Monday, March 26, 2012

Setting roles and groups without ASP.NET Configuration utility

Hi,

Can somebody explain to me how can I create or maybe I don't need...groups and roles on the webserver, where I don't have the ASP.NET Configuration utility where I can create groups, users, roles and rights?

I mention that I use Plesk Control Panel Software. Also I don't know very well how can I make a connection between IIS User (IUSR_...) and IIS WP User (IWAM_...) and my Member and Guest groups. Member -for authorized users and Guest for anonymous.

What means "the application is impersonating" <identity impersonate="true"/> ? I have to use something like this in my web.config in the subfolder which is only for authorized users?

Thank you,Nora

Hi Nora,

Is it shared web server? If this is a shared web server, I guess you are probablly using ASP.NET Forms Authentication instead of ASP.NET Windows Authentication. Usually, you can ignore impersonation or IIS WP User since they are much related to ASP.NET Windows Authentication. IUSR_MACHINENAME is the anonymous access account for IIS.

ASP.NET Forms Authentication is a kind of role-based security, this video will help you understanding better:

http://www.asp.net/learn/videos/video-06.aspx

To learn more about Forms Authentication and its configuration, you can see these links, they will show you how to protect web pages with Forms Authentication:

http://msdn2.microsoft.com/en-us/library/7t6b43z4(VS.80).aspx

http://www.4guysfromrolla.com/webtech/110701-1.2.shtml

By default, ASP.NET Forms Authentication uses SQL Server database to store membership information. I don't know much of the mentioned control panel tool, guess it is able to configure groups and roles using this tool. Based on my understanding, the users and rols will be stored in a database called ASPNETDB.MDF. You can also configure it locally with the ASP.NET Configuration Tool and upload the database to your server, this will update users and roles on the web server.

Hope this helps.

0 comments:

Post a Comment