Authenticate users in https virtual directory and get authen

manuel.ricca · Joined: 04 Dec 2007 Posts: 1

Hello all,

I am trying to create a virtual directory where a user can
authenticate securely (via SSL) and then get back to the normal HTTP
site.
First I created a new virtual directory called members and required
SSL for it. I created a new ASP.NET application at members and put the
necessary stuff in web.config:

This works but when a user goes back to the HTTP site I don't get
anything in Page.User.Idenitity.
So I tried putting everything back in the main application (removed
the members application from IIS) and added this to the main
web.config:

However, members is only accessible via HTTPS and the location doesn't
apply (because it's only expecting http://server/members and not
https://server/members). This means that the user won't get redirected
to my login URL. It is not allowed to put an absolute URL in location
tags (which would be so it
seems I'm stuck.

Does anyonone have a solution for this? I'm thinking of getting back
to the 2 applications solution and passing the user information to the
HTTP site somehow (any ideas?).

Thanks in advance,

Manuel Ricca

Archived from group: microsoft>public>dotnet>framework>aspnet

Manuel Ricca · Joined: 05 Dec 2007 Posts: 1

On Dec 4, 7:38 pm, "manuel.ri...@gmail.com"
wrote:
> Hello all,
>
> I am trying to create a virtual directory where a user can
> authenticate securely (via SSL) and then get back to the normal HTTP
> site.
> First I created a new virtual directory called members and required
> SSL for it. I created a new ASP.NET application at members and put the
> necessary stuff in web.config:
>
>
>
>
>
>
>
>
>
>
> This works but when a user goes back to the HTTP site I don't get
> anything in Page.User.Idenitity.
> So I tried putting everything back in the main application (removed
> the members application from IIS) and added this to the main
> web.config:
>
>
>
>
>
>
>
>
>
>
>
>
>
>
> However, members is only accessible via HTTPS and the location doesn't
> apply (because it's only expectinghttp://server/membersand nothttps://server/members). This means that the user won't get redirected
> to my login URL. It is not allowed to put an absolute URL in location
> tags (which would be so it
> seems I'm stuck.
>
> Does anyonone have a solution for this? I'm thinking of getting back
> to the 2 applications solution and passing the user information to the
> HTTP site somehow (any ideas?).
>
> Thanks in advance,
>
> ManuelRicca

In case anyone reads this I think it might help.

I finally got it working. Login.aspx must be outside the protected
members directory. I had just assumed that .NET would bypass
membership enforcement for loginURL but it doesn't. So I guess it
wasn't allowing access to login.aspx because login.aspx itself was in
the location allowed only for a certain role (and for which it was
configured as loginURL).

Manuel Ricca

simulate virtual directory for each user Dear Friends Would you please give me your professional idea about this asp.net problem. I need different virtual directory for different customer with their names like these: I have a asp.net p

Newbie:How to get physical path of a virtual directory under Hi, I'm new to WMI. How I could get get physical path of a virtual directory under non-default web site and also Application Pool configured for that virtual directory ? I tried various things but no luck. Thanks in advance and regards Navin

finding out virtual directory name in custom action code in Hi. I know there is a predefined variable that can be passed to custom action, called TARGETDIR, containing the physical path to where the web application files were installed. Is there a similar variable for virtual directory name?

How to authenticate a signed SOAP message without Web Servic I am researching on the best option for a SOAP messaging Here is the background information: 1. The client create the body of the SOAP message. 2. The client signs the SOAP message with a X509 certificate and the signature is inserted into

SoapClient and HTTPS I just want to get confirmation that the SoapClient class does not support the HTTPS transport. It seems that the following is thrown if the transport scheme for a SoapClient instance is "https":