Only Allow Staff Logins

[smidsy]

Hello All

 

I have started working with HAP on a test server with the aim of initially using it for just our staff to access files offsite. I have managed to get it up and running with one of the YouTube videos and now got all of the shares to be showing correctly for staff.

 

However any student account can also log into the HAP system. They do not see any options when they are logged in but I would rather they couldn't log in at all at the moment. Is there any way to limit the login to a particular AD Group / OU? I have had a read around of the website's documentation and quite a few posts on edugeek but I can't seem to find the answer.

 

Regards

[nickbro]

Use IIS Manager's ASP.net authentication to Allow Domain Admins and the Teachers Group but deny all others. If you are doing this in the web.config file:

[smidsy]

Thank you for the quick reply that has worked perfectly. My unauthorised.aspx file has now got a redirect loop in it but I will have a look at that on Monday.

[nickbro]

You may need to add a override for the unauthorised.aspx file to allow users="*" deny roles="?"

[smidsy]

Hi NickBro, thank you very much for all your help.

 

When I add the following to my web.config the unauthorised.aspx file loads but then it reloads continually.

 

 

If I add under the allow users line then I get the following configuration error from IIS on that line

 

 

Configuration Error

 

Description: An error occurred during the processing of a configuration file required to service this request. Please review the specific error details below and modify your configuration file appropriately.

 

Parser Error Message: Authorization rule names cannot contain the '?' character.

 

 

Not sure what I am doing wrong here.

[nickbro]

deny users="?"

[smidsy]

Deny users="?" allows the unauthorised page to open but then it just reloads repeatedly.

[nickbro]

Hmm, ok, I think I know why that happens now. Revert the web.config file

 

That will stop users getting to the main screen of HAP but still allow the APIs and unuthorised page to work.

 

Alternatively add:

 

[smidsy]

That change has got it all working. Many thanks for your help.

[Duke5A]

Hmm, ok, I think I know why that happens now. Revert the web.config file

 

That will stop users getting to the main screen of HAP but still allow the APIs and unuthorised page to work.

 

Alternatively add:

 

 

Hi Nick, I find myself in the same pickle here; I just setup v10 to take the place of the aging v7.9 install, but can't get students locked out without breaking it. If I implement the above the students are locked out from the main page, but the student is still technically logged in and can just hit the drop down menu on the top left while on the unauthorized page to access all of the functions of HAP+. Ideas?

[nickbro]

Repeat the above for ~/myfiles/, ~/bookingsystem/, ~/helpdesk/