Archived Months
July 2003
August 2003
September 2003
October 2003
November 2003
December 2003
January 2004
February 2004
March 2004
April 2004
May 2004
June 2004
July 2004
August 2004
September 2004
October 2004
November 2004
December 2004
January 2005
February 2005
March 2005
April 2005
May 2005
June 2005
July 2005
August 2005
September 2005
October 2005
November 2005
December 2005
January 2006
February 2006
March 2006
April 2006
May 2006
June 2006
July 2006
August 2006
September 2006
October 2006
November 2006
December 2006
January 2007
February 2007
March 2007
April 2007
May 2007
June 2007
July 2007
August 2007
September 2007
October 2007
November 2007
December 2007
January 2008
February 2008
March 2008
April 2008
May 2008
June 2008


all groups > asp.net security > october 2005

Filter by week: 1 2 3 4 5

Accessing Virtural directory on remote machine
Posted by TurboT at 10/31/2005 9:25:56 AM
I have a .net application that I need to write to a directory on a different server. 1. When the dotnet application runs I have initial setup with iss using a virtual directory on same machine. This works fine. 2. Virtual directory to another machine (created the authentication account ...more >>

security help
Posted by tengtium via DotNetMonster.com at 10/29/2005 12:00:00 AM
how can you prevent a user for logging in different computer.. for example.. yahoo implemented this kind of login system.... when you login in a certain computer and try to login in the other computer at the same time... the first login session was automatically logout by the system.... anothe...more >>

IsInRole problem
Posted by Colin Peters at 10/28/2005 9:41:45 PM
Hi, I have the following problem: I've implemented role based security and it worked fine on both my local dev machine and my remote shared host. Now it only works on my dev machine. My shared host had some unidentified problems but I'm not sure they are related so I can't really ask the...more >>

Could not start ASP.NET service on the Local Computer
Posted by Manas at 10/27/2005 10:20:03 AM
Hi Could you please help me with this I am getting this error Could not start ASP.NET service on the Local Computer Error 1069:- The service did not start due to login failure I changed the password of ASPNET user and tried to start the service , but still I couldn't start it. Can yo...more >>

HttpContext.Current.User.Identity.Name & ServerVariable("LOGON_USE
Posted by Barry at 10/26/2005 5:58:01 AM
I have an Intranet application that uses the System.Web.HttpContext.Current.User.Identity.Name to grab the DOMAIN\USERNAME of the current user. SCENARIO: The user logs into their machine with their id/password and authenicates against the domain. Fine. That works. However, when this u...more >>

Upload files
Posted by SalamElias at 10/25/2005 10:22:02 PM
Hi, I have a page where I allow some people upload to one directory some images. What is the best praéctices or what permissions I should grant (IUSR..., everyone, aspnet.......) so my logged users (using forms not NT authentification) can upload to one directory and not others. I was oblig...more >>

Add extra parameter to Login/Membership - ASP 2.0
Posted by David Sack at 10/24/2005 4:21:07 PM
I hope can explain this properly. I have a time keeping site that host multiple companies data in a single database. I would like the logins to be unique for each company but not across the entire site (i.e. I could have two jsmith logins as long as they are with seperate companies). I...more >>

How to config the web.config for both Internal and External users using Windows and Forms Authentication?
Posted by ABC at 10/24/2005 2:09:55 PM
I have a new project which is a web site used by Internal and External users (login required users) and public users (no login required users). On internal users, all users login network using Windows or Forms authentication login. External users will use Forms authentication login. Both a...more >>



FormsAuthentication.SignOut(); doesn't work...
Posted by mo at 10/23/2005 2:18:01 AM
my current project uses FormsAuthentocation.. I need a logoff page - may logo off page contains the following in the Page_Load: Session.Abandon(); FormsAuthentication.SignOut(); After 'logging off', HttpContext.Current.User.Identity.IsAuthenticated and Request.IsAuthenticated is still t...more >>

How to prevent the logined user record is existing when I closed browser.
Posted by ABC at 10/23/2005 12:00:00 AM
I write a web site with security and role management using ASP.NET's security management system. Once a user logined, then Close browser. Re-open Browser to enter web site, the last logined user id is existing. How can prevent this case? Thanks ...more >>

retrieving windowsidentity using the logon name only?
Posted by Jéjé at 10/21/2005 11:23:40 PM
Hi, In this article: http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnpag2/html/paght000023.asp there is a section called "Impersonating by Using the WindowsIdentity Constructor", I try it, but I receive a "There are currently no logon servers available to service t...more >>

asp.net sql trusted connections between servers
Posted by Rob at 10/21/2005 8:29:04 AM
So we have a client who doesn't want to run a Service Level Account (either via an Application Pool or IIS impersonation) and we need to connect to a remote SQL Server instance w/ Read-Write permissions. They don't want to do it that way due to the maintenance issues with passwords in multip...more >>

Problem calling COM object
Posted by smoser16 at 10/20/2005 1:51:06 PM
Hi all, I have developed a web project in ASP.NET that uses a legacy COM object (developed in VB6) by creating a wrapper using TlbImp.exe. Everything works fine on the Web server on Windows 2000, but I've been trying to move to Windows 2003 and everytime a call is made to the COM object th...more >>

Save File to Different Domain - 2nd Post
Posted by BethC327 at 10/20/2005 1:01:07 PM
Sorry to re-post, but apparently I was not registered correctly to receive a reply when I posted this the first time. I need to save a file from an ASP.Net page to a folder on a separate file server. The file server is on a different domain than the web server. I have been told that due...more >>

Forms based authentication + multiple applications + directory service....
Posted by Jéjé at 10/20/2005 12:57:00 PM
Hi, I have to implement a security like this: 1. The user is logged into a home made extranet in PHP, a directory server is used (not the active directory) (its a form based authentication) 2. the user click on a link on the extranet application and jump to another server & application whic...more >>

Encrypt with password
Posted by Bishoy George at 10/20/2005 6:50:49 AM
I want a class for encryption that takes a password or key and a string and use the key to encrypt the string, so the decrypt method of that class will never decrypt the encrypted string without giving it the same key. Thanks, Bishoy ...more >>

How to authenticate to iPlanet server using LDAPS?
Posted by JohnnyO''''Clock NO[at]SPAM community.nospam at 10/18/2005 10:39:02 PM
I've been trying to build an LDAP provider in ASP.Net 2.0. I know the basic steps are to search the directory for user object, grab the full user object context and bind to it securely, and then attempt to authenticate by sending the username and password. I can't find any documentation on usi...more >>

Same Application with Web and Desktop Application Interface
Posted by b>Khurram
Hi All, I am required to design and build an application which would have two flavors i.e. Web Application and a Desktop Application ( without internet access). i need to keep data synchronized b/w these two applications. The functionality of the both applications is same. I...more >>

Basic Security Control Question Please.
Posted by ChristianProgrammer at 10/18/2005 9:12:15 AM
We Have a solution with some odd 19 or so projects one of which is a ASP.NET E-Commerce web site. The remaining projects support same in some way or another. Customer Support, Order Tracking,, whatever... I created a Wonderful Custom Data Grid Control for Win Forms (we write in C#) based u...more >>

Sharing session objects across the projects
Posted by Rahul at 10/18/2005 4:26:42 AM
Hi, I have a solution which consists of two web projects. I am calling a web page in project2 from project1. Before calling a web page from project2 I set some value in session from a web page in project1. Later on web page in project2 I tru to acces the value i stored in the session but am n...more >>

Explorer doesn't load asp files
Posted by orly at 10/17/2005 11:58:02 AM
when loading asp files through the folder it's located at - it works but when loading throuhg IE it fails to load, if I change the extension to html it loads with not a problem. It seems like just asp extension and asa extensions are blocked. Appreciate advice...more >>

HttpContext.Current.User.Identity.IsAuthenticated
Posted by paul NO[at]SPAM domainscanners.com at 10/17/2005 9:46:38 AM
Hi, Quick question - does HttpContext.Current.User.Identity.IsAuthenticated perform a hit on the database if using forms authentication? Just wondering if I should perform this once when a user logs into my site then store in a session as to not repeatidly hit the database as the user navig...more >>

How do I fix this error: "The current identity (NT AUTHORITY\NETWORK SERVICE) does not have write access to "
Posted by TheBurgerMan at 10/17/2005 9:38:17 AM
Hi all. I am using W2K3, .NET2 on a machine running AD and Exchange. I started getting the message below last week. I googled the error and not much was returned, but I did find this; http://forums.asp.net/918725/ShowPost.aspx I tried both items in the forum and it works for a few hits then...more >>

How to get session value at where out of asp.net process domain?(session ID is known)
Posted by ocean at 10/16/2005 12:00:00 AM
The scenario: I have a web application(asp.net); This web application need an ACTIVEX control to perform some advanced communication work; The activex control run at where out of web application process.(run at customer's computer).Now the question is,how the control login to the ...more >>

Urgent Plz
Posted by Yoshitha at 10/15/2005 9:50:17 AM
HI i've asp.net aplication and it is working fine in all systems but when i uploaded it into clients server and trying to run the aplication then i'm getting the following error Server Error in '/' Application. --------------------------------------------------------------------------...more >>

Impersonate domain user account from DMZ
Posted by Shawn at 10/14/2005 9:25:15 AM
Hi. I have a VB.NET application that retrieve files from a file-share on our network. In the program I impersonate a user account on our domain that has access to the file-share. This works fine inside the network, but when I run the program from our DMZ zone I'm unable to impersonate. When I...more >>

How to config and use the role manager on my ASP.NET?
Posted by ABC at 10/14/2005 12:00:00 AM
How to config and use the role manager on my ASP.NET? ...more >>

integrated login and folder permissions
Posted by fuzzyreality NO[at]SPAM gmail.com at 10/13/2005 9:07:35 AM
I am running and asp.net site with IIS6.0. I have integrated login turned on and it works fine for all our users. However, I am trying to prevent all but specific groups of users from having access to specific folders on the website. I tried doing this by setting the permissions on the folders...more >>

How can I make an aspx page bypass forms authentication?
Posted by itchy_0305 at 10/13/2005 5:37:40 AM
Hi guys, I just registered in this site. Its a great site and I'v learned a lot by just reading your forums.... I'm new to dotnet and I have a question... I'm creating a Site and using forms authentication for my secured pages. My problem is that all aspx pages cannot be accessed unle...more >>

AD roles from a username
Posted by thomas.solbjor NO[at]SPAM gmail.com at 10/13/2005 12:20:09 AM
Hi, I have custom membership database which I want to add members to automaticcally based on AD username. I have a database with a list of users and their AD username. I want to loop these users and query AD to get their roles based on just their username. Alle the samples I have found rela...more >>

Membership Login Question
Posted by TdarTdar at 10/12/2005 4:16:01 PM
HI, I have a website I created on my local system with vs 2005 beta2 and used a membership database on our sql server, MS login controls etc.. when I published this site from my machine to the webserver(using the same database SQLmembership provider) the login info i had already setup has...more >>

Requested registry access is not allowed.
Posted by Web Developer at 10/12/2005 12:21:03 PM
When errors occur in my ASP.Net apps, I write them to the application event log. However, I can't write to the log if my web app isn't registered as a valid EventLog source (as designated by the HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application\ registry key). If my...more >>

Getting attributs for membership provider from web.config
Posted by news.microsoft.com at 10/12/2005 10:22:09 AM
How can get the values of for example RequiresUniqueEmail from my own membershipprovider? Using is System.Web.Security.Membership.RequiresQuestionAndAnswer; is not an option because it will call the property from the membership provider. <membership userIsOnlineTimeWindow="15" defaultProv...more >>

Delegation with S4U or How to use S4U to impersonate a user on a remote server?
Posted by Borislav Marinov at 10/11/2005 7:04:27 PM
How to use S4U to impersonate a user on a remote server (delegation) In an Active Directory domain (2003), I have the following setup: A Client computer, an application computer, one or more backend servers and a domain controller. The user connects (remotely) to the application running on the ...more >>

Question about handles when doing impersonation.
Posted by Ken Varn at 10/11/2005 3:39:32 PM
I am using WindowsIdentity.Impersonate() to impersonate using a logon token acquired from the Win32 LogonUser account. I was wondering if it is safe to close the LogonUser handle passed to the WindowsIdentity constructor while the WindowsIdentity object is still in use, or does the WindowsIden...more >>

Stumped w/ vague com exception error -- "Error 0x80004005 occurred."
Posted by Bill Youngman at 10/11/2005 9:36:29 AM
Not sure if this is the right forum but my searches on this error code seem to be pointing to a security issue. Here's what I have-- I am trying to change a users password in my client's document management system through a .net web app that I am developing using C# and the core services ap...more >>

IsInRole always returns false?
Posted by Dave at 10/11/2005 9:05:03 AM
Hi, I'm using Windows authentication with impersonation turned on but I wanted to pull user roles from my database. Once I person logs in, I want to check their roles. I have the following code that loads an array of roles for a person(hardcoded in this sample but will be pulled from a d...more >>

IIS and FQDN authentication confusion
Posted by Stu Carter at 10/11/2005 12:00:00 AM
Hi, ENV: Windows 2003 Server SP1, IIS6, .Net 1.1 I'd like to know why the authentication and delegation differs when accessing a web site using the Fully Qualified Domain Name as opposed to 'localhost'. We have an ASP.Net application which has only 'Integrated authentication' enabled ...more >>

.Net client and SSL mutual authentication : 403 Forbidden, client certificate not sent
Posted by Mfenetre at 10/10/2005 7:09:18 AM
Hello all, I'm trying to build a .Net client connecting to a Web service and I want to use SSL with mutual authentication. The web service is designed to require a client certificate. I use .Net Framework v1.1.4322, IIS 6.0, Windows 2003 Srv and Visual Studio. So far I've been able to se...more >>

Where is the user impersonation token stored?
Posted by Gery D. Dorazio at 10/10/2005 4:02:00 AM
When a user visits a web site and is authenticated through the popup dialog box (Windows authentication) he enters his username and password. Evidently this creates the users impersonation token that is used on subsequent requests to secured web pages. On subsequent requests the WindowsAuthe...more >>

Forms Authentication
Posted by Rich at 10/9/2005 10:59:00 PM
I'm new to ASP.net I went to a whats new in 2.0 in pittsburgh and am trying to put together a little demonstration for my company, I wanted to have a basic login page to chage the site theme. But everytime I got into the configureation page select form authentocation and try to create a user i...more >>

Error msg when doing client-side authentication
Posted by David Martin at 10/8/2005 7:51:01 PM
Hi, I am trying to make a request from a web service to an external site which uses https. I have a certificate (.p12 format) from them. I have performed the following steps: 1. Exported the certificate to DER encoded .CER file. 2. Imported the certificate into the Trusted Root CA of the loca...more >>

IE prompts for password, even though Forms Authentication is used
Posted by Charles Forsyth at 10/8/2005 5:16:46 PM
Hi all, I have an ASP.Net application that has worked swell on both my development environment and production for some time now. Development is running on a WinXP Pro box, Production is running on a Win 2000 Server. However, the other day we had to move the application to another server. T...more >>

How to read (non-event log) registry keys as ASP .NET process
Posted by rhenders at 10/7/2005 7:46:03 AM
Can someone please outline the required steps to allow the ASPNET user to read selected registry keys? Here is what I've tried so far: I've created (copied) the DPAPI implementation from MSDN into an assembly called DataProtection. This works fine as long as the ASPNET process runs as SY...more >>

Thread identity
Posted by Raster Space at 10/6/2005 10:47:39 PM
I have managed Web Application running on ASPNET user rights. How can I execute certain (not all) methods with administrator privileges? Any ideas?...more >>

Forms authentication across apps - missing something basic?
Posted by Geoff Pennington at 10/6/2005 9:52:05 AM
I have two applications running on the same server. The URL for one is http://mydomain/app1/ and the other is http://mydomain/app2/ . Currently the login and authentication is handled by each application, but we want to use one login screen that will handle authentication for both apps. We hav...more >>

Cryptography.
Posted by Bala Nagarajan at 10/5/2005 5:51:01 PM
Hello, I am using .NET's cryptography classes(Symmetric algorithm) to encrypt/decrypt strings and streams. I want to know the place i should store the Key and the IV values for the algorithms?Since these values are sensitive information i definitely cannot store them in the code or con...more >>

Integrated Authentication with SQL
Posted by Scott Elgram at 10/5/2005 2:14:13 PM
Hello, I am trying to create a site using integrated windows authentication to access SQL databases. All the tutorials I have found so far require that both SQL server and IIS reside on the same server. This is a problem for me because I need to access multiple SQL servers from the same si...more >>

Windows authentication and user info
Posted by C Trailer at 10/5/2005 2:13:04 PM
Hi, thanks in advance for any help. I'm trying to simply get user info (properties) from AD based on the current user. ie. after a user is authenticated via IIS, i want to programatically look up info from AD about the user, like displayname, group membership, email, etc. I'm using asp....more >>

Forms authentication and search engines
Posted by Guy Incognito at 10/5/2005 8:57:19 AM
Hello, Can forms authentication in asp.net be set up so that search engines like Google can get through? My client wants their site to force visitors to register before they can read the content, but still wants search engines like Google to index the content. Is this possible? Thank...more >>


DevelopmentNow Blog