Closed david-martyn-ford closed 11 years ago
What IIS version are you running on?
IIS 8
OK, are you sure you app pool is in Integrated Mode? Not Classic? 18.04.2013 20:40 ÐÏÌØÚÏ×ÁÔÅÌØ "DavidFord1996" notifications@github.com ÎÁÐÉÓÁÌ:
IIS 8
Reply to this email directly or view it on GitHubhttps://github.com/alexanderbeletsky/elmah.mvc/issues/27#issuecomment-16591261 .
Sorry for late reply. It is in Integrated Mode.
That's sound strange them. Is that possible to .zip your project and send to me?
Nobody compains about that, so I assume it's a kind of configuration issue.
On Thu, Apr 18, 2013 at 10:31 PM, DavidFord1996 notifications@github.comwrote:
Sorry for late reply. It is in Integrated Mode.
— Reply to this email directly or view it on GitHubhttps://github.com/alexanderbeletsky/elmah.mvc/issues/27#issuecomment-16600118 .
Alexander Beletsky, http://beletsky.net
Sorry but I don't think I would like to do that. My assumption is that it could be an problem with a setting in IIS. I'll create a complete new project and upload it to the server and see if I still have the same issue.
I am pretty sure it is a server config as all projects with the Elmah added to them throws 403 when visiting /elmah
Have you tried that on brand-new application? Getting the same error?
I created a new MVC 4 application and added Elah.MVC. It worked fine on the local host but once again when pushed to server it just throws 403.
Sent from my iPhone
On 22 Apr 2013, at 08:00 AM, "Alexander Beletsky" notifications@github.com wrote:
Have you tried that on brand-new application? Getting the same error?
— Reply to this email directly or view it on GitHub.
The same issue on appharbor.com. Seems because of file access.
@DavidFord1996 @AlexShkor guys, I believe thats expected behavior. It's quite common to disable ELMAH access running on production servers to avoid ELMAH session attack.
So, by default ELMAH.MVC is disabled for remote access. If you sure you need it, please refer to ELMAH remote access (be careful with that).
Thanks
This is safe if you configure these correctly, right?
<add key="elmah.mvc.allowedRoles" value="*" />
<add key="elmah.mvc.allowedUsers" value="*" />
Default allows all users!
Also, if you access over http
and load a page with an active session cookie then well that could be bad as well.
I am always getting 403 - File access denied and I do not know why.
I setup the auth on and with the role and it works on my localhost but when pushed to my server it does not work.