all groups > asp.net security > april 2004 > threads for april 22 - 28, 2004
Filter by week: 1 2 3 4 5
Configuring Windows Auth & Forms Auth in Asp.Net
Posted by Chris Mohan at 4/28/2004 11:11:04 AM
Configuring Windows Auth & Forms Auth in Asp.Ne
Hi, I've configured a web app to use windows authentication and also set up two separate subdirectories to use forms authentication. It appears to work fine but I have never seen a sample that demonstrates both in the same web.config and I don't like ... more >>
Impersonation of forms-authenticated Active Directory user
Posted by mikeswift NO[at]SPAM mailinator.com at 4/28/2004 6:52:00 AM
Hello all
I wonder if the great and the good of this esteemed forum might shed
some light on a problem of mine...
Three servers in a domain: one Active Directory server, one SQL Server
and one IIS. IIS hosts an ASP.NET Web Application which requires that
users log on through a web form, are... more >>
Similar issue with .NET Security
Posted by Ed Hastings via .NET 247 at 4/27/2004 5:42:50 PM
Hello; having similar ASP=2ENET security issues=2E
Upgrading a number of ASP classic apps to =2ENET and have=
everything done but cant figure out how to get the security to=
work correctly=2E
Under the ASP Classic implementations security was NT Groups=
based=2E Various Groups were crea... more >>
secret key string visible in dll
Posted by Tim Mackey at 4/27/2004 4:06:02 PM
hi,
i am using 3des encryption with a secret key to send information between 2 aspnet applications. they both know the key, which is a hard-coded string. i have read about using aspnet-setreg to securely store such a value in the registry, but i have a different query.
if i open the dll in note... more >>
Custumizing Pages based on security status
Posted by Devin at 4/26/2004 4:16:04 PM
I am trying to create pages that are viewable without a login, but if a person does login I want certian pages to display customized content. For example, I have a calendar page that loads up to anyone. But on the same page I want to restrict showing the hyperlink to "Adding a calendar Event" to so... more >>
Automaticall Signout after no activity...
Posted by Jonathan wax at 4/26/2004 4:16:02 PM
Hi
I am looking for a way to ensure that an asp.net site (using forms authentication) performs a sign out automaticall after a period of time where there has been no activity by the user
Any ideas would be appreciated
Jonathan.... more >>
anonymous logon
Posted by manos papaoikonomou via .NET 247 at 4/26/2004 5:22:18 AM
I have aproblem.
I develop my asp.net site at my pc (named PCMANOS)(running IIS) and I have the SQL Server at another pc (named ATHDC).
I've already created an IUSR_PCMANOS user account at ATHDC and I've given the appropriate priviledges to read and write from the database.
When I test the site f... more >>
change password in active directory by webapplication (vb.net)
Posted by raf60ir NO[at]SPAM aut.ac.ir at 4/25/2004 8:16:48 AM
Dear Sir,
I want to change password of users in active directory by asp.net
form.this is my code, but i recieve error could anyone help me to
solve it. thanks
Protected WithEvents newpass As System.Web.UI.WebControls.TextBox
Protected WithEvents btn1 As System.Web.UI.WebControls.Butto... more >>
Don't see what you're looking for? Search DevelopmentNow.com.
Please Help - Encryption Problems
Posted by Jamie Sutherland at 4/23/2004 2:45:38 PM
Hi,
I have a problem in that I have 2 applications writing to the same Database.
One App is web based and the other is windows/forms based.
Both have the same job in that they can reset a users password in the
database. Both are using SHA1 encryption however they both ghive different
results wh... more >>
Can I force 401 error when user not authenticated?
Posted by Bigtoga at 4/23/2004 2:30:57 PM
Currently I have succesfully implemented role-based folder security using
roles and web.config in each folder. This works great - if a user is not
authenticated or a member of an allowed role, that user cannot access the
resource (woohoo!). When the disallowed user tries to access the resource,
... more >>
Exclude Files from HttpForbiddenHandler
Posted by Dan Ackermann at 4/23/2004 10:14:24 AM
Hi all,
By default .cs files are protected from downloading by adding ".cs" to
the HttpForbiddenHandler in machine.config.
How to ALLOW (exclude from HttpForbiddenHandler) a specifig file
(myfile.cs) to download ???
TIA
Dan Ackermann
... more >>
Writing to a network share
Posted by Tyler Davey at 4/23/2004 6:51:02 AM
I posted this message in dotnet.framework.security, and was told to repost it her
Alright, I've been trying to figure out the solution to this problem for a few days and I'm officially stumped.
My web app server, Machine A, needs the ability to create a file(xml) on my db server, Machine B. The... more >>
Sessions & SSL
Posted by John Hamilton via .NET 247 at 4/23/2004 5:13:07 AM
Hello=2E Here's my problem=2E I have an e-commerce site with a=
login & checkout pages needing to be secure=2E To enforce these=
pages to be ssl I simply put in the page load:
If Not Request=2EIsSecureConnection Then
Response=2ERedirect(Request=2EURL=2EAbsoluteUri=2EReplace("http:",=
... more >>
Forms Auth Problems.
Posted by Ed Staffin at 4/23/2004 5:12:05 AM
Hi, I am using the fairly standard code below to do my
forms authentication ticket and redirect, however, I am
finding that once successfully logged in, I don't get
another log after I close the browser. Is there something
I need to do to let it know that if the browser closes
they should ... more >>
Exception Handling declarative security
Posted by pveechoud NO[at]SPAM vxcompany.com at 4/23/2004 12:34:01 AM
I'm reading myself into security and ASP.Net.
I have written some demo code and now I'm wondering how you deal with
exception handling when you use declarative security
I have a method with the following attribute
[PrincipalPermissionAttribute(SecurityAction.Demand, Name="Patrick")]
priva... more >>
I have the same problem
Posted by jarod tupak via .NET 247 at 4/22/2004 9:55:51 PM
(Type your message here)
I have the same problem when executing the code below. It returns me a "126" error from kernel32.
Dim sContainer as String = "sample_example_key"
Dim sProvider as String = "myprovider"
If Not (CryptAcquireContext(lHCryptprov, sContainer, sProvider, PROV_RSA_FULL, 0))... more >>
Create Directory
Posted by John at 4/22/2004 9:58:19 AM
Hello,
I am having a permissions problem when creating a directory. The relevant
bits of my code look like this:
// impersonate current user:
WindowsIdentity ident = (WindowsIdentity)
HttpContext.Current.User.Identity;
_context = ident.Impersonate();
_name = ident.Name;
_isauth... more >>
|