<?xml version="1.0" encoding="UTF-8" ?>
<?xml-stylesheet type="text/xsl" href="http://forums.asp.net/utility/FeedStylesheets/rss.xsl" media="screen"?><rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:slash="http://purl.org/rss/1.0/modules/slash/" xmlns:wfw="http://wellformedweb.org/CommentAPI/"><channel><title>Security</title><link>http://forums.asp.net/25.aspx</link><description>All about ASP.NET security (authentication, authorization, membership, roles, etc.) and the Login controls. &lt;a href="http://aspadvice.com/SignUp/list.aspx?l=24&amp;c=17" target="_blank"&gt;Email List&lt;/a&gt;</description><dc:language>en</dc:language><generator>CommunityServer 2007 SP1 (Build: 20510.895)</generator><item><title>Re: Password Protecting a portion of the website</title><link>http://forums.asp.net/thread/1969287.aspx</link><pubDate>Tue, 23 Oct 2007 14:15:54 GMT</pubDate><guid isPermaLink="false">4c671506-2930-414c-a40b-8bf57ded5924:1969287</guid><dc:creator>e_stylzz</dc:creator><author>e_stylzz</author><slash:comments>0</slash:comments><comments>http://forums.asp.net/thread/1969287.aspx</comments><wfw:commentRss>http://forums.asp.net/commentrss.aspx?SectionID=25&amp;PostID=1969287</wfw:commentRss><description>&lt;p&gt;Well, it worked for a few days then started doing the same thing again: Looking for the login.aspx file in the admin folder.&lt;/p&gt;
&lt;p&gt;&amp;nbsp;.Any ideas now?&lt;/p&gt;&lt;span&gt;&lt;/span&gt;&lt;span&gt;
&lt;h1&gt;Server Error in &amp;#39;/library/admin&amp;#39; Application. 
&lt;hr /&gt;
&lt;/h1&gt;
&lt;h2&gt;&lt;i&gt;The resource cannot be found.&lt;/i&gt; &lt;/h2&gt;
&lt;p&gt;&lt;/span&gt;&lt;font face="Arial, Helvetica, Geneva, SunSans-Regular, sans-serif "&gt;&lt;b&gt;Description: &lt;/b&gt;HTTP 404. The resource you are looking for (or one of its dependencies) could have been removed, had its name changed, or is temporarily unavailable. &amp;nbsp;Please review the following URL and make sure that it is spelled correctly. &lt;br /&gt;&lt;br /&gt;&lt;b&gt;Requested URL: &lt;/b&gt;/library/admin/login.aspx&lt;/font&gt;&lt;/p&gt;</description></item><item><title>Re: Password Protecting a portion of the website</title><link>http://forums.asp.net/thread/1960199.aspx</link><pubDate>Wed, 17 Oct 2007 11:39:49 GMT</pubDate><guid isPermaLink="false">4c671506-2930-414c-a40b-8bf57ded5924:1960199</guid><dc:creator>e_stylzz</dc:creator><author>e_stylzz</author><slash:comments>0</slash:comments><comments>http://forums.asp.net/thread/1960199.aspx</comments><wfw:commentRss>http://forums.asp.net/commentrss.aspx?SectionID=25&amp;PostID=1960199</wfw:commentRss><description>&lt;p&gt;That did it.&amp;nbsp; I had originally tried that, but with the web.config file in the admin folder and that didn&amp;#39;t work.&amp;nbsp; Thats so much!!!!&amp;nbsp;&lt;/p&gt;</description></item><item><title>Re: Password Protecting a portion of the website</title><link>http://forums.asp.net/thread/1959660.aspx</link><pubDate>Wed, 17 Oct 2007 05:08:28 GMT</pubDate><guid isPermaLink="false">4c671506-2930-414c-a40b-8bf57ded5924:1959660</guid><dc:creator>XiaoYong Dai – MSFT</dc:creator><author>XiaoYong Dai – MSFT</author><slash:comments>0</slash:comments><comments>http://forums.asp.net/thread/1959660.aspx</comments><wfw:commentRss>http://forums.asp.net/commentrss.aspx?SectionID=25&amp;PostID=1959660</wfw:commentRss><description>&lt;p&gt;&lt;BLOCKQUOTE&gt;&lt;div&gt;&lt;img src="/Themes/fan/images/icon-quote.gif"&gt; &lt;strong&gt;e_stylzz:&lt;/strong&gt;&lt;/div&gt;&lt;div&gt; 
&lt;p&gt;it looks for the login.aspx file in the admin folder instead of the root.&amp;nbsp; If I change to where it points in the web.config file, I can&amp;#39;t get past the login form.&amp;nbsp; Any ideas?&lt;/p&gt;
&lt;p&gt;&lt;/div&gt;&lt;/BLOCKQUOTE&gt;&lt;/p&gt;
&lt;p&gt;Hi&lt;/p&gt;
&lt;p&gt;I suggest you specify absolute path for loginUrl. Please try to add this line in web.config file which locate at &lt;strong&gt;Root&lt;/strong&gt; path of website.&lt;/p&gt;
&lt;p&gt;&amp;lt;&lt;font color="#800000"&gt;authentication&lt;/font&gt;&lt;font color="#ff00ff"&gt; &lt;/font&gt;&lt;font color="#ff0000"&gt;mode&lt;/font&gt;&lt;font color="#0000ff"&gt;=&amp;quot;Forms&amp;quot;&amp;gt;&lt;br /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; &amp;lt;&lt;/font&gt;&lt;font color="#800000"&gt;forms&lt;/font&gt;&lt;font color="#ff00ff"&gt; &lt;/font&gt;&lt;strong&gt;&lt;font color="#ff0000"&gt;loginUrl&lt;/font&gt;&lt;font color="#0000ff"&gt;=&amp;quot;&lt;font color="#000000"&gt;~/&lt;/font&gt;login.aspx&amp;quot;&lt;/font&gt;&lt;/strong&gt;&lt;font color="#ff00ff"&gt; &lt;/font&gt;&lt;font color="#ff0000"&gt;name&lt;/font&gt;&lt;font color="#0000ff"&gt;=&amp;quot;appName&amp;quot;&lt;/font&gt;&lt;font color="#ff00ff"&gt; &lt;/font&gt;&lt;font color="#ff0000"&gt;timeout&lt;/font&gt;&lt;font color="#0000ff"&gt;=&amp;quot;60&amp;quot;&lt;/font&gt;&lt;font color="#ff00ff"&gt; &lt;/font&gt;&lt;font color="#ff0000"&gt;path&lt;/font&gt;&lt;font color="#0000ff"&gt;=&amp;quot;/&amp;quot;&amp;gt;&lt;/font&gt; &lt;font color="#0000ff"&gt;&amp;lt;/&lt;/font&gt;&lt;font color="#800000"&gt;forms&lt;/font&gt;&lt;font color="#0000ff"&gt;&amp;gt;&lt;br /&gt;&amp;lt;/&lt;/font&gt;&lt;font color="#800000"&gt;authentication&lt;/font&gt;&lt;font color="#0000ff"&gt;&amp;gt;&lt;/font&gt;&lt;/p&gt;
&lt;p&gt;&amp;nbsp;&lt;/p&gt;</description></item><item><title>Password Protecting a portion of the website</title><link>http://forums.asp.net/thread/1956968.aspx</link><pubDate>Mon, 15 Oct 2007 18:00:40 GMT</pubDate><guid isPermaLink="false">4c671506-2930-414c-a40b-8bf57ded5924:1956968</guid><dc:creator>e_stylzz</dc:creator><author>e_stylzz</author><slash:comments>0</slash:comments><comments>http://forums.asp.net/thread/1956968.aspx</comments><wfw:commentRss>http://forums.asp.net/commentrss.aspx?SectionID=25&amp;PostID=1956968</wfw:commentRss><description>&lt;p&gt;Currently what I have setup will work for a day or two then it will stop working.&lt;/p&gt;&lt;p&gt;&amp;nbsp;Protected pages are located in a folder called admin.&amp;nbsp; The admin folder also has a web.config file to deny all users.&lt;/p&gt;&lt;p&gt;At the root level I have a login page and a web.config file with usernames and passwords hardcoded in.&lt;/p&gt;&lt;p&gt;I read that this is how to set it up and it will work, but only for a day or two.&amp;nbsp; After that, it looks for the login.aspx file in the admin folder instead of the root.&amp;nbsp; If I change to where it points in the web.config file, I can&amp;#39;t get past the login form.&amp;nbsp; Any ideas?&lt;/p&gt;&lt;p&gt;&amp;nbsp;&lt;br /&gt;admin/protected files&lt;/p&gt;&lt;p&gt;admin/web.config&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; - only denies all users&lt;br /&gt;&lt;/p&gt;&lt;p&gt;/login.aspx&lt;/p&gt;&lt;p&gt;/web.config&lt;br /&gt;&lt;br /&gt;&amp;nbsp;&lt;/p&gt;</description></item></channel></rss>