all groups > asp.net security > august 2004
Filter by week: 1 2 3 4 5
Problems with page aspx
Posted by Silvia at 8/31/2004 11:11:03 PM
Hi
I have a windows service that run a aspx page in the url
http://ip/raimserver/ris/cpr002.asxp with user and password and produce an
error:
Time-Out sending request. RIS server can be down. Exception is
:System.Net.WebException: The remote server returned an error: (401)
Unauthorized.
... more >>
Login failed for user '(null)'. Reason: Not associated with a trusted SQL Server connection.
Posted by DC Gringo at 8/31/2004 10:30:17 PM
Using latest SP Win2k and .NET versions, I have a .NET application running
on server1 with a SQL Server database running on server2. I have the
Windows user account passwords sync'd for server1\aspnet (installed by .NET
Framework and server2\aspnet (created by me--this machine has no .NET
Frame... more >>
DllImport Error
Posted by tetci NO[at]SPAM pyazilim.com at 8/31/2004 6:14:19 AM
Hello friends,
I need to load an unmanaged dll(which i wrote for license control)
from system32 folder and then my asp. net project will read the values
from there.(I'll write the full code to the bottom)
I get an "Object reference is not set an instance of an object
error"...This code works ... more >>
Accessing objects in active directory via asp.net
Posted by toufani NO[at]SPAM gmail.com at 8/31/2004 5:30:13 AM
Hi everybody,
I want to retrieve information about objects in active directory
windows 2000 and their properties. I got some codes that don't work
absolutely. for example I can't retrieve users list and group list
separatedly.there is my code that downloaded from the internet :
public class... more >>
Login failed for user '(null)'. Reason: Not associated with a trusted SQL
Posted by Brian Fulford at 8/30/2004 4:30:12 PM
I am losing lots of hair over this issue. We are trying to implement windows
authentication from a web server to a database server.
The web server is on a domain; the db server is not... does this matter?
the IUSR_machinename user from the web server has been added as an account
on the db server... more >>
WindowsPrincipal.IsInRole() problem with non-builtin roles
Posted by naijacoder naijacoder at 8/29/2004 11:53:10 PM
Can't get WindowsPrincipal.IsInRole() to work for me when using
Windows Authentication. Here's a snippit of code from my C#
codebehind page:
WindowsPrincipal wp = new WindowsPrincipal(
WindowsIdentity.GetCurrent() );
lblUser.Text = wp.Identity.Name;
Label1.Text = wp.IsInRole(@"DOMAIN... more >>
Windows autentication with WindowsPrinicipal
Posted by naijacoder naijacoder at 8/29/2004 9:11:45 PM
Hello,
I'm using Windows Authenetication with my code below with
Windows Principal.
I noticed that when i use IsinRole with "BUILT\Administrator its does
work fine but when i use
DomainName\GroupName it doesn't go.
Does anybody know what 'm doing wrong?
Pls forward ur ideas!
Than... more >>
Required permissions to set Process.PriorityClass in Win 2003 serv
Posted by Paul Roberts at 8/29/2004 9:11:07 PM
Hi All,
I have an asp.net application that needs to set it's priority to normal, but
I get access denied when the below code executes. The reason I have to do
this is I use a third party com component and it changes the priority to
high, so I want to bang it on the head to make it normal a... more >>
Don't see what you're looking for? Search DevelopmentNow.com.
authorization different paths and roles
Posted by Matias Woloski at 8/28/2004 6:37:44 PM
I have this authorization config in my web.config
<location path="manager">
<system.web>
<authorization>
<deny users="?" />
<allow roles="admins" />
</authorization>
</system.web>
</location>
<location path="resourcemgr">
<system.web>
... more >>
Windows Authentication with Asp.net and against Active Directory
Posted by Patrick at 8/28/2004 4:21:01 PM
How can i use Windows authentication in IIS against AD.
How will i create a WindowsPrincipal object(with asp.net) in the
Context.User property that is used for providing identity and authorization
services to my application.
How will i use the IsInRole method in WindowsPrincipal to return tru... more >>
Load balancing loses authentication
Posted by jhcorey NO[at]SPAM yahoo.com at 8/27/2004 6:31:50 AM
My intranet ASP.NET web app is set up with Windows authentication and
IIS is set to disallow anonymous access.
The app is in a web farm configuration with two blade servers and
a BigIP F5 switch set with sticky sessions.
When I use the app and refresh the screen, the next thing I do in the... more >>
MD5 conversion problem
Posted by Peter Afonin at 8/26/2004 7:37:01 PM
Hello,
I'm struggling with the string conversion to MD5 which I've never user
before.
I have a string that I need to encode which looks approximately like this:
"pva:0.05:101214:pa7735tH:inv_desc=205308:shp_Email=petera_gudzon.net:lang
=ru:shp_PaymentNo=20040825205308:shp_UserID=pva:shp_P... more >>
issues mixing integrated Windows authentication and anonymous on same application
Posted by developer at 8/26/2004 10:46:59 AM
I'm having issues mixing integrated Windows authentication and anonymous
access on same IIS app.
Basically, any post back event fails (Forms collection empty and control's
event handler never called) on anonymous page when:
1 - user opens an aspx page that requires integrated Windows authent... more >>
ASP.NET with ADirectory role based authentication
Posted by naijacoder naijacoder at 8/25/2004 11:21:57 PM
Hi Everyone,
I have some Questions relating to Active Directory and
Asp.net.
1)I have created a role based authorisation using SQL Server but i want
to use
Active Directory as a datastore now?
2)Now if i want to allow the user to login credentials against the
Active directory and t... more >>
DPAPI and config files
Posted by Dan Amiga at 8/25/2004 12:19:50 PM
Hello. This is about DPAPI and configuration files.
Basically, what I understand is when loading the exe assembly the framework
takes parameters from the config file and loads them.
I want to store THE ENTIRE web.config ( or any other config file ) using
DPAPI.
That is - I want to develop a c... more >>
Disallowing concurrent login using the same user account
Posted by Zeng at 8/25/2004 10:21:56 AM
I would like to prevent someone sharing a login in my .net app but I know
that it would
know that would be difficult so it would be acceptable to prevent concurrent
logins. So here is my current plan, each time a user logins we will create
a unique id (a guid for example) and store it both in t... more >>
Impersonation Stops Language Resources Working
Posted by comedy_limp NO[at]SPAM yahoo.co.uk at 8/25/2004 2:48:23 AM
(This is a repost from the internationalization group where I am getting no joy)
Hi,
My ASP.NET application has internationalised string resources via
satellite assemblies in the usual way. Everything was working fine
and changing culture correctly switched the resources into the
appropria... more >>
running a windows service from asp
Posted by fred at 8/24/2004 5:54:40 AM
I need a asp appli enabled to start/stop a web service
I'm using ServiceController for that, but encounter a
access denied problem when I try to start or stop the
service.
This problem is perfectely normal and well documented.
But I can't solve it.
My asp application ask for Windows au... more >>
DPAPI Enterprise Services Example
Posted by Bill Heckle at 8/24/2004 12:19:01 AM
I am trying to work through the sample from msdn, "How To Use DPAPI (User
Store) from ASP.NET with Enterprise Services". I thought I had everything
configured correctly. I tried to test the service and get the following
error.(Sorry for encluding every line). I am confused as to what setting i... more >>
Return credentials with anonymous authentication?
Posted by Shimon Facterman at 8/23/2004 5:44:39 PM
Hi all,
This is my Scenario:
Have a login page in Application 1 with Anoynoumous authentication.
Using this login page I would like to receive credentials from Active
Directory (using Directoryservices I assume),
and somehow return them back to the client browser as if I made login in a
Wind... more >>
Disallow sharing the same login
Posted by Zeng at 8/23/2004 4:18:42 PM
Hello,
I'm not sure if this is the right newsgroup. I'm wondering if anyone out
there are experienced with solving this problem and can share your opinion
or give me some advice. I'm planning to disallow multiple users of our .net
application to share the same login. How do I do that? Track... more >>
Help with A.D. and ASP.Net
Posted by Reas at 8/22/2004 5:59:02 PM
Hi, I'm trying to validate the user credentials against an Active Directory,
I've seen some demos around but in the enviroment I'm going to be working on,
most users have restrictions that prohibit them to logon to certain
machines/servers, so, my question is, should I have to do something spe... more >>
windows reauthorisation checkpoints?
Posted by Martin at 8/21/2004 3:45:18 PM
Hi,
I have an ASP.Net application with authentication mode = windows.
It works fine, but I would like to guard against people leaving their
workstations and someone else using their PC. Locking PCs, or using
password protected screen savers is not preferred.
Is it possible to have checkp... more >>
Authentication security help needed
Posted by sqlprob NO[at]SPAM yahoo.fr at 8/21/2004 2:36:24 PM
I am new to asp.net and c#.
Only some web pages of my application need users to be logged in.
How do I need to set the web.config to restrict only some forms?... more >>
AD forms authentication
Posted by hari at 8/20/2004 5:06:52 PM
I am trying to authenticate to ad using this how-to
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnnetsec/html/secnetlpMSDN.asp
The server is W2k3 and auth hangs here:
****************************************************************************
****
string adPath = @"mypat... more >>
ValidateRequest="false" ?
Posted by Raterus at 8/20/2004 3:28:28 PM
I'm having to set ValidateRequest=3D"false" on one of my pages because =
users need to enter a value that contains an html tag (well asp.net =
think it is anyway). I understand why the "potentially dangerous =
request.form detected" error and why it is being thrown, but my question =
is:
Wha... more >>
Form authentication in a virtual directory
Posted by John Boghossian at 8/20/2004 2:11:13 PM
Is it possible to get forms authentication to work for a virtual directory
in a site?
I have been trying with the simplest MSDN sample but it doesn't seem to
work. I have tried in a virtual directory on my dev box and on a virtual
directory on a production server, but I never get authenticated, ... more >>
Configuring security for a site in Windows 2003
Posted by Chris Leffer at 8/20/2004 12:22:12 PM
Hi.
I am developing my first web site using asp.net and IIS 6 and have some
doubts about security. My site will be available on the internet and my
users won't use windows integrated security. The authentication process
relies on a database and forms authentication. But I also wants to
restri... more >>
Webservice IsInRole and LDAP to AD
Posted by Harold at 8/19/2004 10:03:11 PM
Can someone explain to me why IsInRole will work, but using
DirectorySearcher will not? The code is running in a business object behind
a webservice. The user's credentials (windows authenication) are being
passed to the webservice. The webservice is configured for "integrated
windows autheni... more >>
How to generate an MD5 data from the string
Posted by Peter Afonin at 8/19/2004 9:48:22 PM
Hello,
I've never been dealing with the security before. Could you please help me
to write a code to generate an MD5 data from a string? I've been using this
example from MSDN:
Function MD5hash(data() As Byte) As Byte()
' This is one implementation of the abstract class MD5.
Dim md... more >>
Binding DirectoryEntry to AD object via GUID
Posted by Gary K at 8/19/2004 6:33:01 PM
I notice in the help files a reference that implies that you can create a
DirectoryEntry object that binds directly to an active directory object vai
it's GUID. The properties where I found this reference are the Guid and
NativeGuid properties. I cannot locate where or how to do this, the
Di... more >>
How logout in code that using Window Authentication?
Posted by Neil at 8/19/2004 5:37:26 PM
Hi,
We using Window Autoentication, but we want logout in our code, how
should i do?
Thanks.
Neil.
... more >>
Problem with Web Forms authentication in IFrame.
Posted by Ken Varn at 8/19/2004 11:26:48 AM
I have a ASP.NET web page that I have implemented using Web Forms
authentication. It seems to work pretty good except for one problem which I
am not quite sure I understand. My main HomePage.aspx contains an IFrame
which displays other ASPX pages. If I refresh the main HomePage.aspx after
the... more >>
ASP.NET Anonymous Impersonation
Posted by sam at 8/19/2004 9:17:52 AM
Hi,
When you impersonate with anonymous security what is suppose to happen (IIS5
platform). Is it the aspnet_wp.exe process runs under the identity of the
anonymous user? When I look in the task manager the aspnet_wp.exe process
always lists ASPNET as the User Name. Am I on the right track... more >>
Forms Security Authentication.
Posted by Daren Hawes at 8/18/2004 6:52:07 PM
Hi I have done all the plumbing for a Forms Authentication system.
My user logs in, I chek password with ADO.NET to a database with 2
fields.
IE
enteredUsername = dbUsername
enteredPassword = dbPassword
so I get say
bolAutheticated = true
How do I manually authenticate this user ... more >>
CurrentPrincipal and new Thread
Posted by marcell NO[at]SPAM ids.co.za at 8/18/2004 4:11:39 PM
I have an ASP webapp that needs to access files using a UNC pathname to a
network-share
I setup "impersonation" and that all works as expected when executed in the
CurrentThread.
I need to kick-off a Method which will need exactly the same permissions
inside a new,long running, low priori... more >>
Can an iFrame share a System.Threading.Thread.CurrentPrincipal
Posted by drew.. at 8/18/2004 12:36:29 PM
As per the subject line, I have a sub asp.net app that is being
displayed in a parent asp.net app. The sub must respect the roles
assigned to the System.Threading.Thread.CurrentPrincipal in the parent
app. I am having trouble getting the sub to know anything about the
parent's security cont... more >>
pass logged on user details into url
Posted by kieran5405 NO[at]SPAM hotmail.com at 8/18/2004 4:28:44 AM
Hi,
I am working with users on an intranet. I now want to open a URL so
that instead of the user entering their NT login and password, it
automatically enters that user's details based on that user logged in.
the url is in the form -
http://username:password@www.test.com
Can any one po... more >>
IIS Web Service 401 Error with Integrated Windows Authentication
Posted by DownUnder at 8/17/2004 10:19:01 PM
Hi,
I have 401 Error when I try to invoke an ASP Web Service through a client if
Windows Authentication is used.
To identify the reason, I built a simple "Hellow World" Web Service that I
can successfully invoke using IE (regardless of the authentication type
configured in IIS).
I ... more >>
Question about privileges required to call LoadUserProfile from ASP.NET webservice
Posted by Shawn Anderson at 8/17/2004 6:34:12 PM
I am trying to call LoadUserProfile from within an ASP.NET webservice. I
have set the process to run under an impersonated account that is an
administrator -- however, everytime I try to execute the LoadUserProfile
call, I get a message saying that a "Required privlege is not help by
client"... more >>
Odd security problem
Posted by murphy NO[at]SPAM murphysw.com at 8/17/2004 12:05:10 PM
We had a problem with our .NET applications on
one of our application servers (it is not setup to be a domain
controller). For some reason the local ASPNET account got
locked out resulting in the following error message in the event log:
"aspnet_wp.exe could not be launched because the userna... more >>
Strange problem with Forms authentication: After successfull login, login page is still displayed
Posted by blanchard NO[at]SPAM deos.com at 8/17/2004 11:26:46 AM
Hi there
I have a quite strange problem with my ASP.NET-Application.
The application has being deployed one year ago and worked fine till
last month.
It's a frame application. So that the user has to enter his
credentials to login in the mainframe. This data is validated on a
database. If ... more >>
Impersonation problem
Posted by Marc Wuergler at 8/17/2004 11:21:14 AM
Hi !
I'm trying to secure my web application using impersonation within the
web.config file as follows :
<identity impersonate="true"
userName="MyMachine\MyUser"
password="MyPassword" />
This gives me the error : Access to
"C:\WINNT\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET
F... more >>
Session object doesn't work after installing WinXP SP2
Posted by Peter Afonin at 8/17/2004 8:26:14 AM
Hello,
I've installed Windows XP SP2 on my development PC. After this any session
object in my applications doesn't work anymore. Whatever I put into my
session object, when I debug I can see that it has no value. When I upload
my application to the server - everything works OK. This started i... more >>
Forms Authentication using Folders
Posted by Daren Hawes at 8/17/2004 2:22:01 AM
Hi I wish to use Forms Authentication and have read the C# demo at
Microsoft (Does anyone know of a good VB Demo?) and I need to know if I
can protect seperate folders in an application or even seperate files.
IE some files/folders will need authentication and some wont.
I cant find any exam... more >>
FormsAuthentication without the '?ReturnUrl' variable
Posted by itaitai2003 NO[at]SPAM yahoo.com at 8/17/2004 12:18:38 AM
Does anyone know if there is a way to prevent FormsAuthentication from
adding the '?ReturnUrl' to the login page url ?
I am always redirecting the user to a specific page upon successful
logins.
I *don't* wan't to redirect the user to the original page he was
trying to access.
I am using F... more >>
nested virtual directories
Posted by Ged at 8/16/2004 7:45:52 AM
I am using the Fiefdom techniques ( a seperation of
concerns pattern ).
I have 2 asp.nET projects, each with their own virtual dir
1. Esa.RefData.WebClient
2. Esa.Common.WebClient
Now, RefData.Webclient, needs to use sme user controsl
from Common.WebClient.
Hence, i copy thr dlls and as... more >>
Login failed for userReason: Not associated with a trusted SQL Server connection.
Posted by DotNetJunkies User at 8/16/2004 5:36:11 AM
using asp.net writing an application to retrieve records from SQL Database but giving error as mentioned in my subject
i have kept the settings to windows authentication
---
Posted using Wimdows.net NntpNews Component -
Post Made from http://www.DotNetJunkies.com/newsgroups Our newsgroup eng... more >>
Active Directory calls failing in production....
Posted by Ollie at 8/15/2004 7:12:34 PM
I know this has been asked before, I have read the answers given and I am
unable to get this work ( I don't know that much about AD configuration)
I have an asp.net web service that is designed to authenticate and maintain
accounts in active directory. It all works fine when the web service is ... more >>
Impersonation and integrated security (+sql server reporting servi
Posted by Phil Aldis at 8/15/2004 5:09:01 AM
Hi,
I'm having a little difficulty getting my head round windows integrated
security/impersonation and I'd appreciate a little help with the problem I'm
trying to solve (or an indication that what I'm trying to do is too hard to
be worth it!)
To give you the background: I'm developing a ... more >>
|