[Mono-dev] Forms authentication broken for ASP.NET 2.0?

[Chris Toshok]

You are correct - this is indeed broken in the 2.0 config classes.  I've
commited a fix to svn.

Chris

On Mon, 2006-04-24 at 15:05 +0200, Marek Habersack wrote:
> Hello everybody,
> 
>   Are there any known problems with what's named in the subject? With the
> following web.config file:
> 
> <?xml version="1.0" standalone="yes"?>
> <configuration> 
>   <system.web>
>     <authentication mode="Forms">
>       <forms name=".WSUSAUTH" 
>              loginUrl="login.aspx" 
>              protection="All" />
>     </authentication>    
> 
>     <authorization>
>       <deny users="?"/>
>       <allow roles="student,admin"/>
>     </authorization>
>   </system.web>
> </configuration>
> 
> xsp2 should throw an anonymous user to login.aspx and deny access to
> anything else, and yet it continues to serve any asp.net resources.
>  xsp1 works as expected with it, so it's either me doing something 
> wrong for asp 2.0 or there's something not quite right with it in
> mono.
> 
> Can anybody please confirm/deny that happening to them as well?
> 
> thanks in advance,
> 
> marek
> _______________________________________________
> Mono-devel-list mailing list
> Mono-devel-list at lists.ximian.com
> http://lists.ximian.com/mailman/listinfo/mono-devel-list