="9"
          passwordAttemptWindow="8"/>
    </providers>
</membership>

<roleManager enabled="true" defaultProvider="CMSOracleRoleProvider">
    <providers>
        <add name="CMSOracleRoleProvider"
           type="Oracle.Web.Security.OracleRoleProvider, Oracle.Web, Version=2.112.2.0, Culture=neutral, PublicKeyToken=89b483f429c47342"
        connectionStringName="CMSConnectionString"
        applicationName="/"/>
    </providers>
</roleManager>

I don't have an asp login control, but a couple of textboxes for id and password and I handle the authentication using AD.

I appreciaet your help.

NotMe NotMe · Accepted Answer · 2012-02-16T01:40:39

First off, read this: http://support.microsoft.com/kb/326340

Second, it sounds like maybe the directory holding your login.aspx page may not be configured to allow anonymous access. You will need to drop a web.config file in that directory that is set to allow everyone.

Forms Authentication, .Net 3.5 + IIS 6

1 Answers