Deny Logon to OU, Group or Single User

[Paul-K]

Hi all,

 

Does anyone know if it is possible to deny logons to an Active Directory OU, Group or even a single user so that when they type their logon credentials into HAP it just denies logon with a message, kind of like the message that comes up if a user typed in the wrong username or password.

 

Many thanks

[Paul-K]

Hi all,

 

Sorry to be a pain but does anyone know if the above is possible as I would like to use HAP+ for staff only and deny access to students and possibly the supply staff account?

 

Many thanks

[nickbro]

Unfortunately it will just redirect them to the unauthorized.aspx page instead.

 

You can limit access by changing line 38 of the web.config file.

 

Add

 

[Paul-K]

Cheers Nick,

 

I will give this a go later.

 

Many thanks, as always

[Paul-K]

Hi Nick,

 

I have tried adding the code to my web.config file and I get the below error in chrome.

Error 310 (net::ERR_TOO_MANY_REDIRECTS): There were too many redirects.

 

IE just don't load the page and firefox shows the error: "The page isn't redirecting properly, Firefox has detected that the server is redirecting the request for this address in a way that will never complete."

 

I have taken off my HTTP redirect in case this was causing a problem but this has not resolved the issue.

 

Any ideas?

 

Also would it be possible to eliminate the unauthorised page so that when a user that is not allowed to access the system using it would just show a message on the homepage like the one shown for incorrect username/password?

[nickbro]

Hi Paul-K, it's coming in the next release. Odd that it's stuck in an infinite redirect

[jrink]

Hi Paul-K, it's coming in the next release. Odd that it's stuck in an infinite redirect

 

This is what is happening to me too. When changing the web.config to ONLY allow certain users via the allow roles option, if you try to login to HAP with an account that isnt authorized , it never displays the unauthorized.aspx page. This is with the latest 9.1 code as far as I can tell.

 

JR

[Paul-K]

I have updated to 9.2 and this now works perfectly for <deny roles="%Rolename%" /> and <deny users="%Username%" />.

 

Thanks Nick for the hard work.