Archived Months
July 2003
August 2003
September 2003
October 2003
November 2003
December 2003
January 2004
February 2004
March 2004
April 2004
May 2004
June 2004
July 2004
August 2004
September 2004
October 2004
November 2004
December 2004
January 2005
February 2005
March 2005
April 2005
May 2005
June 2005
July 2005
August 2005
September 2005
October 2005
November 2005
December 2005
January 2006
February 2006
March 2006
April 2006
May 2006
June 2006
July 2006
August 2006
September 2006
October 2006
November 2006
December 2006
January 2007
February 2007
March 2007
April 2007
May 2007
June 2007
July 2007
August 2007
September 2007
October 2007
November 2007
December 2007
January 2008
February 2008
March 2008
April 2008
all groups > asp.net security > august 2004

Filter by week: 1 2 3 4 5

Problems with page aspx
Posted by Silvia at 8/31/2004 11:11:03 PM
Hi I have a windows service that run a aspx page in the url http://ip/raimserver/ris/cpr002.asxp with user and password and produce an error: Time-Out sending request. RIS server can be down. Exception is :System.Net.WebException: The remote server returned an error: (401) Unauthorized. ...more >>


Login failed for user '(null)'. Reason: Not associated with a trusted SQL Server connection.
Posted by DC Gringo at 8/31/2004 10:30:17 PM
Using latest SP Win2k and .NET versions, I have a .NET application running on server1 with a SQL Server database running on server2. I have the Windows user account passwords sync'd for server1\aspnet (installed by .NET Framework and server2\aspnet (created by me--this machine has no .NET Frame...more >>

DllImport Error
Posted by tetci NO[at]SPAM pyazilim.com at 8/31/2004 6:14:19 AM
Hello friends, I need to load an unmanaged dll(which i wrote for license control) from system32 folder and then my asp. net project will read the values from there.(I'll write the full code to the bottom) I get an "Object reference is not set an instance of an object error"...This code works ...more >>

Accessing objects in active directory via asp.net
Posted by toufani NO[at]SPAM gmail.com at 8/31/2004 5:30:13 AM
Hi everybody, I want to retrieve information about objects in active directory windows 2000 and their properties. I got some codes that don't work absolutely. for example I can't retrieve users list and group list separatedly.there is my code that downloaded from the internet : public class...more >>

Login failed for user '(null)'. Reason: Not associated with a trusted SQL
Posted by Brian Fulford at 8/30/2004 4:30:12 PM
I am losing lots of hair over this issue. We are trying to implement windows authentication from a web server to a database server. The web server is on a domain; the db server is not... does this matter? the IUSR_machinename user from the web server has been added as an account on the db server...more >>

WindowsPrincipal.IsInRole() problem with non-builtin roles
Posted by naijacoder naijacoder at 8/29/2004 11:53:10 PM
Can't get WindowsPrincipal.IsInRole() to work for me when using Windows Authentication. Here's a snippit of code from my C# codebehind page: WindowsPrincipal wp = new WindowsPrincipal( WindowsIdentity.GetCurrent() ); lblUser.Text = wp.Identity.Name; Label1.Text = wp.IsInRole(@"DOMAIN...more >>

Windows autentication with WindowsPrinicipal
Posted by naijacoder naijacoder at 8/29/2004 9:11:45 PM
Hello, I'm using Windows Authenetication with my code below with Windows Principal. I noticed that when i use IsinRole with "BUILT\Administrator its does work fine but when i use DomainName\GroupName it doesn't go. Does anybody know what 'm doing wrong? Pls forward ur ideas! Than...more >>

Required permissions to set Process.PriorityClass in Win 2003 serv
Posted by Paul Roberts at 8/29/2004 9:11:07 PM
Hi All, I have an asp.net application that needs to set it's priority to normal, but I get access denied when the below code executes. The reason I have to do this is I use a third party com component and it changes the priority to high, so I want to bang it on the head to make it normal a...more >>



authorization different paths and roles
Posted by Matias Woloski at 8/28/2004 6:37:44 PM
I have this authorization config in my web.config <location path="manager"> <system.web> <authorization> <deny users="?" /> <allow roles="admins" /> </authorization> </system.web> </location> <location path="resourcemgr"> <system.web> ...more >>

Windows Authentication with Asp.net and against Active Directory
Posted by Patrick at 8/28/2004 4:21:01 PM
How can i use Windows authentication in IIS against AD. How will i create a WindowsPrincipal object(with asp.net) in the Context.User property that is used for providing identity and authorization services to my application. How will i use the IsInRole method in WindowsPrincipal to return tru...more >>

Load balancing loses authentication
Posted by jhcorey NO[at]SPAM yahoo.com at 8/27/2004 6:31:50 AM
My intranet ASP.NET web app is set up with Windows authentication and IIS is set to disallow anonymous access. The app is in a web farm configuration with two blade servers and a BigIP F5 switch set with sticky sessions. When I use the app and refresh the screen, the next thing I do in the...more >>

MD5 conversion problem
Posted by Peter Afonin at 8/26/2004 7:37:01 PM
Hello, I'm struggling with the string conversion to MD5 which I've never user before. I have a string that I need to encode which looks approximately like this: "pva:0.05:101214:pa7735tH:inv_desc=205308:shp_Email=petera_gudzon.net:lang =ru:shp_PaymentNo=20040825205308:shp_UserID=pva:shp_P...more >>

issues mixing integrated Windows authentication and anonymous on same application
Posted by developer at 8/26/2004 10:46:59 AM
I'm having issues mixing integrated Windows authentication and anonymous access on same IIS app. Basically, any post back event fails (Forms collection empty and control's event handler never called) on anonymous page when: 1 - user opens an aspx page that requires integrated Windows authent...more >>

ASP.NET with ADirectory role based authentication
Posted by naijacoder naijacoder at 8/25/2004 11:21:57 PM
Hi Everyone, I have some Questions relating to Active Directory and Asp.net. 1)I have created a role based authorisation using SQL Server but i want to use Active Directory as a datastore now? 2)Now if i want to allow the user to login credentials against the Active directory and t...more >>

DPAPI and config files
Posted by Dan Amiga at 8/25/2004 12:19:50 PM
Hello. This is about DPAPI and configuration files. Basically, what I understand is when loading the exe assembly the framework takes parameters from the config file and loads them. I want to store THE ENTIRE web.config ( or any other config file ) using DPAPI. That is - I want to develop a c...more >>

Disallowing concurrent login using the same user account
Posted by Zeng at 8/25/2004 10:21:56 AM
I would like to prevent someone sharing a login in my .net app but I know that it would know that would be difficult so it would be acceptable to prevent concurrent logins. So here is my current plan, each time a user logins we will create a unique id (a guid for example) and store it both in t...more >>

Impersonation Stops Language Resources Working
Posted by comedy_limp NO[at]SPAM yahoo.co.uk at 8/25/2004 2:48:23 AM
(This is a repost from the internationalization group where I am getting no joy) Hi, My ASP.NET application has internationalised string resources via satellite assemblies in the usual way. Everything was working fine and changing culture correctly switched the resources into the appropria...more >>

running a windows service from asp
Posted by fred at 8/24/2004 5:54:40 AM
I need a asp appli enabled to start/stop a web service I'm using ServiceController for that, but encounter a access denied problem when I try to start or stop the service. This problem is perfectely normal and well documented. But I can't solve it. My asp application ask for Windows au...more >>

DPAPI Enterprise Services Example
Posted by Bill Heckle at 8/24/2004 12:19:01 AM
I am trying to work through the sample from msdn, "How To Use DPAPI (User Store) from ASP.NET with Enterprise Services". I thought I had everything configured correctly. I tried to test the service and get the following error.(Sorry for encluding every line). I am confused as to what setting i...more >>

Return credentials with anonymous authentication?
Posted by Shimon Facterman at 8/23/2004 5:44:39 PM
Hi all, This is my Scenario: Have a login page in Application 1 with Anoynoumous authentication. Using this login page I would like to receive credentials from Active Directory (using Directoryservices I assume), and somehow return them back to the client browser as if I made login in a Wind...more >>

Disallow sharing the same login
Posted by Zeng at 8/23/2004 4:18:42 PM
Hello, I'm not sure if this is the right newsgroup. I'm wondering if anyone out there are experienced with solving this problem and can share your opinion or give me some advice. I'm planning to disallow multiple users of our .net application to share the same login. How do I do that? Track...more >>

Help with A.D. and ASP.Net
Posted by Reas at 8/22/2004 5:59:02 PM
Hi, I'm trying to validate the user credentials against an Active Directory, I've seen some demos around but in the enviroment I'm going to be working on, most users have restrictions that prohibit them to logon to certain machines/servers, so, my question is, should I have to do something spe...more >>

windows reauthorisation checkpoints?
Posted by Martin at 8/21/2004 3:45:18 PM
Hi, I have an ASP.Net application with authentication mode = windows. It works fine, but I would like to guard against people leaving their workstations and someone else using their PC. Locking PCs, or using password protected screen savers is not preferred. Is it possible to have checkp...more >>

Authentication security help needed
Posted by sqlprob NO[at]SPAM yahoo.fr at 8/21/2004 2:36:24 PM
I am new to asp.net and c#. Only some web pages of my application need users to be logged in. How do I need to set the web.config to restrict only some forms?...more >>

AD forms authentication
Posted by hari at 8/20/2004 5:06:52 PM
I am trying to authenticate to ad using this how-to http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnnetsec/html/secnetlpMSDN.asp The server is W2k3 and auth hangs here: **************************************************************************** **** string adPath = @"mypat...more >>

ValidateRequest="false" ?
Posted by Raterus at 8/20/2004 3:28:28 PM
I'm having to set ValidateRequest=3D"false" on one of my pages because = users need to enter a value that contains an html tag (well asp.net = think it is anyway). I understand why the "potentially dangerous = request.form detected" error and why it is being thrown, but my question = is: Wha...more >>

Form authentication in a virtual directory
Posted by John Boghossian at 8/20/2004 2:11:13 PM
Is it possible to get forms authentication to work for a virtual directory in a site? I have been trying with the simplest MSDN sample but it doesn't seem to work. I have tried in a virtual directory on my dev box and on a virtual directory on a production server, but I never get authenticated, ...more >>

Configuring security for a site in Windows 2003
Posted by Chris Leffer at 8/20/2004 12:22:12 PM
Hi. I am developing my first web site using asp.net and IIS 6 and have some doubts about security. My site will be available on the internet and my users won't use windows integrated security. The authentication process relies on a database and forms authentication. But I also wants to restri...more >>

Webservice IsInRole and LDAP to AD
Posted by Harold at 8/19/2004 10:03:11 PM
Can someone explain to me why IsInRole will work, but using DirectorySearcher will not? The code is running in a business object behind a webservice. The user's credentials (windows authenication) are being passed to the webservice. The webservice is configured for "integrated windows autheni...more >>

How to generate an MD5 data from the string
Posted by Peter Afonin at 8/19/2004 9:48:22 PM
Hello, I've never been dealing with the security before. Could you please help me to write a code to generate an MD5 data from a string? I've been using this example from MSDN: Function MD5hash(data() As Byte) As Byte() ' This is one implementation of the abstract class MD5. Dim md...more >>

Binding DirectoryEntry to AD object via GUID
Posted by Gary K at 8/19/2004 6:33:01 PM
I notice in the help files a reference that implies that you can create a DirectoryEntry object that binds directly to an active directory object vai it's GUID. The properties where I found this reference are the Guid and NativeGuid properties. I cannot locate where or how to do this, the Di...more >>

How logout in code that using Window Authentication?
Posted by Neil at 8/19/2004 5:37:26 PM
Hi, We using Window Autoentication, but we want logout in our code, how should i do? Thanks. Neil. ...more >>

Problem with Web Forms authentication in IFrame.
Posted by Ken Varn at 8/19/2004 11:26:48 AM
I have a ASP.NET web page that I have implemented using Web Forms authentication. It seems to work pretty good except for one problem which I am not quite sure I understand. My main HomePage.aspx contains an IFrame which displays other ASPX pages. If I refresh the main HomePage.aspx after the...more >>

ASP.NET Anonymous Impersonation
Posted by sam at 8/19/2004 9:17:52 AM
Hi, When you impersonate with anonymous security what is suppose to happen (IIS5 platform). Is it the aspnet_wp.exe process runs under the identity of the anonymous user? When I look in the task manager the aspnet_wp.exe process always lists ASPNET as the User Name. Am I on the right track...more >>

Forms Security Authentication.
Posted by Daren Hawes at 8/18/2004 6:52:07 PM
Hi I have done all the plumbing for a Forms Authentication system. My user logs in, I chek password with ADO.NET to a database with 2 fields. IE enteredUsername = dbUsername enteredPassword = dbPassword so I get say bolAutheticated = true How do I manually authenticate this user ...more >>

CurrentPrincipal and new Thread
Posted by marcell NO[at]SPAM ids.co.za at 8/18/2004 4:11:39 PM
I have an ASP webapp that needs to access files using a UNC pathname to a network-share I setup "impersonation" and that all works as expected when executed in the CurrentThread. I need to kick-off a Method which will need exactly the same permissions inside a new,long running, low priori...more >>

Can an iFrame share a System.Threading.Thread.CurrentPrincipal
Posted by drew.. at 8/18/2004 12:36:29 PM
As per the subject line, I have a sub asp.net app that is being displayed in a parent asp.net app. The sub must respect the roles assigned to the System.Threading.Thread.CurrentPrincipal in the parent app. I am having trouble getting the sub to know anything about the parent's security cont...more >>

pass logged on user details into url
Posted by kieran5405 NO[at]SPAM hotmail.com at 8/18/2004 4:28:44 AM
Hi, I am working with users on an intranet. I now want to open a URL so that instead of the user entering their NT login and password, it automatically enters that user's details based on that user logged in. the url is in the form - http://username:password@www.test.com Can any one po...more >>

IIS Web Service 401 Error with Integrated Windows Authentication
Posted by DownUnder at 8/17/2004 10:19:01 PM
Hi, I have 401 Error when I try to invoke an ASP Web Service through a client if Windows Authentication is used. To identify the reason, I built a simple "Hellow World" Web Service that I can successfully invoke using IE (regardless of the authentication type configured in IIS). I ...more >>

Question about privileges required to call LoadUserProfile from ASP.NET webservice
Posted by Shawn Anderson at 8/17/2004 6:34:12 PM
I am trying to call LoadUserProfile from within an ASP.NET webservice. I have set the process to run under an impersonated account that is an administrator -- however, everytime I try to execute the LoadUserProfile call, I get a message saying that a "Required privlege is not help by client"...more >>

Odd security problem
Posted by murphy NO[at]SPAM murphysw.com at 8/17/2004 12:05:10 PM
We had a problem with our .NET applications on one of our application servers (it is not setup to be a domain controller). For some reason the local ASPNET account got locked out resulting in the following error message in the event log: "aspnet_wp.exe could not be launched because the userna...more >>

Strange problem with Forms authentication: After successfull login, login page is still displayed
Posted by blanchard NO[at]SPAM deos.com at 8/17/2004 11:26:46 AM
Hi there I have a quite strange problem with my ASP.NET-Application. The application has being deployed one year ago and worked fine till last month. It's a frame application. So that the user has to enter his credentials to login in the mainframe. This data is validated on a database. If ...more >>

Impersonation problem
Posted by Marc Wuergler at 8/17/2004 11:21:14 AM
Hi ! I'm trying to secure my web application using impersonation within the web.config file as follows : <identity impersonate="true" userName="MyMachine\MyUser" password="MyPassword" /> This gives me the error : Access to "C:\WINNT\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET F...more >>

Session object doesn't work after installing WinXP SP2
Posted by Peter Afonin at 8/17/2004 8:26:14 AM
Hello, I've installed Windows XP SP2 on my development PC. After this any session object in my applications doesn't work anymore. Whatever I put into my session object, when I debug I can see that it has no value. When I upload my application to the server - everything works OK. This started i...more >>

Forms Authentication using Folders
Posted by Daren Hawes at 8/17/2004 2:22:01 AM
Hi I wish to use Forms Authentication and have read the C# demo at Microsoft (Does anyone know of a good VB Demo?) and I need to know if I can protect seperate folders in an application or even seperate files. IE some files/folders will need authentication and some wont. I cant find any exam...more >>

FormsAuthentication without the '?ReturnUrl' variable
Posted by itaitai2003 NO[at]SPAM yahoo.com at 8/17/2004 12:18:38 AM
Does anyone know if there is a way to prevent FormsAuthentication from adding the '?ReturnUrl' to the login page url ? I am always redirecting the user to a specific page upon successful logins. I *don't* wan't to redirect the user to the original page he was trying to access. I am using F...more >>

nested virtual directories
Posted by Ged at 8/16/2004 7:45:52 AM
I am using the Fiefdom techniques ( a seperation of concerns pattern ). I have 2 asp.nET projects, each with their own virtual dir 1. Esa.RefData.WebClient 2. Esa.Common.WebClient Now, RefData.Webclient, needs to use sme user controsl from Common.WebClient. Hence, i copy thr dlls and as...more >>

Login failed for userReason: Not associated with a trusted SQL Server connection.
Posted by DotNetJunkies User at 8/16/2004 5:36:11 AM
using asp.net writing an application to retrieve records from SQL Database but giving error as mentioned in my subject i have kept the settings to windows authentication --- Posted using Wimdows.net NntpNews Component - Post Made from http://www.DotNetJunkies.com/newsgroups Our newsgroup eng...more >>

Active Directory calls failing in production....
Posted by Ollie at 8/15/2004 7:12:34 PM
I know this has been asked before, I have read the answers given and I am unable to get this work ( I don't know that much about AD configuration) I have an asp.net web service that is designed to authenticate and maintain accounts in active directory. It all works fine when the web service is ...more >>

Impersonation and integrated security (+sql server reporting servi
Posted by Phil Aldis at 8/15/2004 5:09:01 AM
Hi, I'm having a little difficulty getting my head round windows integrated security/impersonation and I'd appreciate a little help with the problem I'm trying to solve (or an indication that what I'm trying to do is too hard to be worth it!) To give you the background: I'm developing a ...more >>


DevelopmentNow Blog