Psst! Did you know DevelopmentNow is a mobile web site design agency?

Contact us for help mobilizing your site, or to sign up for our beta Mobile Web SDK!


Archived Months
July 2003
August 2003
September 2003
October 2003
November 2003
December 2003
January 2004
February 2004
March 2004
April 2004
May 2004
June 2004
July 2004
August 2004
September 2004
October 2004
November 2004
December 2004
January 2005
February 2005
March 2005
April 2005
May 2005
June 2005
July 2005
August 2005
September 2005
October 2005
November 2005
December 2005
January 2006
February 2006
March 2006
April 2006
May 2006
June 2006
July 2006
August 2006
September 2006
October 2006
November 2006
December 2006
January 2007
February 2007
March 2007
April 2007
May 2007
June 2007
July 2007
August 2007
September 2007
October 2007
November 2007
December 2007
January 2008
February 2008
March 2008
April 2008
May 2008
June 2008
all groups > asp.net security > july 2004

Filter by week: 1 2 3 4 5

File copy via ASP.NET access errors?
Posted by Stu at 7/31/2004 9:57:18 PM
Using IIs 6.0 on a Server 2003 box, and using ASP.NET I'm trying to do the following code snippit... Dim NewName As String = "\\network_share_path\edit_me.ppt" Dim PubName As String = "\\network_share_path\show_me.ppt" Dim PubFile As System.IO.File If PubFile.Exists(PubName) Then P...more >>


DirectoryServices Namespace
Posted by
at 7/30/2004 7:08:05 PM
Hi I am trying to import the System.DirectoryServices namespace in an aspx page with the following syntax <%@ Import Namespace="System.DirectoryServices" %> but as I tried to load the page, it was generating compiler error. I have installed the 1.1 .NET framework SDK Can anyone hel...more >>

Authorization problem
Posted by maryam.baseer NO[at]SPAM gmail.com at 7/30/2004 3:44:37 PM
Hi Please can anyone tell me why I am getting this error when I call one of my aspx pages You are not authorized to view this page You might not have permission to view this directory or page using the credentials you supplied. --------------------------------------------------------------...more >>

Sessions
Posted by sinhadarpan NO[at]SPAM yahoo.com at 7/30/2004 5:33:12 AM
How can i limit number of session in an asp.net application.... Eg i want only 5 logins at a time on my server...more >>

VB.NET LDAP Class
Posted by Jon Delano at 7/29/2004 7:18:29 PM
Hello After some effort I was able to come up with this class (converted from a C# example on MS' web site). Put this in a class in you vb.net web project and you should be able to authenticate a user against active directory and also retrieve their user groups. You must replace the LDAP:/...more >>

adding cookie
Posted by masoud bayan at 7/29/2004 11:42:24 AM
I have a forms authenticated asp.net web application. in login page = there is a check box which when is checked user name should be kept for = next login time.=20 I know there is an option as --- = FormsAuthentication.RedirectFromLoginPage(txtUserName.Text, = chkRemember.checked) ----- to per...more >>

Where to store UserID/Password
Posted by Fernandez at 7/29/2004 3:19:23 AM
Hi, Where can I store username password information my ASP.NET project. I am not using any database. I preferred to store in Application Configuration File. Suggestions are welcome. -- Rgds, Fernandez...more >>

Getting forms auth challenge
Posted by murphy NO[at]SPAM murphysw.com at 7/28/2004 12:04:34 PM
I'm implementing forms authentication on a site and can't get the redirection to the login page to work happen. It is behaving as though still doing windows authentication. In web.config: <authentication mode="Forms"> <forms loginUrl="login.aspx" name=".ASPXFORMSAUTH" protection="Al...more >>



accessing mapped drives in ASP.NET application
Posted by Farooq Khan at 7/27/2004 5:29:43 PM
hi, is there any way i can access mapped drive through ASP.NET application?? i have tried doing that the standard way but didnt work, used the same code in win32 application and it worked fine though. thanks Farooq Khan ...more >>

print to network printer using ASP.NET on IIS6 (2003 Server)
Posted by Tessa at 7/27/2004 11:48:27 AM
Is there any security reason why you cannot print to a network printer from ASP.NET under IIS6 on Windows 2003 server? I'm using ASP.NET code to print to a server print queue using PrintDocument.Print() (.NET framework v 1.1) I can print to a local printer plugged into LPT1 on the web server,...more >>

Access to non-virtual-directory UNC paths from IIS 6.0
Posted by Jeff Johnson [MVP: VB] at 7/27/2004 11:40:44 AM
[Please let me know if there is a better group in which to post this question.] Background: We have an ASP.NET Web app in my company which compares two data sources and reports the differences between them. This app can handle different types of data, both DBMS- and file-based. For file-based...more >>

checking whether browser allows cookies in asp.net
Posted by Ollie at 7/24/2004 4:13:41 PM
Can you check whether a users browser allows you to use cookies? Cheers Ollie ...more >>

Forms Authentication - Not timing out, not redirecting.
Posted by AVance at 7/24/2004 3:45:01 PM
Hi, I've come across this scenario in ASP.NET 1.1 with forms authentication where the forms auth doesn't seem to timeout correctly, nor redirect to the login page. I have done some testing, and I believe I've found a solution, but I would like some insight from Microsoft on whether th...more >>

Signed assembly will not load in internet explorer
Posted by Mombiatch at 7/23/2004 9:54:23 AM
I've got an assembly that implements a class that inherits System.Windows.Forms.UserControl. This works wonderfully when I embed it in an ASP.NET page, using the <object clsid="whatever.dll#namespace.class" id="formcontrol"></object> tag. This works when the assembly isn't signed, but as soon as...more >>

Authentication against active directory
Posted by Jon Delano at 7/22/2004 8:49:47 PM
Hello I am developing a ASP.NET site (using VB). I found some code that allows me to authenticate the user trying to access the site against the active directory server for the company. What is happening is some users authenticate and others do not ... but they are all a part of the domain....more >>

Network File access using anonymous access
Posted by Tim Menninger at 7/22/2004 10:58:17 AM
I have seen a number of entries related to accessing remote resources (files in my case) that need to reside on a remote server. We must leave our files on a remote server due to their size. All of the solutions that I have run across have used impersonation with some type of windows or forms bas...more >>

Need help improving authorization
Posted by AndiV at 7/21/2004 3:29:47 PM
I don't have a response in framework.aspnet, may be this one is a more appropriate group. = = = = = = = = = = = = = = = = == = = = = = == = = = = = = = = = = = = = = = = = Each of my intranet page (windows authentication) needs to validate user's roles stored in the database. Currently, I ...more >>

Problems when joining a domain
Posted by prothrock NO[at]SPAM gmail.com at 7/21/2004 2:19:22 PM
OK - here's the situation. We have a Win 2K Server running IIS and MSSQL with the .NET 1.1 framework. Everything works just fine when the machine is not a member of a domain. Everything works just fine when we join the server to our test domain. However, when we join the machine to our product...more >>

Getting windows username
Posted by Jonathan Dixon at 7/21/2004 12:37:17 PM
I am developing an intranet and was wondering, when a user logs on is there a way to get the username of the windows account in asp.net. I have tried the following but they return the worker process username e.g DOMAIN\ASPNET Can somone suggest a way or provide some code the get the username...more >>

Create standard for ASP.NET to second tier resource like SQL DB
Posted by godtoall NO[at]SPAM hotmail.com at 7/21/2004 12:30:48 PM
I'm looking to create a standard for all of our 200 ASP.NET application on connecting to a 2 tier resource. As it is right now, we have each developer doing how they like to do it. Since I will be the IIS Admin and will providing support for the production environment. I want to create a standar...more >>

HELP! CreateProcessWithLogonW issue
Posted by charlie NO[at]SPAM nunya.com at 7/21/2004 2:39:58 AM
Hi, I hope someone can help me with this - it's driving us all nuts. We have an ASP.Net web application that must run an external executable to accomplish a document merge function. We got this to work on Windows XP using the following code (low level API calls). Before we call the RunIt ...more >>

Web.Config and subdirectory *location* security
Posted by Grant Harmeyer at 7/20/2004 4:07:33 PM
I've read similar posts to this issue, and I am fairly certain this configuration should work. However, when I try to request any of the pages in the Admin subdirectory of my application root, I am given the following error: It is an error to use a section registered as allowDefinition='Machi...more >>

S/MIME in C#
Posted by Gustavo Badauy at 7/20/2004 4:03:29 PM
Hi, I want to sign some emails and I've been searching on msdn and did not find anything there. Does anyone have any ideas on where to start? Thanks ...more >>

Blocking parent paths (ASP.NET equivalent)
Posted by RM at 7/20/2004 2:00:13 PM
I see this question has been asked but not really fully answered (that I could find). All of our domains are on their own drive, such as this f:\wwwdomain1 f:\wwwdomain2 f:\wwwdomain3 and so on. If we setup a new domain for someone, say wwwdomain3, provide FTP in access to an outsi...more >>

how to get the supported cryptographic algorithm on the current .n
Posted by baisword at 7/20/2004 4:13:06 AM
how to get the supported cryptographic algorithm on the current .net platform? ...more >>

HTTP Error 401: Unauthorized
Posted by Eben Jansen van Rensburg at 7/20/2004 12:12:43 AM
Hi all, Sorry if you had this one before, but I hope you can help. I'm running VS.NET 2003 on a Windows Server 2003 Standard Edition. The server acts as a Domain Controller and a Web Server. It is purely used for development. I should probably not do development on a server but I need t...more >>

Minimum Privileges for Debugging Local ASP.NET
Posted by Jonathan Van Eenwyk at 7/19/2004 10:14:17 PM
Hi all! I'm trying to debug ASP.NET applications on my local computer, but with minimum privileges? I've added my limited user to the Debugger Users group. What else is needed to get debugging to work? I get the error message: Unable to start debugging on the web server. Access is denied. D...more >>

Total Confusion! - ACLs and Windows authentication with no impersonation
Posted by peter.beech NO[at]SPAM iname.com at 7/19/2004 11:19:38 AM
Hi all, apologies if this has come up before, but I've been searching the whole day and found nothing... If I have authentication set to "windows", and identity impersonation="false", do I need to grant access to the authenticated windows user on the website and its resources (aspx files, etc...more >>

Roles based Forms Auth - denied pages redirect
Posted by Shaun at 7/19/2004 2:06:03 AM
I would like to know how, if at all possible, a custom redirect page can be setup for when a users role(s) are denied to a page. The default behaviour seems to be back to the default/login page but I need to tell the user that they are not allowed the access the requested. The site in question in ...more >>

forms authentication doesn't work for static pages/files like GIF/HTML/PDF ?
Posted by www.MSmobiles.com at 7/18/2004 1:59:37 AM
do I understand it correctly that forms authentication doesn't work for static pages/files like GIF/HTML/PDF ? so I cannot convince IIS to redirect to form with login information entry (user name/password) if I want to protect static files like for example: myserver.com/something/myvideo.wmv ...more >>

forms authentication: redirects for *.aspx pages only, not for other extensions, not for static content
Posted by www.MSmobiles.com at 7/18/2004 1:32:37 AM
Hi! I am using something like this in web.config : <authentication mode="Forms"> <forms name=".MSMOBILES_COM___COOKIE" loginUrl="login.aspx" protection="All" timeout="30" path="/"> <credentials passwordFormat="Clear"> ...more >>

Windows XP - IIS Access Denied 403
Posted by Fred Nelson at 7/16/2004 2:29:46 PM
Hi: Well today is the day that I install my new and improved compuer and move my development to XP from Windows 2000. Everything is working fine (MSDE, .NET) except that for some reason I can't access many of my web pages from within VS.NET or from a browser running locally and other comput...more >>

ASP.NET using impersonation cannot access network shared drive
Posted by benny at 7/16/2004 1:37:03 PM
I have a ASP.NET application with web.config specified: <identity impersonate=true/> <authentication mode="Windows" /> If I login to the client browser as JSMITH and have the server code trying to access a network shared drive via Directory.GetFiles("\\\\machineb\\sharedriveb"), I get an acces...more >>

Utter madness!
Posted by Paul Mason at 7/14/2004 2:47:10 PM
I think i've been getting my groups mixed up. I've been trying to get my intranet system to authenticate to SQL server (2K) using a trusted connection for some time and have had to wait until we upgraded to Active directory for kerberos to start working (I'm not 100% sure it's kerberos so be...more >>

The remote server returned an error: 403 Forbidden
Posted by huilongchun NO[at]SPAM hotmail.com at 7/14/2004 1:33:53 PM
Hi Joe, Can you tell me how to setup the private key that you were talking about? I having the same error as Arun. Any direction will be appreciated. Chun Does the certificate in the store say it has a private key associated with it? CAPI needs to have the private key available for ...more >>

Impersonation in asp.net
Posted by Samuel Shum at 7/14/2004 12:27:25 PM
Hello, I have a problem on the impersonation in asp.net: I've developed some components which can create user accounts on the web server. The asp files resided on the server will call these components to do the job BUT the "aspnet" (asp.net worker process account) doesn't have enough privilege to...more >>

Access File Share from ASP.NET using Unmanaged Code
Posted by Mark Duregon at 7/13/2004 7:33:06 PM
Hi, We have an application that requires appropriate users to run command files on an adhoc basis. We have implmented a library that uses the following code: using System; using System.Runtime.InteropServices; using System.Security.Principal; using System.Security.Permissions; namespace...more >>

ASP.NET and COM registry access denied
Posted by shippyatdrexel NO[at]SPAM yahoo.com at 7/13/2004 3:12:39 PM
I've seen many posts on the web about this topic, and I still haven't found an answer that works for me. I have an ASP.NET page written in C# that instantiates a COM object that attempts to access a registry key. The object fails, but it is a third party component and all the vendor can tell me ...more >>

Start external Process under different user account in ASP.NET???
Posted by Shawn Anderson at 7/13/2004 10:52:05 AM
Does anyone know how to get Process.Start() to use the security context of the user that my ASP.NET app is impersonating? It seems that it is always run as the ASPNET User no matter what I do. I know that I can look into CreateProcessWithLogonW, but I really do not want to ask and store a ...more >>

Configuring FormsAuthentication from code
Posted by ringi at 7/13/2004 2:32:01 AM
I have an asp.net application that has more then one login page. Different logon pages are used depending on how the customers have configured the application. We are making use of the FormsAuthentication module to do most of our authentication. I wish to be able to control the value of “lo...more >>

Permission check for secured subfolders?
Posted by TK at 7/12/2004 7:45:15 PM
I'm building an ASP.NET application works in Forms Authentication mode with custom user account database. And it shows clients a list of hyperlinks to content pages located in some separated subfolders. This application and content pages are entirely secured, so everyone must logon to the applic...more >>

Private Assemblies & Strong Names??
Posted by Chris Mohan at 7/12/2004 7:22:01 PM
Hi, I've signed a private assembly with a strong name and have deployed it in a web app's bin directory. Things work fine, yet I recently read you "can't" do this: From: http://msdn.microsoft.com/library/en-us/dnnetsec/html/THCMCh09.asp "private assemblies... This type of assembly cannot be str...more >>

Passport Redirection Problem.
Posted by kkknnn321 NO[at]SPAM yahoo.com at 7/10/2004 5:33:31 AM
Hi. all!!!!!!!! With Passport Authentication AFTER SESSION TIME OUT How can i redirect the user to the Passport login page. And after getting the credential. I need to again redirect to the same page.. I used the below code in vb.net identity.LoginUser(redirectURL, 60, 1, Nothing, -...more >>

Application Settings
Posted by Glenn Thimmes at 7/9/2004 8:49:15 AM
I posted this question in the ASP.NET forum and did not get an answer, so I thought this might be a better place. I am needing to read and write application settings from within my ASP.NET application. My web.config is not an option since I need to be able to write settings as well. My databas...more >>

Intranet security
Posted by kh at 7/9/2004 4:52:01 AM
Hi. I'm designing an intranet application in a heterogenious MS environment (XP, W2K Server, SQL Server 2K). The perfect security scenario for me is described in the Patterns & Practices guide entitled "Building Secure ASP.NET Applications". In the "Intranet Security" chapter [1] the text describes ...more >>

Forcing Reauthentication for a Webform with NTLM auth..ion
Posted by Andrew_Revinsky at 7/9/2004 12:33:49 AM
Hi, please suggest if there is a way (and what is it) to force a web application to "forget" a current user (authenticated with NTLM authentication) and make Internet Explorer show a dialog box prompting for authentication (username/password/domain)? (And then, have this session run under a newly...more >>

A remote service problem
Posted by crawlerxp at 7/9/2004 12:03:00 AM
Hi. This is the problem: I need to construct an UI asp.net web application that will be able to start and stop game servers on a dedicated game server. I came up with an idea to make the server serve asp.net web form application that will be able to just run game servers and stop those using S...more >>

Need help. Having trouble with security on my web service.
Posted by Ken Varn at 7/8/2004 4:56:42 PM
I am getting an access denied 403 error when I try to access my web service. My IIS setting is set to use only Windows Authentication. The client is calling the web service from a Windows Forms UserControl that is embedded into a web page using the <object> tag. When I call up the form in the...more >>

SecureQueryString
Posted by Han Sen at 7/7/2004 9:55:58 PM
I'm trying to figure out how to use SecureQueryString (looked everywhere, only found a half cooked example at DotNetJunkies). Does anyone have a little more info on how to implement SecureQueryString? ...more >>

Forms Authentication "Forgetting" a User
Posted by Chris Magoun at 7/7/2004 3:06:56 PM
Greetings, We have an ASP.NET application that implements forms-based authentication. The login portion seems to work fine. However, I have one developer who when running the application, it seems to forget him at some specific point (not a timeout) and he has to re-login. This does not happen...more >>


DevelopmentNow Blog