Web.Config和虚拟目录 [英] Web.Config and Virtual Directory

问题描述

我们有一个内部网站点，允许我们的某个部门搜索一套

的pdf，然后查看它们。唯一的问题是，只有他们和我们的极客才能获得
才能看到pdf。我们已将其锁定，除非

的人直接输入PDF格式的网址。目前，PDF位于服务器根目录下的
虚拟目录中。把它放在搜索

网站下也行不通。我的理解是IIS看起来像一个单独的站点虚拟

目录，并且不会将web.config设置下载到

它。将web.config直接放在虚拟目录中也不起作用

。如何保护这个虚拟目录，以便只有某些用户才能获得pdf格式？


Scott

We have a intranet site that allows one of our departments to search a set
of pdfs and then look at them. Only problem is that only they and us geeks
should be allowed to see the pdfs. We have it locked down except for when a
person directly types in the url to a pdf. Currently, the PDFs are in a
virtual directory off the root of the server. Putting it under the search
site also doesn''t work. My understanding is that IIS looks as the virtual
directory as a separate site and will not carry web.config settings down to
it. Putting a web.config in the virtual directory directly doesn''t work
either. How do I secure this virtual directory so only certain users can
get to the pdfs?

Scott

推荐答案

这不是ASP.NET问题，而是IIS问题。


使用IIS安全性对此虚拟目录的用户进行身份验证。那个

意味着你必须禁用匿名访问。


Jeffrey Palermo


" Wm。斯科特米勒 <钪********** @ spam.killer.wvinsurance.gov>写在

消息新闻：O8 **************** @ TK2MSFTNGP10.phx.gbl ...

This is not an ASP.NET issue, but an IIS one.

Use IIS security to authenticate users for this virtual directory. That
means you have to disable anonymous access.

Jeffrey Palermo

"Wm. Scott Miller" <Sc**********@spam.killer.wvinsurance.gov> wrote in
message news:O8****************@TK2MSFTNGP10.phx.gbl...

我们有一个内部网站点允许我们的某个部门搜索一套pdfs，然后查看它们。唯一的问题是，只有他们和我们
极客应该被允许看到pdfs。我们把它锁定了，除非
一个人直接输入pdf的url。目前，PDF位于服务器根目录下的虚拟目录中。把它放在搜索网站下也行不通。我的理解是IIS将虚拟
目录看作一个单独的站点，并且不会将web.config设置下载到
。将web.config直接放在虚拟目录中也不起作用。如何保护此虚拟目录，以便只有特定用户可以访问pdf？

Scott

We have a intranet site that allows one of our departments to search a set
of pdfs and then look at them. Only problem is that only they and us geeks should be allowed to see the pdfs. We have it locked down except for when a person directly types in the url to a pdf. Currently, the PDFs are in a
virtual directory off the root of the server. Putting it under the search
site also doesn''t work. My understanding is that IIS looks as the virtual
directory as a separate site and will not carry web.config settings down to it. Putting a web.config in the virtual directory directly doesn''t work
either. How do I secure this virtual directory so only certain users can
get to the pdfs?

Scott

IIS设置为Windows身份验证，禁用所有其他方法。


Scott


" Jeffrey Palermo" < JE ************ @ yahoo.com>在消息中写道

新闻：OP ************* @ TK2MSFTNGP09.phx.gbl ...

IIS is set to Windows Authentication with all other methods disabled.

Scott

"Jeffrey Palermo" <je************@yahoo.com> wrote in message
news:OP*************@TK2MSFTNGP09.phx.gbl...

这不是ASP。 NET问题，但是IIS问题。

使用IIS安全性来验证此虚拟目录的用户。那意味着你必须禁用匿名访问。

杰弗里巴勒莫

嗯。斯科特米勒 <钪********** @ spam.killer.wvinsurance.gov>在
消息新闻中写道：O8 **************** @ TK2MSFTNGP10.phx.gbl ...

This is not an ASP.NET issue, but an IIS one.

Use IIS security to authenticate users for this virtual directory. That
means you have to disable anonymous access.

Jeffrey Palermo

"Wm. Scott Miller" <Sc**********@spam.killer.wvinsurance.gov> wrote in
message news:O8****************@TK2MSFTNGP10.phx.gbl...

我们有一个允许的内部网站点我们的一个部门搜索
的pdf集，然后查看它们。唯一的问题是，只有他们和我们的极客

We have a intranet site that allows one of our departments to search a set of pdfs and then look at them. Only problem is that only they and us geeks

才能被允许看到pdfs。当

should be allowed to see the pdfs. We have it locked down except for when a

人直接在pdl的url中输入时，我们将其锁定为
除外。目前，PDF位于服务器根目录下的虚拟目录中。把它放在

person directly types in the url to a pdf. Currently, the PDFs are in a
virtual directory off the root of the server. Putting it under the

搜索网站下也行不通。我的理解是IIS将
虚拟目录看作一个单独的站点，并且不会将web.config设置下载

search site also doesn''t work. My understanding is that IIS looks as the virtual directory as a separate site and will not carry web.config settings down

到

它。将web.config直接放在虚拟目录中也不起作用。如何保护这个虚拟目录，以便只有某些用户
可以访问pdf？

Scott

it. Putting a web.config in the virtual directory directly doesn''t work
either. How do I secure this virtual directory so only certain users can get to the pdfs?

Scott

在这种情况下，我假设您正在使用AD，而这些人的窗口

帐户可以访问这些文件。在文件夹上使用NTFS安全性和

取出Everyone如果它在那里。使用受限文件修复文件夹

的NTFS权限，以便只有适当的用户才能访问。这个

可能是您服务器管理员的工作，具体取决于您的

组织的设置。


Jeffrey Palermo


" Wm。斯科特米勒 <钪********** @ spam.killer.wvinsurance.gov>写在

消息新闻：OC ************** @ TK2MSFTNGP11.phx.gbl ...

In this case, I''m assuming you are using AD, and these people''s windows
accounts have access to these files. Use NTFS security on the folder and
take out "Everyone" if it''s there. Fix the NTFS permissions on the folder
with the restricted files so that only appropriate users have access. This
may be a job for your server administrator depending on how your
organization is set up.

Jeffrey Palermo

"Wm. Scott Miller" <Sc**********@spam.killer.wvinsurance.gov> wrote in
message news:OC**************@TK2MSFTNGP11.phx.gbl...

IIS设置为Windows禁用所有其他方法的身份验证。

Scott

Jeffrey Palermo < JE ************ @ yahoo.com>在消息中写道
新闻：OP ************* @ TK2MSFTNGP09.phx.gbl ...

IIS is set to Windows Authentication with all other methods disabled.

Scott

"Jeffrey Palermo" <je************@yahoo.com> wrote in message
news:OP*************@TK2MSFTNGP09.phx.gbl...

这不是ASP.NET问题，但是一个IIS。

使用IIS安全性来验证此虚拟目录的用户。那意味着你必须禁用匿名访问。

杰弗里巴勒莫

嗯。斯科特米勒 <钪********** @ spam.killer.wvinsurance.gov>在
消息新闻中写道：O8 **************** @ TK2MSFTNGP10.phx.gbl ...

This is not an ASP.NET issue, but an IIS one.

Use IIS security to authenticate users for this virtual directory. That
means you have to disable anonymous access.

Jeffrey Palermo

"Wm. Scott Miller" <Sc**********@spam.killer.wvinsurance.gov> wrote in
message news:O8****************@TK2MSFTNGP10.phx.gbl...

我们有一个允许的内部网站点我们的一个部门搜索一组pdf，然后查看它们。唯一的问题是，只有他们和我们

We have a intranet site that allows one of our departments to search a set of pdfs and then look at them. Only problem is that only they and us

geeks

geeks

才能被允许看到pdf。我们已将其锁定，除非

should be allowed to see the pdfs. We have it locked down except for when

人员直接在网址中输入pdf。目前，PDF在
下是服务器根目录下的虚拟目录。把它放在搜索网站下也行不通。我的理解是IIS将虚拟目录看作一个单独的站点，并且不会将web.config设置
下载到

person directly types in the url to a pdf. Currently, the PDFs are in a virtual directory off the root of the server. Putting it under the search site also doesn''t work. My understanding is that IIS looks as the virtual directory as a separate site and will not carry web.config settings down to

它。将web.config直接放在虚拟目录中也不会

it. Putting a web.config in the virtual directory directly doesn''t

工作。如何保护这个虚拟目录，以便只有某些用户

work either. How do I secure this virtual directory so only certain users

可以访问pdf？

Scott

can get to the pdfs?

Scott

这篇关于Web.Config和虚拟目录的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！