I’m running a dashboard in IIS with Windows Authentication and am having trouble getting authorization policies to work as expected, or my expectations don’t match reality. Consider this dashboard: $Auth = New-UDAuthenticationMethod -Windows $Policy1 = New-UDAuthorizationPolicy -Name "Policy1" -En…

[image] Issue: Multiple AuthorizationPolicy entries opened by Jacob-Evans on 2019-02-27 closed by adamdriscoll on 2019-03-07 Is it possible to have more then 1 entry for AuthorizationPolicy entries on a page? I have tried: New-UDPage -Name "Accounts Page" -AuthorizationPol…

@Jacob-Evans thanks for the link! Are you sure that’s the same issue? If so, I may start testing with the 2.4 beta if the fix is included in that release. EDIT: I think I understand now - when @adamdriscoll says that if the first policy “fails” he means that it evaluates to false, right? Then this …

Please test 2.4-beta for this. The policies were actually pretty jacked in 2.3.2. They seem to be much happier in 2.4.

Yeah, that’s much better so far. The above script works as expected, and I’ve even gone a step further and provided a home page that’s open to anyone, and the two pages above still work with appropriate selective access. Thanks!

So I did get the basics of authorization working above, but as soon as I try to apply this to my production script it won’t launch in IIS. I keep getting a 502.5 error. As soon as I comment out the -LoginPage parameter the dashboard will launch. How can I get logs of what is going on in there?

Try turning on logging: Enable-UDLogging -FilePath [some path IIS can write to]

I can just add that right to the dashboard script?

yeah. Just throw it right in the beginning.

Bizarre! now I can’t reproduce the error, so the logging isn’t doing anything! :frowning: I was consistently getting errors in the app log like: Application ‘MACHINE/WEBROOT/APPHOST/DEFAULT WEB SITE’ with physical root ‘C:\inetpub\wwwroot’ failed to start process with commandline 'C:\inetpub\wwwro…

so I’m testing locally in IIS on windows 10 and can’t seem to repro the error again, even though it was happening earlier. I added UDLogging on my test site that’s running on windows server 2016 IIS and I am not getting those logs but they don’t seem to have anything helpful in there since the pro…

Authorization Policies With IIS Don't Work As Expected

MadWithPowerShell April 25, 2019, 8:46pm 12

Matt,

Is it possible you stepped into an alternate universe over lunch?

“Heisenbug” is my favorite IT slang term. And one of my least favorite to work with.

Thanks,
Tim Curwick

Topic		Replies	Views
Unable to get any authorization policies to work - Azure AD Auth/IIS Universal Dashboard Help	12	1139	July 13, 2020
More trouble with Authorization Policies Universal Dashboard Help	14	1648	April 15, 2020
Authorization Policy Help Universal Dashboard Help	6	789	August 30, 2019
IIS Windows Auth not working for me Universal Dashboard Help	26	3168	January 18, 2019
Windows Claims AuthorizationPolicy Not Working Universal Dashboard Help	7	819	November 26, 2019

Authorization Policies With IIS Don't Work As Expected

Related topics