all groups > asp.net security > january 2004 > threads for january 15 - 21, 2004
Filter by week: 1 2 3 4 5
Obtaining Application Pool Identity in Inpersonation Mode
Posted by Adam Roe at 1/21/2004 11:31:20 PM
I have an ASP.Net application running on IIS 6.0 that is configured to
impersonate the identity of the user who is accessing the page. I am
wanting to have code that runs as the identity of the application pool for
which this website runs as. is there a way to do this in code?
... more >>
Problem with web.config access-restricted subdirectory
Posted by David.Pyper NO[at]SPAM MUHC.McGill.CA at 1/21/2004 1:00:56 PM
Hi,
I have a problem with web.config unsuccessfully controlling access to
a subdirectory. I'm using VS03 and IIS5.0 on NT2K. I have been able
to reproduce this behaviour on two machines (the 2nd being a WXP
machine) and both times I'm having the same result.
I created a simplified example... more >>
Running an assembly in different User
Posted by NMN at 1/21/2004 12:16:08 PM
Hi All
I have an asp.net Application. It calls an assembly which copies a file from one location say c:\temp to another directory say c:\temp1. I created an assembly to do this where i did not have any problems after giving the ASPNet User write access to that destination forlder c:\temp1. We f... more >>
SQL Injection
Posted by A.M at 1/21/2004 10:27:38 AM
Hi,
I have to check all textboxes in my web application for SQL injection.
Is there any ready product that detect SQL inhection patterns?
A regular expression also would be helpfull.
Any help would be apprecited,
Ali
... more >>
LOGIN FAILED for USER xxx\ASPNET
Posted by Steve Caliendo at 1/21/2004 10:11:48 AM
Hi,
I can generate a dataset just fine in design mode using a SQL server that's
on my computer, but when I launch it, the ASPNET user can't access my
database. I've made the ASPNET user on my computer be an administrator, but
that didn't work. What do I need to change to allow this user to a... more >>
How to CHANGE the Credentials for a web service proxy when using CredentialCache ?
Posted by Liviu Olaru at 1/21/2004 9:45:58 AM
Hi
I'm trying to invoke a Web Service which is using BASIC authentication.
Code for invoking:
CredentialCache cc = new CredentialCache();
//the network credential used to authenticate client
NetworkCredential networkCred = new NetworkCredential("USERNAME",
"PASSWORD");
... more >>
Passport Requirements
Posted by Daniele at 1/21/2004 7:41:06 AM
Hi,
I have to develop a website demo using .Net Passport service.
I'm wondering about this requirements:
-Shall I have to install SSL server?
-Should the computer be outside the firewall?Even if the website is an "internal" application...?
Thanks
Daniele... more >>
connecting to sql server with windows authentication
Posted by Mark at 1/20/2004 3:13:34 PM
I'm confounded how difficult it is to setup a connection from an ASP.NET
application to SQL Server on a different machine in the same windows domain
using windows authentication. My research has found the following options:
1. Use delegation to leverage the current user's account.
2. Replace t... more >>
Don't see what you're looking for? Search DevelopmentNow.com.
Authentication
Posted by ASP.Net User at 1/20/2004 1:21:06 PM
I am using forms authentication. My application has frames [some of them are 20 pixels height]. When session times out and user clicks in one of these tiny frames, login page is loaded in this tiny frame but not visible
Is there a way to send the top most parent's url as ReturnUrl instead of the t... more >>
Redirect Session Timeout
Posted by Marcus Olsson at 1/20/2004 2:26:06 AM
Hi!
When my ASP.NET app timeout I want it to redirect to a page that tells the user that they are timed out. I don't want them to just end up att the default Login page just like that.
In web.config I can set loginUrl to a certain URL. If there is a timeout, that page is used. Q: Is that login... more >>
Need to handle multiple types of authentication, need help
Posted by Mike at 1/19/2004 8:45:24 PM
I've got an ASP.NET project that i need to support multiple types of login
authentication. I've tried initially to create a login system where you are
presented with an Account / Password page and then also a link that would
allow them to say "Use my Windows NT account". The forms authenticatio... more >>
Forms Authentication to specific folders
Posted by Michael Tissington at 1/19/2004 2:24:12 PM
I have a web application that is using Forms Authentication (with
users/passwords stored in a database) and for the most part it is working.
I have a web page with links on it to files of different types (exe, zip,
pdf)
When the user clicks on one of these links I'd like them to have to log ... more >>
=?ISO-8859-1?Q?"Could_not_find_a_part_of_the_path=85_"_error_on_IIS_6.0?=
Posted by darrienhess NO[at]SPAM yahoo.com at 1/19/2004 4:59:24 AM
I have an ASP.NET web application running on a load-balanced Windows
Server 2003 web farm running IIS 6.0, using Active Directory
authentication. I'm trying to programmatically create a new directory
on a different server in the same domain. Before we switched to 2003,
I was able to simply cha... more >>
FIX: ASP.NET Does Not Work with the Default ASPNET Account on a Domain Controller
Posted by billkellaway NO[at]SPAM hotmail.com at 1/19/2004 1:01:07 AM
Hello there people
As taken from the KB ...
After you install Microsoft Visual Studio .NET or the Microsoft .NET
Framework on a domain controller or on a backup domain controller, if
you try to run an ASP.NET application, the browser displays the
following error message: Server Applicatio... more >>
ASP.Net Forms authentication with basic authentication popup
Posted by brett.porter NO[at]SPAM strikedesigns.co.uk at 1/19/2004 1:00:26 AM
Relatively new to ASP.Net but have a strange problem.
My site uses forms authentication for a large administration section
however after the user logs in each page they subsequently click on
brings up a basic authentication dialogue box. Clicking cancel will
still allow the user to view the pa... more >>
Access is Denied error using Process.GetProcesses()
Posted by esemmelman NO[at]SPAM afgweb.com at 1/18/2004 10:41:12 PM
I am sure this has been covered as I am just now "sinking" into asp.net.
I am getting an "Access Denied" error when the following code tries to execute:
Dim myProcesses() As Process
Dim myProcess As Process
myProcesses = Process.GetProcesses() 'This line FAILS!
I am using a local machine... more >>
DB Connection String
Posted by A.M at 1/18/2004 8:06:31 PM
Hi,
I need to store the database connection string inside web.config file. What
would be the best way to encrypt and decrypt it?
Thanks,
Ali
... more >>
Access to registery
Posted by A.M at 1/16/2004 3:45:17 PM
Hi,
When i call :
System.Diagnostics.EventLog.WriteEntry(string);
ASP.NET says :
System.Security.SecurityException: Requested registry access is not allowed.
What kind of permission should i give to ASPNET user?
Thanks,
Ali
... more >>
Need Direction on WHAT to Implement...
Posted by Oblinger NO[at]SPAM comporium.net at 1/15/2004 6:35:55 PM
Please understand that I am not asking HOW to do something - but,
rather, I
just need some advise on what "technology" or method I should
employ...
The problem is this:
I have a client for whom I am developing a web site in ASP.NET. The
client is a bank - therefore, the entire site will be... more >>
Could aspnet_wp.exe recycle be due to hackers?
Posted by ringo at 1/15/2004 5:26:38 PM
Hi all, I have a couple of Win2000 servers running IIS and an asp.NET web application, and have seen sporadic errors in the event logs:
aspnet_wp.exe (PID:PIDNumber) was recycled because memory consumption exceeded the SizeLimit MB (Percentage percent of available RAM)
The app I'm running ... more >>
Complicated Fallback ASP.NET Security
Posted by swheatley22 NO[at]SPAM yahoo.com at 1/15/2004 2:15:42 PM
I have been working on an ASP.NET app at work for quite some time now.
We've been using Windows authentication up until now, but I've come
across a problem. Ideally, users on our local intranet would be
authenticated via Windows authentication. Users outside of our
intranet would still authen... more >>
Storing encrypted password in xml file??
Posted by smita at 1/15/2004 12:22:57 PM
Hi,
I have an XML file that stores a Profile of a user, including the username,
password, server name, etc.
I want to be able to leave the XML file as plain text, but have the password
attribute encrypted.
I have used the RC2CryptoServiceProvider class, but when i convert the
encrypted ... more >>
caspol & local intranet security
Posted by adam at 1/15/2004 10:43:27 AM
Hi
We have built an aspnet application which uses a windows
user control embedded in an object tag. The app is to be
deployed on a large client intranet. The object requires
full trust security to work properly.
What is the easiest way to configure the client's
corporate network. They... more >>
Best approach for database/windows authentication integration?
Posted by stephenmcnabb NO[at]SPAM yahoo.co.uk at 1/15/2004 4:07:26 AM
We have an ASP.NET application that consists of about 10 forms and we
want to be able to control which user has access to which pages. So
User A should be able to access pages 3, 4 and 10, and User B should
be able to access pages 1, 2 and 9 etc. We also want to be able to
mantain these rules us... more >>
signing out all users
Posted by kaanoezturk NO[at]SPAM yahoo.com at 1/15/2004 4:04:52 AM
hi,
i have written an aplication that changes some global variables of my
another application. it is some kind of a web.config editor.
i want all users that are signed in to be signed out when i change any
variable with the utility program.
or do you have another idea?
KaaN
kaan.oeztu... more >>
|