Groups | Blog | Home


Archived Months
July 2003
August 2003
September 2003
October 2003
November 2003
December 2003
January 2004
February 2004
March 2004
April 2004
May 2004
June 2004
July 2004
August 2004
September 2004
October 2004
November 2004
December 2004
January 2005
February 2005
March 2005
April 2005
May 2005
June 2005
July 2005
August 2005
September 2005
October 2005
November 2005
December 2005
January 2006
February 2006
March 2006
April 2006
May 2006
June 2006
July 2006
August 2006
September 2006
October 2006
November 2006
December 2006
January 2007
February 2007
March 2007
April 2007
May 2007
June 2007
July 2007
August 2007
September 2007
October 2007
November 2007
December 2007
January 2008
February 2008
March 2008
April 2008
May 2008
June 2008
all groups > asp.net security > april 2004 > threads for april 22 - 28, 2004

Filter by week: 1 2 3 4 5

Configuring Windows Auth & Forms Auth in Asp.Net
Posted by Chris Mohan at 4/28/2004 11:11:04 AM
Configuring Windows Auth & Forms Auth in Asp.Ne Hi, I've configured a web app to use windows authentication and also set up two separate subdirectories to use forms authentication. It appears to work fine but I have never seen a sample that demonstrates both in the same web.config and I don't like ...more >>


Impersonation of forms-authenticated Active Directory user
Posted by mikeswift NO[at]SPAM mailinator.com at 4/28/2004 6:52:00 AM
Hello all I wonder if the great and the good of this esteemed forum might shed some light on a problem of mine... Three servers in a domain: one Active Directory server, one SQL Server and one IIS. IIS hosts an ASP.NET Web Application which requires that users log on through a web form, are...more >>

Similar issue with .NET Security
Posted by Ed Hastings via .NET 247 at 4/27/2004 5:42:50 PM
Hello; having similar ASP=2ENET security issues=2E Upgrading a number of ASP classic apps to =2ENET and have= everything done but cant figure out how to get the security to= work correctly=2E Under the ASP Classic implementations security was NT Groups= based=2E Various Groups were crea...more >>

secret key string visible in dll
Posted by Tim Mackey at 4/27/2004 4:06:02 PM
hi, i am using 3des encryption with a secret key to send information between 2 aspnet applications. they both know the key, which is a hard-coded string. i have read about using aspnet-setreg to securely store such a value in the registry, but i have a different query. if i open the dll in note...more >>

Custumizing Pages based on security status
Posted by Devin at 4/26/2004 4:16:04 PM
I am trying to create pages that are viewable without a login, but if a person does login I want certian pages to display customized content. For example, I have a calendar page that loads up to anyone. But on the same page I want to restrict showing the hyperlink to "Adding a calendar Event" to so...more >>

Automaticall Signout after no activity...
Posted by Jonathan wax at 4/26/2004 4:16:02 PM
Hi I am looking for a way to ensure that an asp.net site (using forms authentication) performs a sign out automaticall after a period of time where there has been no activity by the user Any ideas would be appreciated Jonathan....more >>

anonymous logon
Posted by manos papaoikonomou via .NET 247 at 4/26/2004 5:22:18 AM
I have aproblem. I develop my asp.net site at my pc (named PCMANOS)(running IIS) and I have the SQL Server at another pc (named ATHDC). I've already created an IUSR_PCMANOS user account at ATHDC and I've given the appropriate priviledges to read and write from the database. When I test the site f...more >>

change password in active directory by webapplication (vb.net)
Posted by raf60ir NO[at]SPAM aut.ac.ir at 4/25/2004 8:16:48 AM
Dear Sir, I want to change password of users in active directory by asp.net form.this is my code, but i recieve error could anyone help me to solve it. thanks Protected WithEvents newpass As System.Web.UI.WebControls.TextBox Protected WithEvents btn1 As System.Web.UI.WebControls.Butto...more >>



Please Help - Encryption Problems
Posted by Jamie Sutherland at 4/23/2004 2:45:38 PM
Hi, I have a problem in that I have 2 applications writing to the same Database. One App is web based and the other is windows/forms based. Both have the same job in that they can reset a users password in the database. Both are using SHA1 encryption however they both ghive different results wh...more >>

Can I force 401 error when user not authenticated?
Posted by Bigtoga at 4/23/2004 2:30:57 PM
Currently I have succesfully implemented role-based folder security using roles and web.config in each folder. This works great - if a user is not authenticated or a member of an allowed role, that user cannot access the resource (woohoo!). When the disallowed user tries to access the resource, ...more >>

Exclude Files from HttpForbiddenHandler
Posted by Dan Ackermann at 4/23/2004 10:14:24 AM
Hi all, By default .cs files are protected from downloading by adding ".cs" to the HttpForbiddenHandler in machine.config. How to ALLOW (exclude from HttpForbiddenHandler) a specifig file (myfile.cs) to download ??? TIA Dan Ackermann ...more >>

Writing to a network share
Posted by Tyler Davey at 4/23/2004 6:51:02 AM
I posted this message in dotnet.framework.security, and was told to repost it her Alright, I've been trying to figure out the solution to this problem for a few days and I'm officially stumped. My web app server, Machine A, needs the ability to create a file(xml) on my db server, Machine B. The...more >>

Sessions & SSL
Posted by John Hamilton via .NET 247 at 4/23/2004 5:13:07 AM
Hello=2E Here's my problem=2E I have an e-commerce site with a= login & checkout pages needing to be secure=2E To enforce these= pages to be ssl I simply put in the page load: If Not Request=2EIsSecureConnection Then Response=2ERedirect(Request=2EURL=2EAbsoluteUri=2EReplace("http:",= ...more >>

Forms Auth Problems.
Posted by Ed Staffin at 4/23/2004 5:12:05 AM
Hi, I am using the fairly standard code below to do my forms authentication ticket and redirect, however, I am finding that once successfully logged in, I don't get another log after I close the browser. Is there something I need to do to let it know that if the browser closes they should ...more >>

Exception Handling declarative security
Posted by pveechoud NO[at]SPAM vxcompany.com at 4/23/2004 12:34:01 AM
I'm reading myself into security and ASP.Net. I have written some demo code and now I'm wondering how you deal with exception handling when you use declarative security I have a method with the following attribute [PrincipalPermissionAttribute(SecurityAction.Demand, Name="Patrick")] priva...more >>

I have the same problem
Posted by jarod tupak via .NET 247 at 4/22/2004 9:55:51 PM
(Type your message here) I have the same problem when executing the code below. It returns me a "126" error from kernel32. Dim sContainer as String = "sample_example_key" Dim sProvider as String = "myprovider" If Not (CryptAcquireContext(lHCryptprov, sContainer, sProvider, PROV_RSA_FULL, 0))...more >>

Create Directory
Posted by John at 4/22/2004 9:58:19 AM
Hello, I am having a permissions problem when creating a directory. The relevant bits of my code look like this: // impersonate current user: WindowsIdentity ident = (WindowsIdentity) HttpContext.Current.User.Identity; _context = ident.Impersonate(); _name = ident.Name; _isauth...more >>


DevelopmentNow Blog