Jeff
Mon Nov 08 08:26:37 CST 2004
I think Kyle hit the nail on the head here. Some authentication features
seem to pass through to excluded paths and other don't. I too have searched
and found no clear info in this area. I can attack the problem with the
trial and error approach, but I'd rather really understand it.
"Kyle Eberle" <kyle_eberle@hotmail.com> wrote in message
news:%23XijsP1wEHA.1524@TK2MSFTNGP09.phx.gbl...
>I would have expected IIS authentication to be the same (meaning the
>default
> behavior) on any path that was excluded. That is certainly the
> implication
> that I read into excluded paths. And in some ways that is true. Example:
> if I enable Anonymous access to sharepoint and then remove the anonymous
> access (in IIS) to an excluded path then I am prompted user validation by
> IIS when trying to browse to the excluded path. This leads me to believe
> that at least some level of the excluded path authentication will pass
> through. However, the same does not seem to be true for ASP.Net
> authentication on the excluded paths. (as in the type defined in the
> web.config of an app root) Unfortunately I don't know enough about the
> intent of the excluded paths to know if they are supposed to bypass the
> ASP.Net authentication or if this is just some unforseen use of that
> feature.
>
> After searching Google groups I found a posting with a reference to this:
>
http://support.microsoft.com/?kbid=825214
>
> So clearly sharepoint itself won't support the Forms ASP.Net
> authentication
> but it would appear that it overrides it on excluded paths as well. I
> think
> one of the things that is confusing about Sharepoint (to people other than
> myself) is what else does it override from an authentication/excluded path
> point of view and are there any Microsoft recommended work arounds for
> those
> of us who will probably have to implement something anyway. (and yes, I
> will probably be dusting off my ISAPI skills to find a work around)
>
> If you know of other Newsgroup threads or Sharepoint SDK references that
> discuss the authentication considerations on excluded paths I would
> appreciate a nudge in the right direction. So far I have been
> unsuccessful
> in finding them for myself.
>
>
>
> "David McKenzie" <DavidMcKenzie@bonbon.net> wrote in message
> news:eeSvfE0wEHA.2192@TK2MSFTNGP14.phx.gbl...
>> Impersonation has been covered in this ng and the portal server
> development
>> group.
>> There are also excellent samples in MSDN and the Sharepoint SDK.
>> As to my specific issue where I do not have to explicitly undo
> impersonation
>> and everybody else (evidently) has to: I have never seen a definitive
>> answer, nor do I really need one bad enough to open a support call.
>>
>> As to authentication and excluded paths: do you have any reason to think
> it
>> would work any differently?
>> (Just curious, as I haven't had to do too much with excluded pathe *yet*
> but
>> would assume that IIS authentication would be essentially the same
>> regardless of isapi filter)
>>
>> Google groups is a great resource for threads which are no longer on the
>> server in whole or part.
>>
>> David
>> (a frequent long esoteric thread participant)
>>
>> "Mike Walsh" <englantilainen@hotmail.com> wrote in message
>> news:ewvnBBowEHA.3528@tk2msftngp13.phx.gbl...
>> > They monitor it if you post a question as a person who has signed up to
>> > "managed newsgroups". People with TechNet Plus and MSDN subscriptions
> can
>> > register for this but there's also as far as I remember a free
>> registration
>> > (check out TechNet) with only this managed newsgroups stuff.
>> >
>> > (The long esoteric threads you see with Chinese participation tend to
>> > be
>> > those)
>> >
>> > Otherwise there have occasionally been a couple of guys from Microsoft
>> > (close to the developers I suspect) here but it's been a while since I
> saw
>> > the most usual visitor (of the two) here.
>> >
>> > Mike Walsh, Helsinki, Finland
>> > WSS FAQ at
http://wss.collutions.com
>> > Please reply to the newsgroup
>> >
>> > "Jeff Webb" <jwebb5@cfl.rr.com> wrote in message
>> > news:epgD8MnwEHA.3724@TK2MSFTNGP10.phx.gbl...
>> > > There are a couple techincal questions that are going unaswered, and
> it
>> > > would be great if Msft (or any expert) would weigh in on
> authentication
>> in
>> > > WSS and how it works with excluded paths.
>> > >
>> > > There are also some good questions on impersonation, and a code
> example
>> > > would be nice.
>> > >
>> > > Thanks,
>> > >
>> > > Jeff
>> > >
>> >
>> >
>>
>>
>
>