Archived Months
July 2003
August 2003
September 2003
October 2003
November 2003
December 2003
January 2004
February 2004
March 2004
April 2004
May 2004
June 2004
July 2004
August 2004
September 2004
October 2004
November 2004
December 2004
January 2005
February 2005
March 2005
April 2005
May 2005
June 2005
July 2005
August 2005
September 2005
October 2005
November 2005
December 2005
January 2006
February 2006
March 2006
April 2006
May 2006
June 2006
July 2006
August 2006
September 2006
October 2006
November 2006
December 2006
January 2007
February 2007
March 2007
April 2007
May 2007
June 2007
July 2007
August 2007
September 2007
October 2007
November 2007
December 2007
January 2008
February 2008
March 2008
April 2008
May 2008
June 2008


all groups > asp.net security > october 2003 > threads for october 8 - 14, 2003

Filter by week: 1 2 3 4 5

Use asp.net to protect file types
Posted by dwlawren NO[at]SPAM staff.uiuc.edu at 10/14/2003 3:09:19 PM
http://support.microsoft.com/?id=815152 (Edit the script mappings in Internet Services Mananger to protect pdf's with aspnet) I have a site that has multiple pdf's for download and multiple users who will download the .pdf's. I secured the site using the above article. I created an "admin" ...more >>

WindowsAuthentication from code
Posted by Alan Mendelevich at 10/14/2003 1:07:11 PM
Hi, I'm trying to build a login system where users login via web form, but then they are logged in as they would with windows authentication only not involving chalenge/response or basic authentication. I was able to login user via LogonUser() function and to get WindowsIdentity and WindowsPr...more >>

Store values in session.item
Posted by Niclas Lindblom at 10/11/2003 3:59:11 PM
Hi, Are there any security issues related with storing data related to the users session in session.item ? Can i keep data in there with any risk of it being read from the client side ? Please advise Regards Niclas ...more >>

ASPNET Account Security Problem - Running a Web Application over a network share
Posted by CES at 10/11/2003 12:07:09 AM
All, If anyone has been following my trials over the last week see(Setting up a Web Application on IIS 5.1 and ASP.Net Security Problems). I'm having a problem running a Asp.Net Web Application. I've finally narrowed the problem down to a security issue: The ASPNET (aspnet_wp) account cann...more >>

get WindowsIdentity with forms authentication
Posted by Niclas Lindblom at 10/10/2003 5:29:12 PM
Hi, I am trying to figure out a way to authenticate against Active Directory and retrieve system.security.principal.WindowsIdentity object, without having to see the awful grey Basic Authentication logon box. I have found documentation that you can send a authtentication request programaticall...more >>

Web.Config / Security Settings for sites NOT on sys partition
Posted by Grant Harmeyer at 10/10/2003 3:22:32 PM
I have a Win2K server set up with .NET 1.1, IIS5, and I run a few development test sites on this server for deployment elsewhere. Up until now, there was no issue with the sites residing in the Inetpub directory on the sys partition. However, we are starting to consume valuable disk space on th...more >>

catch 401.2 error
Posted by Alexander Stojakovic at 10/10/2003 2:53:02 PM
Dear collegues! I am trying to create a single Login Application, that can either authenticate against a database or against ADSI. Intenal users can have both an NT Account and anotherone (AppAccount) in the database (as clients would normaly have) and should be able to decide which one to us...more >>

windows authentication..
Posted by msnews.microsoft.com at 10/10/2003 2:26:48 PM
Hi I'm stuck with a user authentication issue and desperately need some help. here's the situation - I have a web application where all the users in the domain have access to the pages. Except an edit page - edit_employee.aspx,only the users in the custom admin group (- domain_name\webapp_admi...more >>



Forms authentication and downloading files
Posted by Michael Tissington at 10/9/2003 1:04:43 PM
How can I use Forms Authentication to give clients access to download specific exe files? Thanks. -- Michael Tissington http://www.oaklodge.com ...more >>

SSL FORM POST with Client Certificate from ASP.net
Posted by Aung at 10/9/2003 11:50:33 AM
I have a class written to perform FORM POST with Client Certificate and it works fine with Windows Appication. But, I am having trouble using it from ASP.NET application and everytime i am getting "connection cannot be established" error. Any help? Aung Here is the code of my FOR POST ...more >>

Parser Error on the base project created by Visual Studio
Posted by CES at 10/9/2003 10:07:04 AM
All, I've just started to use VBStudio, up tell now I've coded with note pad, so this is all new to me. I'm trying to create my first project but I'm running into problems. I've created a base ASP.net web application and used the default name WebApplication1. Without doing !!anything!! to the...more >>

folder permissions
Posted by eNathan at 10/9/2003 8:24:43 AM
We have a repository of reports(Crystal). It is many folders and subfolders.We have set permissions to these folders based on who needs access to them by implementing groups in Active Directory. Problem: I want to populate a tree view with only the folders the user has permissions to. I can ge...more >>

Configuration error ?
Posted by Promeneur at 10/8/2003 9:27:10 PM
I have a web APS application that works fine at home, with IIS. In IIS, the application is an application, not a file folder. When I copy the file on the Internet sever, my application does not work anymore. I get the message: *** Server Error in '/' Application. --------------------...more >>

Forms Auth and none aspx pages
Posted by Michael Tissington at 10/8/2003 8:15:38 PM
I have forms authentication working for any aspx page (I'm doing this on both a folder level and also individual files). The problem I have is if the file is an exe or html then forms auth seems to be ignored. How do I get Forms auth to work for other file type too ? Thanks -- - Mic...more >>

Hosting security
Posted by alain NO[at]SPAM camping.it at 10/8/2003 2:50:33 AM
Hello. This is probably a well knows issue but I still cannot find a solution. I have noticed that it is possible to read web.config files inside other directories on the same server simply opening them using a aspx script. This could allow my users to steal each other username and passwor...more >>


DevelopmentNow Blog