Psst! Did you know DevelopmentNow is a mobile web site design agency?

Contact us for help mobilizing your site, or to sign up for our beta Mobile Web SDK!


Archived Months
July 2003
August 2003
September 2003
October 2003
November 2003
December 2003
January 2004
February 2004
March 2004
April 2004
May 2004
June 2004
July 2004
August 2004
September 2004
October 2004
November 2004
December 2004
January 2005
February 2005
March 2005
April 2005
May 2005
June 2005
July 2005
August 2005
September 2005
October 2005
November 2005
December 2005
January 2006
February 2006
March 2006
April 2006
May 2006
June 2006
July 2006
August 2006
September 2006
October 2006
November 2006
December 2006
January 2007
February 2007
March 2007
April 2007
May 2007
June 2007
July 2007
August 2007
September 2007
October 2007
November 2007
December 2007
January 2008
February 2008
March 2008
April 2008
May 2008
June 2008
all groups > asp.net security > october 2004

Filter by week: 1 2 3 4 5

Cant write to a file
Posted by damianm NO[at]SPAM webaware.com.au at 10/31/2004 9:50:32 PM
Hi The following code is what I use to open the file Dim sw As StreamWriter = File.AppendText("C:\Inetpub\wwwroot\IView\log\errWebLog.txt") These are the following permissons I have set: The ASPNET account set to anonymous login. The ASPNET account has read/write permissions on the fold...more >>


Help me! How I could make user in active directory
Posted by Sara Rafiee via .NET 247 at 10/31/2004 3:55:00 AM
hello can anyone help me making user in active directory , I wrote a code, but it could't work, could anyone correct it. thanks in advance. Sub example() 'Put user code to initialize the page here 'Try Dim AD As DirectoryEntry = _ New DirectoryEntry("LDAP://m...more >>

Another form of encrytion? "Not SSL"
Posted by Leon at 10/30/2004 11:42:07 AM
How can I encrypted data sent across my website from web forms without using SSL? Such as on Login the user enter "EmailAddress" & "Password" and Simply Registration Form in which the user creates a Password, FirstName, LastName, etc. I see site like Careerbuilder and Monster allow user to re...more >>

impersonate problem
Posted by zino at 10/29/2004 2:10:05 PM
Win2000, ASP.Net 1.1 the web application on server (A) read/write to a folder on another server (B) on same network . I create 2 similar accounts : on web server (A) and server (B) with the same username, password .... NTFS Permissions is assigned . in the web config file : impersonation ...more >>

impersonation
Posted by Noël Thoelen at 10/29/2004 10:22:13 AM
I would like to use KERBEROS delegation to access an SQL Server database from an ASP.NET application. So, I have set up a website, disabled anonymous access and checked the windows integrated security. In the ASP.NET applicatie, the web config file contains <authentication mode="Windows" ...more >>

creating a user profile for the aspnet user
Posted by Andy Fish at 10/29/2004 9:32:45 AM
Hi, I have an asp.net web app that needs to invoke MS word. I have given the ASPNET user the relevant privileges and eveything works fine. However, I notice I now have "c:\my documents" and "c:\application data" owned by ASPNET which I presume is because it doesn't have it's own user profil...more >>

Code Access Security -- Simple but working examples
Posted by geeksgk NO[at]SPAM yahoo.com at 10/28/2004 6:02:18 PM
Folks, I'm desperately trying to understand code access security. MSDN and VS.NET help files explains the concepts in details but the code snippets does not help to put the whole picture together. Can anyone point me to any article or web site where there is a step by step walkthru to help ...more >>

.net Impersonate with integrated authentication client server problem
Posted by Ajnabi at 10/28/2004 8:08:15 AM
Hi, I build a asp.net web application to update user accounts in Active Directory (AD). This application works fine on my test server when I acces the web application on the server it self and update an user account (using an administrator account). My settings: -In all cases I tried with th...more >>



Session Coliiding
Posted by ariel at 10/27/2004 11:20:39 AM
Hello there; IT' there any posibility session can collide or mixed into another session(s), means two o more users logged with his own credentials and running differents scenarios ( mortgage application ) can see data from another logged user (?), we developed a web site ( .net/SQL ) and ...more >>

Quick ? on Forms Authentication
Posted by Daniel.Peck NO[at]SPAM gmail.com at 10/27/2004 8:06:29 AM
Hi, I'm using asp.net form authentication. The problem i'm having is when my cookie expires it redirects me to the login page, so I log in again and it brings me to the page that I was on last before the cookie expired. Is there something I can do so that after I login it always redirect ...more >>

Access folder from the network
Posted by Raj at 10/27/2004 6:23:03 AM
I am keeping all the images out of the webserver. This is in some other system in the network. Can anybody please give me workaround in asp.net, like how to access folder from a remote machine in the same network. Pls give the shortest way to do this. It fails to access folder from the remote ...more >>

Access remote folder files in the network
Posted by Rajesh at 10/27/2004 5:07:02 AM
In my ASP.NET application, all the images files are stored on a machine other than my web-server. In a webform i am accessing the image files stored in that folder in the remote machine. Folder path is configurable in the web.config file. The webserver and the folder machine in the same networ...more >>

Authorization problem
Posted by Nikolay Petrov at 10/26/2004 4:54:41 PM
The following code doesn't produse the expected effect to only allow the members of Administrators group to access the web method, it stops everyone. ========= <WebMethod(), _ PrincipalPermission(SecurityAction.Demand, Role:="Administrators")> _ Public Function HelloWorld() As ...more >>

expiring passwords with impersonated identity
Posted by Anton Sokolovsky at 10/26/2004 12:07:44 PM
Hi all ! Imagine ASP.NET application impersonating specific identity with webconfig: <identity impersonate="true" userName="accountname" password="password" /> When accountname user is specially created to run this application and noone uses it for interactive logon, there is no standard way...more >>

Process.GetProcessesByName throws exception
Posted by howard39 NO[at]SPAM nospam.nospam at 10/25/2004 5:17:02 PM
We a Web application that has been running for months, but suddenly (i.e. over the weekend) stopped working. To narrow down the problem, I wrote the followng page_load handler in an ASP.Net test application: public void Page_Load(Object sender, EventArgs e) { Process currentProcess ...more >>

Client Side Certificates for Web Services?
Posted by localhost at 10/25/2004 1:22:30 PM
Part 1: I have a simple web service. I would like to protect the web application by only allowing callers that have a client-side certificate installed. How can I do that programmatically? I have no access to the IIS metabase, so I need to do it in web.config or in my application .cs code....more >>

Impersonation headache
Posted by James Pemberton at 10/25/2004 9:25:48 AM
I have been fighting with impersonation for quite sometime now and now matter what I have tried it just won't work. I am trying to get information on two items: 1) I'd like to retrieve a file listing from a directory on our file server. As with most cases I have read about, it works ...more >>

Help with forms auth
Posted by Chris at 10/25/2004 7:17:03 AM
Hi, I am using forms Auth on my WEB APP. I am checking the credentials in sql server. When a user request any page other than login.aspx they get the page. Shouldn't they be forwarded first to the Login.aspx? This is a section of my web.config file --> <authentication mode="Forms"> ...more >>

User ASPNET
Posted by João Abreu at 10/25/2004 6:43:02 AM
I have a share in other computer and I want access to that sahre with my web application. For that I do: - Create a User ASPNET in my domain - Use that user in machine.config file. - Give permissions for that user to my share Ok, This work with Windows 2000 Pro, so, I try to do this with Win...more >>

CryptoAPI cryptographic service provider (CSP) for this implementation could not be acquired during encryption
Posted by justwantananswer NO[at]SPAM rediffmail.com at 10/25/2004 3:11:47 AM
Hi, We are trying to encrypt and decrypt some fields using RSA algorithm.The class being used is RSACryptoServiceProvider.We have put a key in its XML representation in Registry and evrytime whenever we invoke our custom encryption class, it instantiates RSACryptoServiceProvider class with its ...more >>

Forms Auth and FormsAuthentication.SignOut()Question
Posted by Patrick.O.Ige at 10/24/2004 10:55:04 PM
I'm using Form Auth. I 'm using the FormsAuthentication.SignOut() to sign out But when the user logins in and later logs out using FormsAuthentication.SignOut() When the user clicks the back button he is still authenticated on the PAGE why!! Is there anyway i can remove the cache or somethi...more >>

Role based Forms Authentication (using Active Directory)
Posted by Patrick.O.Ige at 10/24/2004 10:17:01 PM
Hi All, Can anybody here kindly forward me a sample of a Role based forms Authentication using Acitve Directory? Thanks alot. P...more >>

CreateDirectory working inconsistantly from ASP.net
Posted by David Davies at 10/24/2004 8:51:02 PM
Please HELP !! I have a web page that is trying to create folders on a file server eg. \\SERVERNAME\F4\Projects\[New Folder Name] Users of the web site are authenticated with Windows Integrated Security. (have tried on W2003/IIS6 and W2k/IIS5 with no difference in behavoir) When a ...more >>

TO run an Application from Batch file
Posted by freetorn2002 NO[at]SPAM yahoo.ca at 10/24/2004 9:34:36 AM
Hi, I want to run the batch file from the asp.net web(intranet)application. The batch files works fine if it has some copy or del command, eventhough i could not see the command window. But if the batch file has some application for e.g., Notepad,it seems to open the notepad as i could see it r...more >>

user accounts?
Posted by Sweet_Eliza at 10/24/2004 4:09:05 AM
How did a user account get on my computer of ASP.net with a password protected accoubt and what do I do with it or how do I deal with it??...more >>

user account
Posted by Sweet_Eliza at 10/24/2004 4:07:01 AM
How did a user account get on my computer.(windows xp) and what or how so I deal with it...more >>

Login failed for user 'MachineName\ASPNET
Posted by pshiue at 10/23/2004 4:07:01 PM
I am developing ASP.NET application in VS.NET. It gave me an error message "Login failed for user 'MachineName\ASPNET". I tried to share the database directory but it did not work. I look into the database connection when setting the properties. It tested OK. However, when I run the app...more >>

Login failed for user 'MachineName\ASPNET
Posted by Paul at 10/23/2004 3:59:01 PM
I am developing ASP.NET application to connect SQL database. It gave me the error message as "Login failed for user 'MachineName\ASPNET". I have tried to share the database directory but it did not work. I also look into the knowledge base Q316989 but I am not getting it. I am using VS.NET...more >>

Windows Authentication for ASP.NET
Posted by AD at 10/22/2004 4:34:03 PM
I have a ASP.NET application with <authentication mode="Windows" /> and <identity impersonate="false" />. IIS is configured to use only "Integrated Windows authentication". I need to get the NetworkCredential object from the logged in WINDOWS user to pass it to another application. I tried t...more >>

Server Error: Unable to find an entry point named EnumerateSecurityPackagesW in DLL security.dll.
Posted by Sam Fields at 10/22/2004 11:56:22 AM
I have found very little regarding the error "Unable to find an entry point named EnumerateSecurityPackagesW in DLL security.dll. ". I have an ASP.NET Web Service being accessed via SSL. I found a website indicating that if any of your .dll names are security.dll, it could cause this issue. I ...more >>

Authentication question
Posted by Nikolay Petrov at 10/22/2004 9:36:26 AM
Can I authenticate users of my ASP .NET apps, using their windows credentials, but using a SQL db. Let me explain a little more. I have an Windows XP station where i run my ASP .NET apps. I wish users to authenticate them using their current windows usernames and passwords. I have stored my u...more >>

Maintaining the current context .user between sites
Posted by anthonykallay NO[at]SPAM hotmail.com at 10/21/2004 11:58:52 PM
Hi there, I am not sure if what i am after can be done but if anyone can shed any light on the topic.. Basically i have a website that logs in the user and puts there details in the context.user.. Then on the same server and domain i have a virtual directory to another application within the ...more >>

FORMS AUTH HELP!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Posted by Patrick.O.Ige at 10/21/2004 8:42:26 PM
I'm using forms Auth! Why am i getting the error:-I HAVE DONE EVRYTHING NEEDED! Error authenticating. Error obtaining group names. The specified domain either does not exist or could not be contacted. I used this code at:- http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnnetse...more >>

IFrame authentication
Posted by Arno Richard at 10/21/2004 5:05:08 AM
dear community, I'm creating a .Net web portal application that will host other web applications. This is a C# web app with .Net Framework 1.1 SP1, running on Windows 2003 servers. These other applications may require authentication or not, and I may have control (=source code) over these a...more >>

Using Sessions with Windows Authentication
Posted by naija naija at 10/20/2004 5:40:42 PM
I'm using Windows Auth! And i'm validating against a Datastore which is Active Directory.But i want to use session to capture the USER LOGON between trips to the web server. What i want to do is to capture a particular USER LOGGED so that they can see different settings on my ASP.NET page Any ...more >>

HttpWebRequest and Forms Authentication
Posted by Matthew Judd at 10/20/2004 4:19:03 PM
I am using Forms Authentication on my site, this process mostly works fine. The problem I am having is that I have a page that uses an HttpWebRequest object to get the html generated from one of the aspx pages within my site, which it then emails to somebody. The problem I have with this is th...more >>

Re: Role based security - where are permissions/operations ?
Posted by Dominick Baier at 10/20/2004 12:07:37 PM
wow - interesting - could you tell me where i can get the qfe? i use the following approach - i model my ops/tasks/roles - and instead of adding a windows group to a role, i use application groups - i include the custom sids in these application groups i documented most of the code i...more >>

sha1 problem
Posted by Linda at 10/20/2004 10:29:22 AM
I'm I'm trying to compare 2 hash values using sha1 one written in vb.net and the other in Python. The value I get in my vb.net code does not match the python code, or any other hash calulator I have used. Here is the .net code: ----------------------------------------------- Dim UE As New...more >>

Impersonation in ASP.NET
Posted by Bonj at 10/20/2004 9:29:07 AM
Hi I would like to know how to use impersonation, in order to write to a file on a network share. The user will be logging on to this web app, and will then click a button which will write to a file on the network share. Currently though, I am getting permissions errors. I don't want to set ...more >>

Access file denied - Urgent!!!
Posted by David Li at 10/20/2004 8:29:35 AM
Hi all, I was trying to read/write to a file under the ASP.NET web application's root directory. After some configurations, e.g. Enabling 'Impersonate', Assigning correct pemissions to ASPNET accounts for this file, the program ran very well. However when I put it on another server, it appears...more >>

Selecting
Posted by Wilfried at 10/20/2004 3:51:04 AM
I want to read the Elements of the Subject of a client certificate sent to a Web Service via HTTPS. This can be done by the following code segment... [WebMethod] public string echoCert() { string result = String.Empty; HttpClientCertificate cert = this.Context.Request.ClientCertificate...more >>

Re: Role based security - where are permissions/operations ?
Posted by Dominick Baier at 10/20/2004 3:44:25 AM
Hi, first of all - AzMan does also work with non-Windows account, because you can also use Custom SIDs [0] in the Authorization Store. A compromise between a local XML File and AD could be a local/remote ADAM [1] (Active Directory for Applications) instance to store the AzStore. Microsof...more >>

SQL User authentication
Posted by Nikolay Petrov at 10/19/2004 4:20:09 PM
Is it possible to authenticate user using a SQL database, containing users and passwords? What I want to achive is: I have as SQL database containig data for my app. This database also contains usernames, passwords and rights which are specific for my app. Also I have a middle tier WebServi...more >>

"Access is denied" error when running schtasks.exe under ASPNET account in win2k3 server
Posted by Yehuda Vernik at 10/19/2004 12:02:23 PM
Hi all, I am trying to run schtasks.exe from asp.net application wich uses forms authentication under ASPNET account. It gives me "Access is denied" error message. OS: Windows 2003 server with IIS 6.0 Info: I am able to run the same command line manually using Administrator's account on W...more >>

Auth Problem
Posted by Nikolay Petrov at 10/19/2004 10:34:58 AM
I have the following web method: <WebMethod()> _ Public Function Test_CurrentCredentials() As String() Dim tmpArr(2) As String tmpArr(0) = "User: " & System.Threading.Thread.CurrentPrincipal.Identity.Name tmpArr(1) = System.Threading.Thread.CurrentPrincipal.Identity.Authentica...more >>

Role based security - where are permissions/operations ?
Posted by A Mackie at 10/19/2004 5:57:44 AM
I want to use role based security in ASP.NET, but can't see how assigning permissions/operations to a role is done. IsInRole can check a user is in a role - but how can I check a user has access to an operation that is assigned to a role ? Operations will be fixed at design time. However assignin...more >>

Authentication problem
Posted by Nikolay Petrov at 10/18/2004 10:31:32 PM
I have the following web method: <WebMethod()> _ Public Function Test_CurrentCredentials() As String() Dim tmpArr(2) As String tmpArr(0) = "User: " & System.Threading.Thread.CurrentPrincipal.Identity.Name tmpArr(1) = System.Threading.Thread.CurrentPrincipal.Identity.Authenti...more >>

Could not find path error
Posted by Steve at 10/18/2004 5:56:49 PM
Hi all, I am referring to this article in MSDN : http://msdn.microsoft.com/library/en-us/secauthn/security/logonuser.asp While creating folder on the remote machine, we are specifying the UNC path as per the example. But we get this error "could not find a part of the path". we are prefixi...more >>

Forms Authentication with SQL Server2000
Posted by Andy G at 10/18/2004 3:23:13 PM
The msdn.microsfot.com article, "How To: Use Forms Authentication with SQL Server2000" is constucted in C#. Is this How To paper written in VB anywhere? I have to keep the application in VB and would appreciate an anwser as if this exists or not in VB. Thanks ...more >>

Some webservice connections
Posted by Nikolay Petrov at 10/18/2004 10:26:44 AM
1. Can I use SSL for my web services? 2. How can implement some kind of security to my web services? My idea is to implement some kind of licensing or user/password authentication for an web service. 3. Do I have to make my web service multi threaded or IIS takes care for simultaneous reques...more >>


DevelopmentNow Blog