Microsoft Content Management Server - authorization and authentication tags in Web.config

This is Interesting: Free IT Magazines  
Home > Archive > Microsoft Content Management Server > September 2004 > authorization and authentication tags in Web.config





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author authorization and authentication tags in Web.config
Nezar

2004-09-09, 5:52 pm

Hi Stefan,
Can i remove the authorization and authentication tags completely from
the web.config file on the online MCMS server?
Will this corrupt any thing in the online site. ( my MCMS site is
public site for guest access, and have no profiling)... I want to do
that in order to improve the performance, is that ok?

I already removed the MCMS authorization module by deleting the
following code from the Web.config file:
<add type="Microsoft.ContentManagement.Web.Security.CmsAuthorizationModule,
Microsoft.ContentManagement.Web, Version=5.0.1200.0, Culture=neutral,
PublicKeyToken=31bf3856ad364e35" name="CmsAuthorizationModule" />

Thanx in advance
Nezar Mohamad
Angus Logan

2004-09-09, 5:52 pm

Hi Nezar,

See
http://groups.google.com/groups?hl=...52e81333&rnum=1

-- the abstract below answers your questions -

Best Practices for MCMS Site Performance
The following are best practices for structuring your Microsoft Content
Management Server (MCMS) 2002 site to improve performance.

Server Configuration Application (SCA) best practices

a.. All MCMS servers that are not used for authoring should be set to
read-only access. Setting a server to read-only increases performance.

b.. In your ASP.NET sites, remove the authorization module from the
Web.config file; this can significantly improve performance. For more
information about the authorization module, see Configuring Internet Sites.
Caution You should only remove the authorization module in sites that
contain content for guest access only. If the site contains sensitive data
meant only for registered (non-guest) users, this data may become accessible
to guest users if the authorization module is removed.


Regards
--
________________________________________


Angus Logan (MCAD/MCDBA/MCP)
Lead Software Developer
Microsoft Application Solutions
Data#3 Limited
E angus_logan@data3.com.au
BLOG www.anguslogan.com
________________________________________


"Nezar" <nezar001@gmail.com> wrote in message
news:ccfba64e.0409090255.4568a1e2@posting.google.com...
> Hi Stefan,
> Can i remove the authorization and authentication tags completely from
> the web.config file on the online MCMS server?
> Will this corrupt any thing in the online site. ( my MCMS site is
> public site for guest access, and have no profiling)... I want to do
> that in order to improve the performance, is that ok?
>
> I already removed the MCMS authorization module by deleting the
> following code from the Web.config file:
> <add

type="Microsoft.ContentManagement.Web.Security.CmsAuthorizationModule,
> Microsoft.ContentManagement.Web, Version=5.0.1200.0, Culture=neutral,
> PublicKeyToken=31bf3856ad364e35" name="CmsAuthorizationModule" />
>
> Thanx in advance
> Nezar Mohamad



Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com