all groups > asp.net security > july 2004
Filter by week: 1 2 3 4 5
File copy via ASP.NET access errors?
Posted by Stu at 7/31/2004 9:57:18 PM
Using IIs 6.0 on a Server 2003 box, and using ASP.NET I'm trying to do the
following code snippit...
Dim NewName As String = "\\network_share_path\edit_me.ppt"
Dim PubName As String = "\\network_share_path\show_me.ppt"
Dim PubFile As System.IO.File
If PubFile.Exists(PubName) Then
P... more >>
DirectoryServices Namespace
Posted by at 7/30/2004 7:08:05 PM
Hi
I am trying to import the System.DirectoryServices namespace in an aspx page
with the following syntax
<%@ Import Namespace="System.DirectoryServices" %>
but as I tried to load the page, it was generating compiler error.
I have installed the 1.1 .NET framework SDK
Can anyone hel... more >>
Authorization problem
Posted by maryam.baseer NO[at]SPAM gmail.com at 7/30/2004 3:44:37 PM
Hi
Please can anyone tell me why I am getting this error when I call one
of my aspx pages
You are not authorized to view this page
You might not have permission to view this directory or page using the
credentials you supplied.
--------------------------------------------------------------... more >>
Sessions
Posted by sinhadarpan NO[at]SPAM yahoo.com at 7/30/2004 5:33:12 AM
How can i limit number of session in an asp.net application....
Eg i want only 5 logins at a time on my server... more >>
VB.NET LDAP Class
Posted by Jon Delano at 7/29/2004 7:18:29 PM
Hello
After some effort I was able to come up with this class (converted from a C#
example on MS' web site).
Put this in a class in you vb.net web project and you should be able to
authenticate a user against active directory and also retrieve their user
groups.
You must replace the LDAP:/... more >>
adding cookie
Posted by masoud bayan at 7/29/2004 11:42:24 AM
I have a forms authenticated asp.net web application. in login page =
there is a check box which when is checked user name should be kept for =
next login time.=20
I know there is an option as --- =
FormsAuthentication.RedirectFromLoginPage(txtUserName.Text, =
chkRemember.checked) ----- to per... more >>
Where to store UserID/Password
Posted by Fernandez at 7/29/2004 3:19:23 AM
Hi,
Where can I store username password information my ASP.NET project.
I am not using any database.
I preferred to store in Application Configuration File.
Suggestions are welcome.
--
Rgds,
Fernandez... more >>
Getting forms auth challenge
Posted by murphy NO[at]SPAM murphysw.com at 7/28/2004 12:04:34 PM
I'm implementing forms authentication on a site and can't get the
redirection to the login page to work happen. It is behaving as
though still doing windows authentication.
In web.config:
<authentication mode="Forms">
<forms loginUrl="login.aspx" name=".ASPXFORMSAUTH"
protection="Al... more >>
Don't see what you're looking for? Search DevelopmentNow.com.
accessing mapped drives in ASP.NET application
Posted by Farooq Khan at 7/27/2004 5:29:43 PM
hi,
is there any way i can access mapped drive through ASP.NET application?? i
have tried doing that the standard way but didnt work, used the same code in
win32 application and it worked fine though.
thanks
Farooq Khan
... more >>
print to network printer using ASP.NET on IIS6 (2003 Server)
Posted by Tessa at 7/27/2004 11:48:27 AM
Is there any security reason why you cannot print to a network printer from
ASP.NET under IIS6 on Windows 2003 server?
I'm using ASP.NET code to print to a server print queue using
PrintDocument.Print()
(.NET framework v 1.1)
I can print to a local printer plugged into LPT1 on the web server,... more >>
Access to non-virtual-directory UNC paths from IIS 6.0
Posted by Jeff Johnson [MVP: VB] at 7/27/2004 11:40:44 AM
[Please let me know if there is a better group in which to post this
question.]
Background:
We have an ASP.NET Web app in my company which compares two data sources and
reports the differences between them. This app can handle different types of
data, both DBMS- and file-based. For file-based... more >>
checking whether browser allows cookies in asp.net
Posted by Ollie at 7/24/2004 4:13:41 PM
Can you check whether a users browser allows you to use cookies?
Cheers
Ollie
... more >>
Forms Authentication - Not timing out, not redirecting.
Posted by AVance at 7/24/2004 3:45:01 PM
Hi,
I've come across this scenario in ASP.NET 1.1 with forms authentication
where the forms auth doesn't seem to timeout correctly, nor redirect to the
login page.
I have done some testing, and I believe I've found a solution, but I
would like some insight from Microsoft on whether th... more >>
Signed assembly will not load in internet explorer
Posted by Mombiatch at 7/23/2004 9:54:23 AM
I've got an assembly that implements a class that inherits
System.Windows.Forms.UserControl. This works wonderfully when I embed it in
an ASP.NET page, using the <object clsid="whatever.dll#namespace.class"
id="formcontrol"></object> tag. This works when the assembly isn't signed,
but as soon as... more >>
Authentication against active directory
Posted by Jon Delano at 7/22/2004 8:49:47 PM
Hello
I am developing a ASP.NET site (using VB).
I found some code that allows me to authenticate the user trying to access
the site against the active directory server for the company.
What is happening is some users authenticate and others do not ... but they
are all a part of the domain.... more >>
Network File access using anonymous access
Posted by Tim Menninger at 7/22/2004 10:58:17 AM
I have seen a number of entries related to accessing remote resources (files
in my case) that need to reside on a remote server. We must leave our files
on a remote server due to their size. All of the solutions that I have run
across have used impersonation with some type of windows or forms bas... more >>
Need help improving authorization
Posted by AndiV at 7/21/2004 3:29:47 PM
I don't have a response in framework.aspnet, may be this one is a more
appropriate group.
= = = = = = = = = = = = = = = = == = = = = = == = = = = = = = = = = = = = =
= = =
Each of my intranet page (windows authentication) needs to validate user's
roles stored in the database. Currently, I ... more >>
Problems when joining a domain
Posted by prothrock NO[at]SPAM gmail.com at 7/21/2004 2:19:22 PM
OK - here's the situation.
We have a Win 2K Server running IIS and MSSQL with the .NET 1.1
framework.
Everything works just fine when the machine is not a member of a
domain.
Everything works just fine when we join the server to our test domain.
However, when we join the machine to our product... more >>
Getting windows username
Posted by Jonathan Dixon at 7/21/2004 12:37:17 PM
I am developing an intranet and was wondering, when a user logs on is there
a way to get the username of the windows account in asp.net.
I have tried the following but they return the worker process username e.g
DOMAIN\ASPNET
Can somone suggest a way or provide some code the get the username... more >>
Create standard for ASP.NET to second tier resource like SQL DB
Posted by godtoall NO[at]SPAM hotmail.com at 7/21/2004 12:30:48 PM
I'm looking to create a standard for all of our 200 ASP.NET
application on connecting to a 2 tier resource. As it is right now, we
have each developer doing how they like to do it. Since I will be the
IIS Admin and will providing support for the production environment. I
want to create a standar... more >>
HELP! CreateProcessWithLogonW issue
Posted by charlie NO[at]SPAM nunya.com at 7/21/2004 2:39:58 AM
Hi,
I hope someone can help me with this - it's driving us all nuts.
We have an ASP.Net web application that must run an external executable to
accomplish a document merge function. We got this to work on Windows XP
using the following code (low level API calls). Before we call the RunIt
... more >>
Web.Config and subdirectory *location* security
Posted by Grant Harmeyer at 7/20/2004 4:07:33 PM
I've read similar posts to this issue, and I am fairly certain this
configuration should work. However, when I try to request any of the pages
in the Admin subdirectory of my application root, I am given the following
error:
It is an error to use a section registered as
allowDefinition='Machi... more >>
S/MIME in C#
Posted by Gustavo Badauy at 7/20/2004 4:03:29 PM
Hi,
I want to sign some emails and I've been searching on msdn and did not find
anything there. Does anyone have any ideas on where to start?
Thanks
... more >>
Blocking parent paths (ASP.NET equivalent)
Posted by RM at 7/20/2004 2:00:13 PM
I see this question has been asked but not really fully answered (that I
could find).
All of our domains are on their own drive, such as this
f:\wwwdomain1
f:\wwwdomain2
f:\wwwdomain3
and so on.
If we setup a new domain for someone, say wwwdomain3, provide FTP in
access to an outsi... more >>
how to get the supported cryptographic algorithm on the current .n
Posted by baisword at 7/20/2004 4:13:06 AM
how to get the supported cryptographic algorithm on the current .net platform?
... more >>
HTTP Error 401: Unauthorized
Posted by Eben Jansen van Rensburg at 7/20/2004 12:12:43 AM
Hi all,
Sorry if you had this one before, but I hope you can help. I'm running
VS.NET 2003 on a Windows Server 2003 Standard Edition. The server acts
as a Domain Controller and a Web Server. It is purely used for
development. I should probably not do development on a server but I
need t... more >>
Minimum Privileges for Debugging Local ASP.NET
Posted by Jonathan Van Eenwyk at 7/19/2004 10:14:17 PM
Hi all!
I'm trying to debug ASP.NET applications on my local computer, but with
minimum privileges? I've added my limited user to the Debugger Users group.
What else is needed to get debugging to work? I get the error message:
Unable to start debugging on the web server. Access is denied. D... more >>
Total Confusion! - ACLs and Windows authentication with no impersonation
Posted by peter.beech NO[at]SPAM iname.com at 7/19/2004 11:19:38 AM
Hi all,
apologies if this has come up before, but I've been searching the
whole day and found nothing...
If I have authentication set to "windows", and identity
impersonation="false", do I need to grant access to the authenticated
windows user on the website and its resources (aspx files, etc... more >>
Roles based Forms Auth - denied pages redirect
Posted by Shaun at 7/19/2004 2:06:03 AM
I would like to know how, if at all possible, a custom redirect page can be setup for when a users role(s) are denied to a page.
The default behaviour seems to be back to the default/login page but I need to tell the user that they are not allowed the access the requested.
The site in question in ... more >>
forms authentication doesn't work for static pages/files like GIF/HTML/PDF ?
Posted by www.MSmobiles.com at 7/18/2004 1:59:37 AM
do I understand it correctly that forms authentication doesn't work for
static pages/files like GIF/HTML/PDF ?
so I cannot convince IIS to redirect to form with login information entry
(user name/password) if I want to protect static files like for example:
myserver.com/something/myvideo.wmv
... more >>
forms authentication: redirects for *.aspx pages only, not for other extensions, not for static content
Posted by www.MSmobiles.com at 7/18/2004 1:32:37 AM
Hi!
I am using something like this in web.config :
<authentication mode="Forms">
<forms name=".MSMOBILES_COM___COOKIE"
loginUrl="login.aspx"
protection="All"
timeout="30"
path="/">
<credentials passwordFormat="Clear">
... more >>
Windows XP - IIS Access Denied 403
Posted by Fred Nelson at 7/16/2004 2:29:46 PM
Hi:
Well today is the day that I install my new and improved compuer and move my
development to XP from Windows 2000.
Everything is working fine (MSDE, .NET) except that for some reason I can't
access many of my web pages from within VS.NET or from a browser running
locally and other comput... more >>
ASP.NET using impersonation cannot access network shared drive
Posted by benny at 7/16/2004 1:37:03 PM
I have a ASP.NET application with web.config specified:
<identity impersonate=true/>
<authentication mode="Windows" />
If I login to the client browser as JSMITH and have the server code trying to access a network shared drive via Directory.GetFiles("\\\\machineb\\sharedriveb"), I get an acces... more >>
Utter madness!
Posted by Paul Mason at 7/14/2004 2:47:10 PM
I think i've been getting my groups mixed up.
I've been trying to get my intranet system to authenticate to SQL server
(2K) using a trusted connection for some time and have had to wait until we
upgraded to Active directory for kerberos to start working (I'm not 100%
sure it's kerberos so be... more >>
The remote server returned an error: 403 Forbidden
Posted by huilongchun NO[at]SPAM hotmail.com at 7/14/2004 1:33:53 PM
Hi Joe,
Can you tell me how to setup the private key that you were talking
about? I having the same error as Arun.
Any direction will be appreciated.
Chun
Does the certificate in the store say it has a private key associated
with
it? CAPI needs to have the private key available for ... more >>
Impersonation in asp.net
Posted by Samuel Shum at 7/14/2004 12:27:25 PM
Hello, I have a problem on the impersonation in asp.net: I've developed some
components which can create user accounts on the web server. The asp files
resided on the server will call these components to do the job BUT the
"aspnet" (asp.net worker process account) doesn't have enough privilege to... more >>
Access File Share from ASP.NET using Unmanaged Code
Posted by Mark Duregon at 7/13/2004 7:33:06 PM
Hi,
We have an application that requires appropriate users to run command files on an adhoc basis. We have implmented a library that uses the following code:
using System;
using System.Runtime.InteropServices;
using System.Security.Principal;
using System.Security.Permissions;
namespace... more >>
ASP.NET and COM registry access denied
Posted by shippyatdrexel NO[at]SPAM yahoo.com at 7/13/2004 3:12:39 PM
I've seen many posts on the web about this topic, and I still haven't
found an answer that works for me. I have an ASP.NET page written in
C# that instantiates a COM object that attempts to access a registry
key. The object fails, but it is a third party component and all the
vendor can tell me ... more >>
Start external Process under different user account in ASP.NET???
Posted by Shawn Anderson at 7/13/2004 10:52:05 AM
Does anyone know how to get Process.Start() to use the security context of
the user that my ASP.NET app is impersonating? It seems that it is always
run as the ASPNET User no matter what I do.
I know that I can look into CreateProcessWithLogonW, but I really do not
want to ask and store a ... more >>
Configuring FormsAuthentication from code
Posted by ringi at 7/13/2004 2:32:01 AM
I have an asp.net application that has more then one login page. Different logon pages are used depending on how the customers have configured the application. We are making use of the FormsAuthentication module to do most of our authentication.
I wish to be able to control the value of “lo... more >>
Permission check for secured subfolders?
Posted by TK at 7/12/2004 7:45:15 PM
I'm building an ASP.NET application works in Forms Authentication mode with
custom user account database. And it shows clients a list of hyperlinks to
content pages located in some separated subfolders. This application and
content pages are entirely secured, so everyone must logon to the
applic... more >>
Private Assemblies & Strong Names??
Posted by Chris Mohan at 7/12/2004 7:22:01 PM
Hi, I've signed a private assembly with a strong name and have deployed it in a web app's bin directory. Things work fine, yet I recently read you "can't" do this:
From: http://msdn.microsoft.com/library/en-us/dnnetsec/html/THCMCh09.asp
"private assemblies... This type of assembly cannot be str... more >>
Passport Redirection Problem.
Posted by kkknnn321 NO[at]SPAM yahoo.com at 7/10/2004 5:33:31 AM
Hi. all!!!!!!!!
With Passport Authentication
AFTER SESSION TIME OUT How can i redirect the user to the Passport
login page.
And after getting the credential. I need to again redirect to the same
page..
I used the below code in vb.net
identity.LoginUser(redirectURL, 60, 1, Nothing, -... more >>
Application Settings
Posted by Glenn Thimmes at 7/9/2004 8:49:15 AM
I posted this question in the ASP.NET forum and did not get an answer, so I
thought this might be a better place.
I am needing to read and write application settings from within my ASP.NET
application. My web.config is not an option since I need to be able to write
settings as well. My databas... more >>
Intranet security
Posted by kh at 7/9/2004 4:52:01 AM
Hi. I'm designing an intranet application in a heterogenious MS environment (XP, W2K Server, SQL Server 2K). The perfect security scenario for me is described in the Patterns & Practices guide entitled "Building Secure ASP.NET Applications". In the "Intranet Security" chapter [1] the text describes ... more >>
Forcing Reauthentication for a Webform with NTLM auth..ion
Posted by Andrew_Revinsky at 7/9/2004 12:33:49 AM
Hi,
please suggest if there is a way (and what is it) to force a web application to "forget" a current user (authenticated with NTLM authentication) and make Internet Explorer show a dialog box prompting for authentication (username/password/domain)? (And then, have this session run under a newly... more >>
A remote service problem
Posted by crawlerxp at 7/9/2004 12:03:00 AM
Hi.
This is the problem:
I need to construct an UI asp.net web application that will be able to start
and stop game servers on a dedicated game server.
I came up with an idea to make the server serve asp.net web form application
that will be able to just run game servers and stop those using
S... more >>
Need help. Having trouble with security on my web service.
Posted by Ken Varn at 7/8/2004 4:56:42 PM
I am getting an access denied 403 error when I try to access my web service.
My IIS setting is set to use only Windows Authentication.
The client is calling the web service from a Windows Forms UserControl that
is embedded into a web page using the <object> tag. When I call up the form
in the... more >>
SecureQueryString
Posted by Han Sen at 7/7/2004 9:55:58 PM
I'm trying to figure out how to use SecureQueryString (looked
everywhere, only found a half cooked example at DotNetJunkies). Does
anyone have a little more info on how to implement SecureQueryString?
... more >>
Forms Authentication "Forgetting" a User
Posted by Chris Magoun at 7/7/2004 3:06:56 PM
Greetings,
We have an ASP.NET application that implements forms-based authentication.
The login portion seems to work fine. However, I have one developer who when
running the application, it seems to forget him at some specific point (not
a timeout) and he has to re-login. This does not happen... more >>
|