all groups > asp.net security > october 2004
Filter by week: 1 2 3 4 5
Cant write to a file
Posted by damianm NO[at]SPAM webaware.com.au at 10/31/2004 9:50:32 PM
Hi
The following code is what I use to open the file
Dim sw As StreamWriter =
File.AppendText("C:\Inetpub\wwwroot\IView\log\errWebLog.txt")
These are the following permissons I have set:
The ASPNET account set to anonymous login.
The ASPNET account has read/write permissions on the fold... more >>
Help me! How I could make user in active directory
Posted by Sara Rafiee via .NET 247 at 10/31/2004 3:55:00 AM
hello
can anyone help me making user in active directory , I wrote a code, but it could't work, could anyone correct it. thanks in advance.
Sub example()
'Put user code to initialize the page here
'Try
Dim AD As DirectoryEntry = _
New DirectoryEntry("LDAP://m... more >>
Another form of encrytion? "Not SSL"
Posted by Leon at 10/30/2004 11:42:07 AM
How can I encrypted data sent across my website from web forms without using
SSL?
Such as on Login the user enter "EmailAddress" & "Password" and Simply
Registration Form
in which the user creates a Password, FirstName, LastName, etc.
I see site like Careerbuilder and Monster allow user to re... more >>
impersonate problem
Posted by zino at 10/29/2004 2:10:05 PM
Win2000, ASP.Net 1.1
the web application on server (A) read/write to a folder on another server
(B) on same network .
I create 2 similar accounts : on web server (A) and server (B)
with the same username, password ....
NTFS Permissions is assigned .
in the web config file :
impersonation ... more >>
impersonation
Posted by Noël Thoelen at 10/29/2004 10:22:13 AM
I would like to use KERBEROS delegation to access an SQL Server database
from an ASP.NET application.
So, I have set up a website, disabled anonymous access and checked the
windows integrated security.
In the ASP.NET applicatie, the web config file contains
<authentication mode="Windows" ... more >>
creating a user profile for the aspnet user
Posted by Andy Fish at 10/29/2004 9:32:45 AM
Hi,
I have an asp.net web app that needs to invoke MS word. I have given the
ASPNET user the relevant privileges and eveything works fine. However, I
notice I now have "c:\my documents" and "c:\application data" owned by
ASPNET which I presume is because it doesn't have it's own user profil... more >>
Code Access Security -- Simple but working examples
Posted by geeksgk NO[at]SPAM yahoo.com at 10/28/2004 6:02:18 PM
Folks,
I'm desperately trying to understand code access security. MSDN and
VS.NET help files explains the concepts in details but the code
snippets does not help to put the whole picture together.
Can anyone point me to any article or web site where there is a step
by step walkthru to help ... more >>
.net Impersonate with integrated authentication client server problem
Posted by Ajnabi at 10/28/2004 8:08:15 AM
Hi,
I build a asp.net web application to update user accounts in Active
Directory (AD). This application works fine on my test server when I
acces the web application on the server it self and update an user
account (using an administrator account).
My settings:
-In all cases I tried with th... more >>
Don't see what you're looking for? Search DevelopmentNow.com.
Session Coliiding
Posted by ariel at 10/27/2004 11:20:39 AM
Hello there;
IT' there any posibility session can collide or mixed into another session(s), means two o more users logged with his own credentials and running differents scenarios ( mortgage application ) can see data from another logged user (?), we developed a web site ( .net/SQL ) and ... more >>
Quick ? on Forms Authentication
Posted by Daniel.Peck NO[at]SPAM gmail.com at 10/27/2004 8:06:29 AM
Hi,
I'm using asp.net form authentication. The problem i'm having is when
my cookie expires it redirects me to the login page, so I log in again
and it brings me to the page that I was on last before the cookie
expired.
Is there something I can do so that after I login it always redirect
... more >>
Access folder from the network
Posted by Raj at 10/27/2004 6:23:03 AM
I am keeping all the images out of the webserver. This is in some other
system in the network. Can anybody please give me workaround in asp.net, like
how to access folder from a remote machine in the same network. Pls give the
shortest way to do this. It fails to access folder from the remote ... more >>
Access remote folder files in the network
Posted by Rajesh at 10/27/2004 5:07:02 AM
In my ASP.NET application, all the images files are stored on a machine other
than my web-server. In a webform i am accessing the image files stored in
that folder in the remote machine. Folder path is configurable in the
web.config file. The webserver and the folder machine in the same networ... more >>
Authorization problem
Posted by Nikolay Petrov at 10/26/2004 4:54:41 PM
The following code doesn't produse the expected effect to only allow the
members of Administrators group to access the web method, it stops everyone.
=========
<WebMethod(), _
PrincipalPermission(SecurityAction.Demand, Role:="Administrators")> _
Public Function HelloWorld() As ... more >>
expiring passwords with impersonated identity
Posted by Anton Sokolovsky at 10/26/2004 12:07:44 PM
Hi all !
Imagine ASP.NET application impersonating specific identity with webconfig:
<identity impersonate="true" userName="accountname" password="password" />
When accountname user is specially created to run this application and noone
uses it for interactive logon, there is no standard way... more >>
Process.GetProcessesByName throws exception
Posted by howard39 NO[at]SPAM nospam.nospam at 10/25/2004 5:17:02 PM
We a Web application that has been running for months, but suddenly (i.e.
over the weekend) stopped working.
To narrow down the problem, I wrote the followng page_load handler in an
ASP.Net test application:
public void Page_Load(Object sender, EventArgs e)
{
Process currentProcess ... more >>
Client Side Certificates for Web Services?
Posted by localhost at 10/25/2004 1:22:30 PM
Part 1:
I have a simple web service. I would like to protect the web
application by only allowing callers that have a client-side
certificate installed. How can I do that programmatically? I have no
access to the IIS metabase, so I need to do it in web.config or in my
application .cs code.... more >>
Impersonation headache
Posted by James Pemberton at 10/25/2004 9:25:48 AM
I have been fighting with impersonation for quite sometime now and now
matter what I have tried it just won't work.
I am trying to get information on two items:
1) I'd like to retrieve a file listing from a directory on our file
server.
As with most cases I have read about, it works ... more >>
Help with forms auth
Posted by Chris at 10/25/2004 7:17:03 AM
Hi,
I am using forms Auth on my WEB APP. I am checking the credentials in sql
server. When a user request any page other than login.aspx they get the page.
Shouldn't they be forwarded first to the Login.aspx? This is a section of my
web.config file
-->
<authentication mode="Forms">
... more >>
User ASPNET
Posted by João Abreu at 10/25/2004 6:43:02 AM
I have a share in other computer and I want access to that sahre with my web
application. For that I do:
- Create a User ASPNET in my domain
- Use that user in machine.config file.
- Give permissions for that user to my share
Ok, This work with Windows 2000 Pro, so, I try to do this with Win... more >>
CryptoAPI cryptographic service provider (CSP) for this implementation could not be acquired during encryption
Posted by justwantananswer NO[at]SPAM rediffmail.com at 10/25/2004 3:11:47 AM
Hi,
We are trying to encrypt and decrypt some fields using RSA
algorithm.The class being used is RSACryptoServiceProvider.We have put
a key in its XML representation in Registry and evrytime whenever we
invoke our custom encryption class, it instantiates
RSACryptoServiceProvider class with its ... more >>
Forms Auth and FormsAuthentication.SignOut()Question
Posted by Patrick.O.Ige at 10/24/2004 10:55:04 PM
I'm using Form Auth.
I 'm using the FormsAuthentication.SignOut() to sign out
But when the user logins in and later logs out using
FormsAuthentication.SignOut()
When the user clicks the back button he is still authenticated on the PAGE
why!!
Is there anyway i can remove the cache or somethi... more >>
Role based Forms Authentication (using Active Directory)
Posted by Patrick.O.Ige at 10/24/2004 10:17:01 PM
Hi All,
Can anybody here kindly forward me a sample of a
Role based forms Authentication using Acitve Directory?
Thanks alot.
P... more >>
CreateDirectory working inconsistantly from ASP.net
Posted by David Davies at 10/24/2004 8:51:02 PM
Please HELP !!
I have a web page that is trying to create folders on a file server
eg. \\SERVERNAME\F4\Projects\[New Folder Name]
Users of the web site are authenticated with Windows Integrated Security.
(have tried on W2003/IIS6 and W2k/IIS5 with no difference in behavoir)
When a ... more >>
TO run an Application from Batch file
Posted by freetorn2002 NO[at]SPAM yahoo.ca at 10/24/2004 9:34:36 AM
Hi,
I want to run the batch file from the asp.net
web(intranet)application. The batch files works fine if it has some
copy or del command, eventhough i could not see the command window.
But if the batch file has some application for e.g., Notepad,it seems
to open the notepad as i could see it r... more >>
user accounts?
Posted by Sweet_Eliza at 10/24/2004 4:09:05 AM
How did a user account get on my computer of ASP.net with a password
protected accoubt and what do I do with it or how do I deal with it??... more >>
user account
Posted by Sweet_Eliza at 10/24/2004 4:07:01 AM
How did a user account get on my computer.(windows xp) and what or how so I
deal with it... more >>
Login failed for user 'MachineName\ASPNET
Posted by pshiue at 10/23/2004 4:07:01 PM
I am developing ASP.NET application in VS.NET.
It gave me an error message "Login failed for user 'MachineName\ASPNET".
I tried to share the database directory but it did not work.
I look into the database connection when setting the properties. It tested
OK.
However, when I run the app... more >>
Login failed for user 'MachineName\ASPNET
Posted by Paul at 10/23/2004 3:59:01 PM
I am developing ASP.NET application to connect SQL database. It gave me the
error message as "Login failed for user 'MachineName\ASPNET". I have tried
to share the database directory but it did not work. I also look into the
knowledge base Q316989 but I am not getting it. I am using VS.NET... more >>
Windows Authentication for ASP.NET
Posted by AD at 10/22/2004 4:34:03 PM
I have a ASP.NET application with <authentication mode="Windows" /> and
<identity impersonate="false" />. IIS is configured to use only "Integrated
Windows authentication".
I need to get the NetworkCredential object from the logged in WINDOWS user
to pass it to another application. I tried t... more >>
Server Error: Unable to find an entry point named EnumerateSecurityPackagesW in DLL security.dll.
Posted by Sam Fields at 10/22/2004 11:56:22 AM
I have found very little regarding the error "Unable to find an entry point
named EnumerateSecurityPackagesW in DLL security.dll. ". I have an ASP.NET
Web Service being accessed via SSL. I found a website indicating that if
any of your .dll names are security.dll, it could cause this issue. I
... more >>
Authentication question
Posted by Nikolay Petrov at 10/22/2004 9:36:26 AM
Can I authenticate users of my ASP .NET apps, using their windows
credentials, but using a SQL db.
Let me explain a little more.
I have an Windows XP station where i run my ASP .NET apps. I wish users to
authenticate them using their current windows usernames and passwords.
I have stored my u... more >>
Maintaining the current context .user between sites
Posted by anthonykallay NO[at]SPAM hotmail.com at 10/21/2004 11:58:52 PM
Hi there,
I am not sure if what i am after can be done but if anyone can shed
any light on the topic.. Basically i have a website that logs in the
user and puts there details in the context.user.. Then on the same
server and domain i have a virtual directory to another application
within the ... more >>
FORMS AUTH HELP!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Posted by Patrick.O.Ige at 10/21/2004 8:42:26 PM
I'm using forms Auth!
Why am i getting the error:-I HAVE DONE EVRYTHING NEEDED!
Error authenticating. Error obtaining group names. The specified domain
either does not exist or could not be contacted.
I used this code at:-
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnnetse... more >>
IFrame authentication
Posted by Arno Richard at 10/21/2004 5:05:08 AM
dear community,
I'm creating a .Net web portal application that will host other web
applications. This is a C# web app with .Net Framework 1.1 SP1, running on
Windows 2003 servers. These other applications may require authentication or
not, and I may have control (=source code) over these a... more >>
Using Sessions with Windows Authentication
Posted by naija naija at 10/20/2004 5:40:42 PM
I'm using Windows Auth!
And i'm validating against a Datastore which is Active Directory.But i
want to use session to capture the USER LOGON between trips to the web
server.
What i want to do is to capture a particular USER LOGGED so that they
can see different settings on my ASP.NET page
Any ... more >>
HttpWebRequest and Forms Authentication
Posted by Matthew Judd at 10/20/2004 4:19:03 PM
I am using Forms Authentication on my site, this process mostly works fine.
The problem I am having is that I have a page that uses an HttpWebRequest
object to get the html generated from one of the aspx pages within my site,
which it then emails to somebody. The problem I have with this is th... more >>
Re: Role based security - where are permissions/operations ?
Posted by Dominick Baier at 10/20/2004 12:07:37 PM
wow - interesting - could you tell me where i can get the qfe?
i use the following approach -
i model my ops/tasks/roles - and instead of adding a windows group to a role, i use application groups -
i include the custom sids in these application groups
i documented most of the code i... more >>
sha1 problem
Posted by Linda at 10/20/2004 10:29:22 AM
I'm I'm trying to compare 2 hash values using sha1 one written in vb.net
and the other in Python.
The value I get in my vb.net code does not match the python code, or any
other hash calulator I have used.
Here is the .net code:
-----------------------------------------------
Dim UE As New... more >>
Impersonation in ASP.NET
Posted by Bonj at 10/20/2004 9:29:07 AM
Hi
I would like to know how to use impersonation, in order to write to a file
on a network share.
The user will be logging on to this web app, and will then click a button
which will write to a file on the network share. Currently though, I am
getting permissions errors. I don't want to set ... more >>
Access file denied - Urgent!!!
Posted by David Li at 10/20/2004 8:29:35 AM
Hi all,
I was trying to read/write to a file under the ASP.NET web application's
root directory. After some configurations, e.g. Enabling 'Impersonate',
Assigning correct pemissions to ASPNET accounts for this file, the program
ran very well. However when I put it on another server, it appears... more >>
Selecting
Posted by Wilfried at 10/20/2004 3:51:04 AM
I want to read the Elements of the Subject of a client certificate sent to a
Web Service via HTTPS. This can be done by the following code segment...
[WebMethod]
public string echoCert()
{
string result = String.Empty;
HttpClientCertificate cert = this.Context.Request.ClientCertificate... more >>
Re: Role based security - where are permissions/operations ?
Posted by Dominick Baier at 10/20/2004 3:44:25 AM
Hi,
first of all - AzMan does also work with non-Windows account, because you can also use Custom SIDs [0] in the Authorization Store.
A compromise between a local XML File and AD could be a local/remote ADAM [1] (Active Directory for Applications) instance to store the AzStore.
Microsof... more >>
SQL User authentication
Posted by Nikolay Petrov at 10/19/2004 4:20:09 PM
Is it possible to authenticate user using a SQL database, containing users
and passwords?
What I want to achive is:
I have as SQL database containig data for my app. This database also
contains usernames, passwords and rights which are specific for my app.
Also I have a middle tier WebServi... more >>
"Access is denied" error when running schtasks.exe under ASPNET account in win2k3 server
Posted by Yehuda Vernik at 10/19/2004 12:02:23 PM
Hi all,
I am trying to run schtasks.exe from asp.net application wich uses forms
authentication under ASPNET account.
It gives me "Access is denied" error message.
OS: Windows 2003 server with IIS 6.0
Info:
I am able to run the same command line manually using Administrator's
account on W... more >>
Auth Problem
Posted by Nikolay Petrov at 10/19/2004 10:34:58 AM
I have the following web method:
<WebMethod()> _
Public Function Test_CurrentCredentials() As String()
Dim tmpArr(2) As String
tmpArr(0) = "User: " &
System.Threading.Thread.CurrentPrincipal.Identity.Name
tmpArr(1) =
System.Threading.Thread.CurrentPrincipal.Identity.Authentica... more >>
Role based security - where are permissions/operations ?
Posted by A Mackie at 10/19/2004 5:57:44 AM
I want to use role based security in ASP.NET, but can't see how assigning permissions/operations to a role is done. IsInRole can check a user is in a role - but how can I check a user has access to an operation that is assigned to a role ?
Operations will be fixed at design time. However assignin... more >>
Authentication problem
Posted by Nikolay Petrov at 10/18/2004 10:31:32 PM
I have the following web method:
<WebMethod()> _
Public Function Test_CurrentCredentials() As String()
Dim tmpArr(2) As String
tmpArr(0) = "User: " &
System.Threading.Thread.CurrentPrincipal.Identity.Name
tmpArr(1) =
System.Threading.Thread.CurrentPrincipal.Identity.Authenti... more >>
Could not find path error
Posted by Steve at 10/18/2004 5:56:49 PM
Hi all,
I am referring to this article in MSDN :
http://msdn.microsoft.com/library/en-us/secauthn/security/logonuser.asp
While creating folder on the remote machine, we are specifying the UNC path
as per the example. But we get this error "could not find a part of the
path".
we are prefixi... more >>
Forms Authentication with SQL Server2000
Posted by Andy G at 10/18/2004 3:23:13 PM
The msdn.microsfot.com article, "How To: Use Forms Authentication with SQL
Server2000" is constucted in C#. Is this How To paper written in VB
anywhere? I have to keep the application in VB and would appreciate an
anwser as if this exists or not in VB.
Thanks
... more >>
Some webservice connections
Posted by Nikolay Petrov at 10/18/2004 10:26:44 AM
1. Can I use SSL for my web services?
2. How can implement some kind of security to my web services? My idea is to
implement some kind of licensing or user/password authentication for an web
service.
3. Do I have to make my web service multi threaded or IIS takes care for
simultaneous reques... more >>
|