Permission denied HTTP 403 error on Telerik.Web.UI.WebResource.axd

[Michael]

Permission Denied http 403, already added this section to web.config.. both httphandler and handler is defined for Telerik.Web.UI.WebResource.axd (web.config attached) webresource.axd loads ok, only thing does not load is the Telerik.Web.UI.WebResource.axd

 

<location path="Telerik.Web.UI.WebResource.axd">
<system.web>
<authorization>
<allow users="*"/>
</authorization>
</system.web>
</location>

 

any ideas??

 ---- web config ---

<?xml version="1.0" encoding="UTF-8"?>
<configuration>
<!-- "C:\Inetpub\wwwroot\BART\_Docs\LOCAL_BART.config"
"C:\Inetpub\wwwroot\Common\Config\DEV_BART.config" -->
<appSettings file="D:\Sites\BART\wwwroot\Common\Config\DEV_BART.config">
<!--MDD 11 R3 3168 and 3191 9/8/2011 JHamrick - encrypt credentials-->
<!-- CLH - 2011-04-10 - if you want to disable any connection to the database, replace the
password string with the word ROLLOUT in all caps and run the appropriate R1 job to push the
configuration files to the Production web servers.
-->
<add key="CopyRight" value="Bank of America N.A. Member FDIC© [YEAR] Bank of America Corporation. All rights reserved." />
<add key="CopyRightStyle" value="&lt;BR/>&lt;BR/>&lt;BR/>&lt;font style='font:11px Arial, Helvetica, sans-serif; font-weight: bold; color: Gray;'>[Text]&lt;/font >" />
<!-- application specific settings for Netstatus_HP CLH May, 2014 -->
<add key="DistributionGroup_EmailAddress" value="[e-mail],[e-mail],[e-mail]" />
<add key="NET_Undetermine_CC" value="[e-mail]" />
<add key="SHISurplusService.FetchInventorySvc" value="https://www.webservice.shi.com/Customer/BoaRedeploy/FetchInventorySvc.asmx" />
</appSettings>
<system.web>
<!--
Set compilation debug="true" to insert debugging
symbols into the compiled page. Because this
affects performance, set this value to true only
during development.
-->
<compilation debug="true" targetFramework="4.5.1">
<assemblies>
<add assembly="Microsoft.mshtml, Version=7.0.3300.0, Culture=neutral, PublicKeyToken=B03F5F7F11D50A3A" />
<add assembly="System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=B03F5F7F11D50A3A" />
<add assembly="System.Web.DataVisualization.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" />
<add assembly="System.Web.DataVisualization, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" />
<add assembly="System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=B77A5C561934E089" />
<add assembly="System.Speech, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" />
<add assembly="System.ServiceModel, Version=4.0.0.0, Culture=neutral, PublicKeyToken=B77A5C561934E089" />
<add assembly="System.Xml.Linq, Version=4.0.0.0, Culture=neutral, PublicKeyToken=B77A5C561934E089" />
<add assembly="System.Web.Extensions, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" />
<add assembly="System.Web.Extensions.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" />
<add assembly="DocumentFormat.OpenXml, Version=2.5.5631.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" />
<add assembly="PresentationCore, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" />
<add assembly="Telerik.Web.Design, Version=2014.3.1209.45, Culture=neutral, PublicKeyToken=121FAE78165BA3D4" />
<add assembly="System.Net.Http, Version=4.0.0.0, Culture=neutral, PublicKeyToken=B03F5F7F11D50A3A" />
</assemblies>
</compilation>
<!-- The <authentication> section enables configuration
of the security authentication mode used by
ASP.NET to identify an incoming user.
-->
<authentication mode="Forms">
<forms name="BartAuth" loginUrl="login.aspx" path="/" protection="All" timeout="120" slidingExpiration="true" />
</authentication>
<!-- this state server is pointing at wrdna214 as of Dec 11, 2013 C.Hannah -->
<!--<sessionState mode="StateServer" stateConnectionString="tcpip=171.149.199.116:42424" sqlConnectionString="data source=127.0.0.1;Trusted_Connection=yes" cookieless="false" timeout="20"/>-->
<!-- trying InProc because they keep monkeying w/ our state server Feb 23, 2014 C.Hannah -->
<sessionState mode="InProc" />
<machineKey validationKey="46BB46BDA1DA6BBBC778E78924C9E5E9B13FC538CCEA86A2F8EBB5EB71ACD146C31882EB6EB3C96792AF444CA518D21B87898D54AF896573C234A286811F1155" decryptionKey="0AD3C727F97BE9AE303932059D3B1E1A7505E044CCC8B33B" validation="SHA1" />
<!-- The <customErrors> section enables configuration
of what to do if/when an unhandled error occurs
during the execution of a request. Specifically,
it enables developers to configure html error pages
to be displayed in place of a error stack trace.
-->
<!--<customErrors mode="RemoteOnly" defaultRedirect="GenericErrorPage.htm">
<error statusCode="403" redirect="NoAccess.htm"/>
<error statusCode="404" redirect="FileNotFound.htm"/>
</customErrors>-->
<!--<customErrors mode="Off" defaultRedirect="~/Common/Pages/Err.aspx" redirectMode="ResponseRewrite">
<error statusCode="403" redirect="~/Common/Pages/403.aspx" />
<error statusCode="404" redirect="~/Common/Pages/404.aspx" />
</customErrors>-->
<!-- CustomErrors for PROD - RemoteOnly with defaultRedirect
<customErrors mode="On" defaultRedirect="~/Common/Pages/Err.aspx">
<error statusCode="404" redirect="~/Common/Pages/404.aspx" />
</customErrors>
-->
<!-- CustomErrors for UAT and below - On with no defaultRedirect -->
<customErrors mode="Off">
<error statusCode="404" redirect="~/Common/Pages/404.aspx" />
</customErrors>
<pages enableSessionState="true" controlRenderingCompatibilityVersion="3.5" clientIDMode="AutoID">
<controls>
<add tagPrefix="cc1" namespace="AjaxControlToolkit" assembly="AjaxControlToolkit, Version=3.5.40412.0, Culture=neutral" />
<add tagPrefix="cc2" namespace="Karamasoft.WebControls" assembly="UltimateMenu" />
<add tagPrefix="um1" namespace="Karamasoft.WebControls" assembly="UltimateMenu" />
<add tagPrefix="uc1" tagName="CorpDirLookup" src="~/Common/UserControls/CorpDirLookup.ascx" />
<add tagPrefix="uc2" tagName="header" src="~/Common/UserControls/Header.ascx" />
<add tagPrefix="uc3" tagName="footer" src="~/Common/UserControls/Footer.ascx" />
<add tagPrefix="uc4" tagName="BARTGroupBar" src="~/Common/UserControls/BARTGroupBar.ascx" />
<add tagPrefix="uc5" tagName="BARTMainMenu" src="~/Common/UserControls/BARTMainMenu.ascx" />
<add tagPrefix="uc6" tagName="BARTSearchOptionText" src="~/Common/UserControls/BARTSearchOptionText.ascx" />
<add tagPrefix="uc7" tagName="BARTSearchOptionSymbol" src="~/Common/UserControls/BARTSearchOptionSymbol.ascx" />
<add tagPrefix="uc8" tagName="USStates" src="~/Common/UserControls/USStatesDropdown.ascx" />
<add tagPrefix="uc9" tagName="CustomPager" src="~/Common/UserControls/CustomPager.ascx" />
<add tagPrefix="uc10" tagName="tBand_group_bar" src="~/Common/UserControls/tBandBARTGroupBar.ascx" />
<add tagPrefix="uc11" tagName="GroupDetails" src="~/Common/UserControls/GroupDetails.ascx" />
<add tagPrefix="uc12" tagName="gList_Manager_List" src="~/Common/UserControls/gList_Manager_List.ascx" />
<add tagPrefix="uc14" tagName="BARTRegions" src="~/Common/UserControls/BARTRegions.ascx" />
<add tagPrefix="uc14" tagName="DDLManager" src="~/Common/UserControls/DDLManager.ascx" />
<add tagPrefix="telerik" assembly="Telerik.Web.UI" namespace="Telerik.Web.UI" />
<add tagPrefix="um1" assembly="UltimateMenu" namespace="Karamasoft.WebControls" />
<add tagPrefix="uc15" tagName="ZT_group_bar" src="~/Common/UserControls/zeroTouchGroupBar.ascx" />
<add tagPrefix="asp" assembly="System.Web.DataVisualization, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" namespace="System.Web.UI.DataVisualization.Charting" />
</controls>
</pages>
<httpHandlers>
<add path="ChartImg.axd" verb="GET,HEAD" type="System.Web.UI.DataVisualization.Charting.ChartHttpHandler, System.Web.DataVisualization, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" validate="false" />
<add path="ChartImage.axd" type="Telerik.Web.UI.ChartHttpHandler" verb="*" validate="false" />
<add path="Telerik.Web.UI.SpellCheckHandler.axd" type="Telerik.Web.UI.SpellCheckHandler" verb="*" validate="false" />
<add path="Telerik.Web.UI.DialogHandler.aspx" type="Telerik.Web.UI.DialogHandler" verb="*" validate="false" />
<add path="Telerik.RadUploadProgressHandler.ashx" type="Telerik.Web.UI.RadUploadProgressHandler" verb="*" validate="false" />
<add path="Telerik.Web.UI.WebResource.axd" type="Telerik.Web.UI.WebResource" verb="*" validate="false" />
</httpHandlers>
<!--jHamrick: settings for BP file upload
1. maxRequestLengh - maximum of 1gb for .net 1.x
2. requestLengthDiskThreadshold(kb) - default of 80, 80kb that is. -->
<!-- CHannah: adding requestValidationNode 2 to get validateRequest=false to work in .Net 4 Framework after MDD_12_R3 release -->
<httpRuntime maxRequestLength="1048576" requestLengthDiskThreshold="4096" requestValidationMode="2.0" executionTimeout="600" />
<identity impersonate="false" />
</system.web>
<location path="Telerik.Web.UI.WebResource.axd">
<system.web>
<authorization>
<allow users="*"/>
</authorization>
</system.web>
</location>
<!--MDD_12_R3 C.Hannah added the following node to allow 4 Framework to coexist w/ 3.5 on the server -->
<system.codedom>
<compilers>
<compiler language="c#;cs;csharp" extension=".cs" type="Microsoft.CSharp.CSharpCodeProvider,System, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" warningLevel="4">
<providerOption name="CompilerVersion" value="v4.0" />
<providerOption name="WarnAsError" value="false" />
</compiler>
<compiler language="vb;vbs;visualbasic;vbscript" extension=".vb" type="Microsoft.VisualBasic.VBCodeProvider, System, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" warningLevel="4">
<providerOption name="CompilerVersion" value="v4.0" />
<providerOption name="OptionInfer" value="true" />
<providerOption name="WarnAsError" value="false" />
</compiler>
</compilers>
</system.codedom>
<!--
The system.webServer section is required for running ASP.NET AJAX under Internet
Information Services 7.0. It is not necessary for previous version of IIS.
-->
<system.webServer>
<validation validateIntegratedModeConfiguration="false" />
<!-- the next node httpProtocol used to make IE8 emulate IE7 CLH 2011-03-02
<httpProtocol>
<customHeaders>
<clear />
<add name="X-UA-Compatible" value="IE=EmulateIE9"/>
</customHeaders>
</httpProtocol>
-->
<handlers>
<remove name="CharImageHandler" />
<add name="handler-wa-32" path="*" verb="*" modules="IsapiModule" scriptProcessor="D:\Apps\Program Files\CA\webagent\win32\bin\ISAPI6WebAgent.dll" resourceType="Unspecified" requireAccess="None" preCondition="classicMode,bitness32" />
<add name="CASiteMinderWebAgentHandler-fcc-32" path="*.fcc" verb="*" modules="CASiteMinderWebagentModule-32" resourceType="Unspecified" preCondition="integratedMode,bitness32" />
<add name="CASiteMinderWebAgentHandler-ntc-32" path="*.ntc" verb="*" modules="CASiteMinderWebagentModule-32" resourceType="Unspecified" preCondition="integratedMode,bitness32" />
<add name="CASiteMinderWebAgentHandler-ccc-32" path="*.ccc" verb="*" modules="CASiteMinderWebagentModule-32" resourceType="Unspecified" preCondition="integratedMode,bitness32" />
<add name="CASiteMinderWebAgentHandler-scc-32" path="*.scc" verb="*" modules="CASiteMinderWebagentModule-32" resourceType="Unspecified" preCondition="integratedMode,bitness32" />
<add name="CASiteMinderWebAgentHandler-kcc-32" path="*.kcc" verb="*" modules="CASiteMinderWebagentModule-32" resourceType="Unspecified" preCondition="integratedMode,bitness32" />
<add name="handler-wa" path="*" verb="*" modules="IsapiModule" scriptProcessor="D:\Apps\Program Files\CA\webagent\win64\bin\ISAPI6WebAgent.dll" resourceType="Unspecified" requireAccess="None" preCondition="classicMode,bitness64" />
<add name="CASiteMinderWebAgentHandler-fcc" path="*.fcc" verb="*" modules="CASiteMinderWebagentModule" resourceType="Unspecified" preCondition="integratedMode,bitness64" />
<add name="CASiteMinderWebAgentHandler-ntc" path="*.ntc" verb="*" modules="CASiteMinderWebagentModule" resourceType="Unspecified" preCondition="integratedMode,bitness64" />
<add name="CASiteMinderWebAgentHandler-ccc" path="*.ccc" verb="*" modules="CASiteMinderWebagentModule" resourceType="Unspecified" preCondition="integratedMode,bitness64" />
<add name="CASiteMinderWebAgentHandler-scc" path="*.scc" verb="*" modules="CASiteMinderWebagentModule" resourceType="Unspecified" preCondition="integratedMode,bitness64" />
<add name="CASiteMinderWebAgentHandler-kcc" path="*.kcc" verb="*" modules="CASiteMinderWebagentModule" resourceType="Unspecified" preCondition="integratedMode,bitness64" />
<add name="ChartImageHandler" preCondition="integratedMode" verb="GET,HEAD" path="ChartImg.axd" type="System.Web.UI.DataVisualization.Charting.ChartHttpHandler, System.Web.DataVisualization, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35" />
<add name="ChartImage_axd" path="ChartImage.axd" type="Telerik.Web.UI.ChartHttpHandler" verb="*" preCondition="integratedMode" />
<remove name="Telerik_Web_UI_SpellCheckHandler_axd" />
<add name="Telerik_Web_UI_SpellCheckHandler_axd" path="Telerik.Web.UI.SpellCheckHandler.axd" type="Telerik.Web.UI.SpellCheckHandler" verb="*" preCondition="integratedMode" />
<remove name="Telerik_Web_UI_DialogHandler_aspx" />
<add name="Telerik_Web_UI_DialogHandler_aspx" path="Telerik.Web.UI.DialogHandler.aspx" type="Telerik.Web.UI.DialogHandler" verb="*" preCondition="integratedMode" />
<remove name="Telerik_RadUploadProgressHandler_ashx" />
<add name="Telerik_RadUploadProgressHandler_ashx" path="Telerik.RadUploadProgressHandler.ashx" type="Telerik.Web.UI.RadUploadProgressHandler" verb="*" preCondition="integratedMode" />
<remove name="Telerik_Web_UI_WebResource_axd" />
<add name="Telerik_Web_UI_WebResource_axd" path="Telerik.Web.UI.WebResource.axd" type="Telerik.Web.UI.WebResource" verb="*" preCondition="integratedMode" />
<remove name="ExtensionlessUrlHandler-Integrated-4.0" />
<remove name="OPTIONSVerbHandler" />
<remove name="TRACEVerbHandler" />
<add name="ExtensionlessUrlHandler-Integrated-4.0" path="*." verb="*" type="System.Web.Handlers.TransferRequestHandler" preCondition="integratedMode,runtimeVersionv4.0" />
</handlers>
<defaultDocument>
<files>
<remove value="default.aspx" />
<remove value="iisstart.htm" />
<remove value="index.html" />
<remove value="index.htm" />
<remove value="Default.asp" />
<remove value="Default.htm" />
<add value="login.aspx" />
</files>
</defaultDocument>
<httpErrors errorMode="Detailed" existingResponse="PassThrough" />
<modules>
<add name="CASiteMinderWebagentModule" preCondition="integratedMode,bitness64" />
<add name="CASiteMinderWebagentModule-32" preCondition="integratedMode,bitness32" />
</modules>
<isapiFilters>
<filter name="SiteMinder Agent" path="D:\Apps\Program Files\CA\webagent\win64\bin\ISAPI6WebAgent.dll" enabled="true" preCondition="classicMode,bitness64" />
<filter name="SiteMinder Agent-32" path="D:\Apps\Program Files\CA\webagent\win32\bin\ISAPI6WebAgent.dll" enabled="true" preCondition="classicMode,bitness32" />
</isapiFilters>
</system.webServer>
<system.serviceModel>
<behaviors>
<serviceBehaviors>
<behavior name="">
<serviceMetadata httpGetEnabled="true" />
<serviceDebug includeExceptionDetailInFaults="false" />
</behavior>
</serviceBehaviors>
</behaviors>
<serviceHostingEnvironment multipleSiteBindingsEnabled="true" />
</system.serviceModel>
<runtime>
<assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
<dependentAssembly>
<assemblyIdentity name="Newtonsoft.Json" publicKeyToken="30ad4fe6b2a6aeed" culture="neutral" />
<bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0" />
</dependentAssembly>
</assemblyBinding>
</runtime>
<system.net>
</system.net>
</configuration>

any ideas??

[Pavlina]

Hi,

I have already answered your support ticket with the same question. In order to avoid duplicate posts I will ask you continue our communication there.

Regards,
Pavlina
Telerik

[Randy]

Hi, I'm running into the same issue here. What was the resolution you provided in the support ticket? Any help is much appreciated. Thanks.

[Pavlina]

Hello,

Try replacing your web config with the one I have attached and see if it makes any difference? In case the problem still persists isolate it in a sample project and send it to us via support ticket.

Regards,
Pavlina
Telerik