Always getting 403 - Githubissues

alexbeletsky / elmah-mvc

Painless integration of ELMAH into ASP.NET MVC application

http://nuget.org/packages/Elmah.MVC

Apache License 2.0

266 stars 61 forks source link

Always getting 403 #27

Closed david-martyn-ford closed 11 years ago

david-martyn-ford commented 11 years ago

I am always getting 403 - File access denied and I do not know why.

I setup the auth on and with the role and it works on my localhost but when pushed to my server it does not work.

alexbeletsky commented 11 years ago

What IIS version are you running on?

david-martyn-ford commented 11 years ago

IIS 8

alexbeletsky commented 11 years ago

OK, are you sure you app pool is in Integrated Mode? Not Classic? 18.04.2013 20:40 ÐÏÌØÚÏ×ÁÔÅÌØ "DavidFord1996" notifications@github.com ÎÁÐÉÓÁÌ:

IIS 8

Reply to this email directly or view it on GitHubhttps://github.com/alexanderbeletsky/elmah.mvc/issues/27#issuecomment-16591261 .

david-martyn-ford commented 11 years ago

Sorry for late reply. It is in Integrated Mode.

alexbeletsky commented 11 years ago

That's sound strange them. Is that possible to .zip your project and send to me?

Nobody compains about that, so I assume it's a kind of configuration issue.

On Thu, Apr 18, 2013 at 10:31 PM, DavidFord1996 notifications@github.comwrote:

Sorry for late reply. It is in Integrated Mode.

— Reply to this email directly or view it on GitHubhttps://github.com/alexanderbeletsky/elmah.mvc/issues/27#issuecomment-16600118 .

Alexander Beletsky, http://beletsky.net

david-martyn-ford commented 11 years ago

Sorry but I don't think I would like to do that. My assumption is that it could be an problem with a setting in IIS. I'll create a complete new project and upload it to the server and see if I still have the same issue.

david-martyn-ford commented 11 years ago

I am pretty sure it is a server config as all projects with the Elmah added to them throws 403 when visiting /elmah

alexbeletsky commented 11 years ago

Have you tried that on brand-new application? Getting the same error?

david-martyn-ford commented 11 years ago

I created a new MVC 4 application and added Elah.MVC. It worked fine on the local host but once again when pushed to server it just throws 403.

Sent from my iPhone

On 22 Apr 2013, at 08:00 AM, "Alexander Beletsky" notifications@github.com wrote:

Have you tried that on brand-new application? Getting the same error?

— Reply to this email directly or view it on GitHub.

AlexShkor commented 11 years ago

The same issue on appharbor.com. Seems because of file access.

alexbeletsky commented 11 years ago

@DavidFord1996 @AlexShkor guys, I believe thats expected behavior. It's quite common to disable ELMAH access running on production servers to avoid ELMAH session attack.

So, by default ELMAH.MVC is disabled for remote access. If you sure you need it, please refer to ELMAH remote access (be careful with that).

AlexShkor commented 11 years ago

Thanks

HughJeffner commented 8 years ago

This is safe if you configure these correctly, right?

<add key="elmah.mvc.allowedRoles" value="*" />
<add key="elmah.mvc.allowedUsers" value="*" />

Default allows all users!

Also, if you access over http and load a page with an active session cookie then well that could be bad as well.