all groups > asp.net security > october 2004 > threads for october 1 - 7, 2004
Filter by week: 1 2 3 4 5
Active Directory Search fails ("The directory service is unavailab
Posted by ejcosta at 10/7/2004 12:57:02 PM
Hi all,
I'm having one of those nerve wrecking errors, when trying to perform a
simple search in an Active Directory. The objective of the code is to, given
a user name, search the AD for couple of specified properties, including the
groups the user belongs to.
The odd thing is that, if ... more >>
impersonation fails on 2K server
Posted by Seth Darr at 10/7/2004 10:21:54 AM
I've got an ASP.NET web app that generates dynamic excel spreadsheets
via COM. It
does this work in a seperate subdirectory called "reports" and uses
impersonation of the ReportWriter account in its own Web.config file in
that directory.
ReportWriter is an account on the machine in the Adm... more >>
Windows XP Pro Service Pack 2 X Forms Authentication
Posted by Fabricio de Reuter Sperandio at 10/6/2004 3:39:15 PM
Hey guys,
I have Windows XP Professional running on my development machine. Recently I
updated to Service Pack 2 and since then the Forms Authentication is not
working anymore. The problem seems to be with the cookies. But I am not
sure. I changed the browser configuration to accept all coo... more >>
Important Information on ASP.NET Vulnerability
Posted by Ken Cox [Microsoft MVP] at 10/6/2004 8:47:14 AM
"Microsoft has posted guidance that protects against a reported
vulnerability in all versions of ASP.NET that could allow a Web site visitor
to view secured content by using specially crafted requests to a Web server.
"
Here's a suggested fix:
Global.asax code sample (Visual Basic .NET)
... more >>
redirect not working
Posted by Matt Owens at 10/6/2004 7:09:14 AM
I have a login page which does not redirect the user once
the code has been executed, see below. Whats strange is
it works perfectly on my localhost when debugging,
however it fails to redirect when depolyed to a remote
server. Am I missing any IIS settings or anything? The
login page just... more >>
Basic authentication without browser login window
Posted by Diego Embon (personal mail) at 10/5/2004 11:42:42 PM
Hello,
I have a problem with basic windows authentication in IIS6. As a developer
I'm requested to implement windows authentication on my web application
(asp.net), but to avoid the browser login window. I have all the users in
Active Directory and this is not an intranet system. I've tried a ... more >>
saving XmlDocument using Windows Authentication
Posted by maxmann at 10/5/2004 4:11:37 PM
hello.
We have a web application that has identity impersonation
set to true in the web.config file.
We have a share on a server that we want the application
to write a file to. We have permissions on the share set
for "Everyone" to have full control.
When the XmlDocument.Save(\\myserver\my... more >>
Re: ASP.NET hosting & MS Access
Posted by Dominick Baier at 10/5/2004 9:14:44 AM
Hi,
you are right - they demand full trust - so you will have problems with this scenario -
the only way to let a partial trust web app access OLEDB sources is through an intermediate full trust code in the GAC -
the only effective way to isolate full trust apps is to -
- give each w... more >>
Don't see what you're looking for? Search DevelopmentNow.com.
Forms Authentication
Posted by Norm at 10/5/2004 6:59:07 AM
Is it possible to authenticate only a certain page or set of pages within an
ASP.NET application that are all in the same folder? In other words, I have a
web directory that contains multiple ASPX pages, but I only want to
authenticate on one of the pages.
Is it possible to set up the wbe.... more >>
Active Directory Role-Based Authentication Fails for Users - Local
Posted by PPL-KMS at 10/4/2004 11:53:04 AM
Developed a web-based application that queries active directory for roles to
associate the appropriate functionality to the user. After a recent upgrade
of OS and .NET framework, the ".IsInRole" method returns "false" even though
AD has the role associated to the user (plus, the user works fi... more >>
FormsAuthentication + Protection + Recycling
Posted by StanD at 10/2/2004 12:59:02 PM
When a client enters the site I check for a persistent cookie of short
duration, and if present decrypt it to obtain identification data, that is
restored to the session state if necessary. the Protection parameter in the
web config file is set to "All". The host server is running W2003 os, ... more >>
Serer error: System.UnauthorizedAccessException
Posted by Sergio Florez M. at 10/2/2004 9:48:30 AM
I have a web app that works fine in my XP pro developer PC. I moved it to
the test server(windows server 2003 standard) with Copy project and when I
try to run it I get this System.UnauthorizedAccessException error. So how
can I fix it?
Server Error in '/2004' Application.
-----------------... more >>
Why is "oN%3d" so dangerous?
Posted by Mike Kozlowski at 10/1/2004 1:52:03 PM
In an ASP.NET 1.1 application, I'm encrypting URL parameters. This
has mostly been working great, but yesterday, one particular URL got
caught by the XSS checker, giving me the "A potentially dangerous
Request.QueryString value was detected from the client". Several
questions arise from this:
... more >>
ASP.NET hosting & MS Access
Posted by FARID at 10/1/2004 1:31:15 PM
We are trying to offer free ASP & ASP.NET hosting. I read alot of articles
and documentation in order to setup and offer ASP.NET and MS Access. Based
of what I read, MS Access requires FullTrust in order to work. Providing
fullTrust will be very risky in the ISP environment. In there anyway to lo... more >>
Operation is not valid due to the current state of the object
Posted by --dweezil at 10/1/2004 1:03:02 PM
I'm using the Oracle .NET data provider in my ASP.NET application to connect
to Oracle. I am recieveing the error:
System.InvalidOperationException: Operation is not valid due to the current
state of the object.
I'm getting this error when I try to access the OracleDataReader object
vari... more >> |
