Groups | Blog | Home
all groups > iis security > april 2004 >

iis security : SSL Redirect


Jerry Pisk
4/20/2004 8:04:29 PM
Asp.Net is using its own set of error pages. Take a look at the
configuration file, it's in there...

Jerry

[quoted text, click to view]

Jim
4/20/2004 8:25:35 PM
We have setup a custom error to redirect users when they try to access a
site without using https. This work fine for any site that doesn't use
asp.net. When you goto a site that uses asp.net you get the following
error:
The specified request cannot be executed from current Application Pool

It is acting like it hasn't hit the 403.4 error yet, so my custom script
hasen't redirected to https yet.

Thanks,
Jim Field
fieldj@roberts.edu

v-wzhang NO[at]SPAM online.microsoft.com (
4/21/2004 6:40:13 AM
Hello Jim,

This is a knwon issue, matching the following two points can resolve
it:

1) In Web.config, just leave customError disabled to allow IIS handle
the 403.4 error code.
<customErrors mode="Off" />

2) Yes, as the error message indicated, the ASP.net application's
AppPool must be the same one as which the redirection page located.
For example:

ASP.net app in /WebApplication1
redirect.asp in root directory /
403.4 is pointed to /redirect.asp
The site root(home) directory's AppPool is DefaultAppPool.

Set WebApplication1 to also use DefaultAppPool and the error will no
longer occur.
Another work around is place a copy of redirect.asp into
/WebApplication1 and map /WebApplication1's 403.4 to use this local
page.

Best regards,

WenJun Zhang
Microsoft Online Support
This posting is provided "AS IS" with no warranties, and confers no
rights.
Get Secure! - www.microsoft.com/security
Ken Schaefer
4/21/2004 2:27:23 PM
a) In ASP.NET you need to edit the <customErrors> section of the web.config
file.
b) The actual error page needs to be served from the same Web Application
Pool that the error is being generated from.

Cheers
Ken

[quoted text, click to view]
: We have setup a custom error to redirect users when they try to access a
: site without using https. This work fine for any site that doesn't use
: asp.net. When you goto a site that uses asp.net you get the following
: error:
: The specified request cannot be executed from current Application Pool
:
: It is acting like it hasn't hit the 403.4 error yet, so my custom script
: hasen't redirected to https yet.
:
: Thanks,
: Jim Field
: fieldj@roberts.edu
:
:

AddThis Social Bookmark Button