Groups | Blog | Home


Archived Months
July 2003
August 2003
September 2003
October 2003
November 2003
December 2003
January 2004
February 2004
March 2004
April 2004
May 2004
June 2004
July 2004
August 2004
September 2004
October 2004
November 2004
December 2004
January 2005
February 2005
March 2005
April 2005
May 2005
June 2005
July 2005
August 2005
September 2005
October 2005
November 2005
December 2005
January 2006
February 2006
March 2006
April 2006
May 2006
June 2006
July 2006
August 2006
September 2006
October 2006
November 2006
December 2006
January 2007
February 2007
March 2007
April 2007
May 2007
June 2007
July 2007
August 2007
September 2007
October 2007
November 2007
December 2007
January 2008
February 2008
March 2008
April 2008
May 2008
June 2008
all groups > asp.net security > january 2004 > threads for january 15 - 21, 2004

Filter by week: 1 2 3 4 5

Obtaining Application Pool Identity in Inpersonation Mode
Posted by Adam Roe at 1/21/2004 11:31:20 PM
I have an ASP.Net application running on IIS 6.0 that is configured to impersonate the identity of the user who is accessing the page. I am wanting to have code that runs as the identity of the application pool for which this website runs as. is there a way to do this in code? ...more >>


Problem with web.config access-restricted subdirectory
Posted by David.Pyper NO[at]SPAM MUHC.McGill.CA at 1/21/2004 1:00:56 PM
Hi, I have a problem with web.config unsuccessfully controlling access to a subdirectory. I'm using VS03 and IIS5.0 on NT2K. I have been able to reproduce this behaviour on two machines (the 2nd being a WXP machine) and both times I'm having the same result. I created a simplified example...more >>

Running an assembly in different User
Posted by NMN at 1/21/2004 12:16:08 PM
Hi All I have an asp.net Application. It calls an assembly which copies a file from one location say c:\temp to another directory say c:\temp1. I created an assembly to do this where i did not have any problems after giving the ASPNet User write access to that destination forlder c:\temp1. We f...more >>

SQL Injection
Posted by A.M at 1/21/2004 10:27:38 AM
Hi, I have to check all textboxes in my web application for SQL injection. Is there any ready product that detect SQL inhection patterns? A regular expression also would be helpfull. Any help would be apprecited, Ali ...more >>

LOGIN FAILED for USER xxx\ASPNET
Posted by Steve Caliendo at 1/21/2004 10:11:48 AM
Hi, I can generate a dataset just fine in design mode using a SQL server that's on my computer, but when I launch it, the ASPNET user can't access my database. I've made the ASPNET user on my computer be an administrator, but that didn't work. What do I need to change to allow this user to a...more >>

How to CHANGE the Credentials for a web service proxy when using CredentialCache ?
Posted by Liviu Olaru at 1/21/2004 9:45:58 AM
Hi I'm trying to invoke a Web Service which is using BASIC authentication. Code for invoking: CredentialCache cc = new CredentialCache(); //the network credential used to authenticate client NetworkCredential networkCred = new NetworkCredential("USERNAME", "PASSWORD"); ...more >>

Passport Requirements
Posted by Daniele at 1/21/2004 7:41:06 AM
Hi, I have to develop a website demo using .Net Passport service. I'm wondering about this requirements: -Shall I have to install SSL server? -Should the computer be outside the firewall?Even if the website is an "internal" application...? Thanks Daniele...more >>

connecting to sql server with windows authentication
Posted by Mark at 1/20/2004 3:13:34 PM
I'm confounded how difficult it is to setup a connection from an ASP.NET application to SQL Server on a different machine in the same windows domain using windows authentication. My research has found the following options: 1. Use delegation to leverage the current user's account. 2. Replace t...more >>



Authentication
Posted by ASP.Net User at 1/20/2004 1:21:06 PM
I am using forms authentication. My application has frames [some of them are 20 pixels height]. When session times out and user clicks in one of these tiny frames, login page is loaded in this tiny frame but not visible Is there a way to send the top most parent's url as ReturnUrl instead of the t...more >>

Redirect Session Timeout
Posted by Marcus Olsson at 1/20/2004 2:26:06 AM
Hi! When my ASP.NET app timeout I want it to redirect to a page that tells the user that they are timed out. I don't want them to just end up att the default Login page just like that. In web.config I can set loginUrl to a certain URL. If there is a timeout, that page is used. Q: Is that login...more >>

Need to handle multiple types of authentication, need help
Posted by Mike at 1/19/2004 8:45:24 PM
I've got an ASP.NET project that i need to support multiple types of login authentication. I've tried initially to create a login system where you are presented with an Account / Password page and then also a link that would allow them to say "Use my Windows NT account". The forms authenticatio...more >>

Forms Authentication to specific folders
Posted by Michael Tissington at 1/19/2004 2:24:12 PM
I have a web application that is using Forms Authentication (with users/passwords stored in a database) and for the most part it is working. I have a web page with links on it to files of different types (exe, zip, pdf) When the user clicks on one of these links I'd like them to have to log ...more >>

=?ISO-8859-1?Q?"Could_not_find_a_part_of_the_path=85_"_error_on_IIS_6.0?=
Posted by darrienhess NO[at]SPAM yahoo.com at 1/19/2004 4:59:24 AM
I have an ASP.NET web application running on a load-balanced Windows Server 2003 web farm running IIS 6.0, using Active Directory authentication. I'm trying to programmatically create a new directory on a different server in the same domain. Before we switched to 2003, I was able to simply cha...more >>

FIX: ASP.NET Does Not Work with the Default ASPNET Account on a Domain Controller
Posted by billkellaway NO[at]SPAM hotmail.com at 1/19/2004 1:01:07 AM
Hello there people As taken from the KB ... After you install Microsoft Visual Studio .NET or the Microsoft .NET Framework on a domain controller or on a backup domain controller, if you try to run an ASP.NET application, the browser displays the following error message: Server Applicatio...more >>

ASP.Net Forms authentication with basic authentication popup
Posted by brett.porter NO[at]SPAM strikedesigns.co.uk at 1/19/2004 1:00:26 AM
Relatively new to ASP.Net but have a strange problem. My site uses forms authentication for a large administration section however after the user logs in each page they subsequently click on brings up a basic authentication dialogue box. Clicking cancel will still allow the user to view the pa...more >>

Access is Denied error using Process.GetProcesses()
Posted by esemmelman NO[at]SPAM afgweb.com at 1/18/2004 10:41:12 PM
I am sure this has been covered as I am just now "sinking" into asp.net. I am getting an "Access Denied" error when the following code tries to execute: Dim myProcesses() As Process Dim myProcess As Process myProcesses = Process.GetProcesses() 'This line FAILS! I am using a local machine...more >>

DB Connection String
Posted by A.M at 1/18/2004 8:06:31 PM
Hi, I need to store the database connection string inside web.config file. What would be the best way to encrypt and decrypt it? Thanks, Ali ...more >>

Access to registery
Posted by A.M at 1/16/2004 3:45:17 PM
Hi, When i call : System.Diagnostics.EventLog.WriteEntry(string); ASP.NET says : System.Security.SecurityException: Requested registry access is not allowed. What kind of permission should i give to ASPNET user? Thanks, Ali ...more >>

Need Direction on WHAT to Implement...
Posted by Oblinger NO[at]SPAM comporium.net at 1/15/2004 6:35:55 PM
Please understand that I am not asking HOW to do something - but, rather, I just need some advise on what "technology" or method I should employ... The problem is this: I have a client for whom I am developing a web site in ASP.NET. The client is a bank - therefore, the entire site will be...more >>

Could aspnet_wp.exe recycle be due to hackers?
Posted by ringo at 1/15/2004 5:26:38 PM
Hi all, I have a couple of Win2000 servers running IIS and an asp.NET web application, and have seen sporadic errors in the event logs: aspnet_wp.exe (PID:PIDNumber) was recycled because memory consumption exceeded the SizeLimit MB (Percentage percent of available RAM) The app I'm running ...more >>

Complicated Fallback ASP.NET Security
Posted by swheatley22 NO[at]SPAM yahoo.com at 1/15/2004 2:15:42 PM
I have been working on an ASP.NET app at work for quite some time now. We've been using Windows authentication up until now, but I've come across a problem. Ideally, users on our local intranet would be authenticated via Windows authentication. Users outside of our intranet would still authen...more >>

Storing encrypted password in xml file??
Posted by smita at 1/15/2004 12:22:57 PM
Hi, I have an XML file that stores a Profile of a user, including the username, password, server name, etc. I want to be able to leave the XML file as plain text, but have the password attribute encrypted. I have used the RC2CryptoServiceProvider class, but when i convert the encrypted ...more >>

caspol & local intranet security
Posted by adam at 1/15/2004 10:43:27 AM
Hi We have built an aspnet application which uses a windows user control embedded in an object tag. The app is to be deployed on a large client intranet. The object requires full trust security to work properly. What is the easiest way to configure the client's corporate network. They...more >>

Best approach for database/windows authentication integration?
Posted by stephenmcnabb NO[at]SPAM yahoo.co.uk at 1/15/2004 4:07:26 AM
We have an ASP.NET application that consists of about 10 forms and we want to be able to control which user has access to which pages. So User A should be able to access pages 3, 4 and 10, and User B should be able to access pages 1, 2 and 9 etc. We also want to be able to mantain these rules us...more >>

signing out all users
Posted by kaanoezturk NO[at]SPAM yahoo.com at 1/15/2004 4:04:52 AM
hi, i have written an aplication that changes some global variables of my another application. it is some kind of a web.config editor. i want all users that are signed in to be signed out when i change any variable with the utility program. or do you have another idea? KaaN kaan.oeztu...more >>


DevelopmentNow Blog