403(The website declined to show this webpage) Error - WebConfig Authorization - Need to redirect to login

[De_Novice]

Hi, I have created a sample login site using SQL membership provider and authentication and authorization. The admin folder has a default.aspx and in the web config I have denied access to users who are not of role admin and any other user. When I run the code with the admin/default.aspx as start page locally, it works fine by redirecting me to login page. However on publish when I type in www.domainname.com/admin/default.aspx, I get the error that "The website declined to show this webpage, Most likely causes:This website requires you to log in.". How can I make it redirect to login page. Thanks

[Not Active]

What settings have you applied to the web.config in your production environment?

---

I know the language. I've read a book. - _Madmatt

[De_Novice]

Here is a part of the web config file from the production:

<authentication mode="Forms" >
<forms loginUrl="login.aspx" >
</forms>
</authentication>

      <authorization>
    <allow roles="Admin, Employee"/> 
    <deny users="\*"/>
  </authorization>

</system.web>


      <location path="Admin">
  <system.web>
    <authorization>
      <allow roles="Admin"/>
      <deny roles="Employee"/>
      <deny users="\*"/>
    </authorization>
  </system.web>
</location>

Why does it work in development and not when published. I havent changed any settings from development to publish accept the database connection string.

[De_Novice]

ok.. I changed the setting for the admin folder from deny users "*" to deny users"?" and it worked.

<location path="Admin">
<system.web>
<authorization>
<allow roles="Admin"/>
<deny roles="Employee"/>
<deny users="?"/>
</authorization>
</system.web>

what is the difference between * and ?.

[Not Active]

Reading the documentation helps to answer questions like this. * means all, ? means only authenticated

---

I know the language. I've read a book. - _Madmatt