Securing services - Error 403 with the proxy page

MarcoRosa

Hi to all,
i habe a big trouble with the securing of ags services. I try to show what i done ( what i like to do )

1) On operative system ( win server 2008 r2 , iis 7 ) i've created an user account (user1/pwd1) , and a group of users ( user1 is inside group )

2) Inside ags manager i've activated security and i have set the security for one services ( group is allowed on this )

3) disable inside iis anonymous auth for both the directories rest and services and enable windows authentication

4) now on browser ( outside on internet ) http://mydomain/arcgis/rest/services/

5) the browser show me authentication login form , i write user1/pwd1 and i can read the services

all right until this point

Now i would like to set up a silverlight application .... made the application ( no proxy ) , and all lokks like works .... the app show me the login form , i write user1 / pwd1 and i can see the maps

the trouble start when i try to pass credential automatically, then i set up this , i write inside proxy.config the user user1/pwd1 but i have always the error

403 - Forbidden: Access is denied.
You do not have permission to view this directory or page using the credentials that you supplied.

What i've forget to do ? , is possible to do this or i've to find another solution ?

Thank you , help me please.

GP

JayOckers

if the 403 error being generated by the request to the proxy.ashx page then you probably need to turn on windows authentication for the host asp.net application.

In the web.config file for your application:

    <system.web>
        <authentication mode="Windows"/>
        <authorization>
            <deny users="?" />
            <allow users="*" />
        </authorization>
    </system.web>

This will deny access to all unauthenticated requests and allow all authenticated requests.  Then make sure that anonymous access is disabled from IIS on the server.

If the error is being thrown from the request from the proxy to ArcGIS server, make sure the account is valid on both the instance hosting your Asp.Net application and the instance hosting ArcGIS Server.