I'm developing an ASP.NET 3.5 web application on a Windows 7 machine with IIS 7.5. I created my own role provider and am trying to set up the security. I have roles defined in the application.
Everything seems to work fine when I am running it locally but as soon as we move it to a Windows 2008 R2 with IIS 7.5, it doesn't work. What's happening is that it doesn't ask for authentication so I never get redirected to the login page. Therefore, the user is anonymous and a database lookup fails because it requires the user's name which is empty and the user's name is required.
I've seen in previous versions of ASP.NET we can specify the authorization rules in the system.web\authorization section but I also see a system.webServer\security\authorization element in the web.config. I've noticed that if I go into IIS and change the authorization rules, it modifies system.webServer\security\authorization and doesn't touch system.web\autho ...
Go to the complete details ...