I have a .net application that I need to write to a directory on a different
server.
1. When the dotnet application runs I have initial setup with iss using a
virtual directory on same machine. This works fine.
2. Virtual directory to another machine (created the authentication account
...
more >>
how can you prevent a user for logging in different computer.. for example..
yahoo implemented this kind of login system.... when you login in a certain
computer and try to login in the other computer at the same time... the first
login session was automatically logout by the system....
anothe...
more >>
Hi,
I have the following problem:
I've implemented role based security and it worked fine on both my local
dev machine and my remote shared host. Now it only works on my dev
machine. My shared host had some unidentified problems but I'm not sure
they are related so I can't really ask the...
more >>
Hi
Could you please help me with this
I am getting this error
Could not start ASP.NET service on the Local Computer
Error 1069:- The service did not start due to login failure
I changed the password of ASPNET user and tried to start the service , but
still I couldn't start it.
Can yo...
more >>
I have an Intranet application that uses the
System.Web.HttpContext.Current.User.Identity.Name to grab the DOMAIN\USERNAME
of the current user.
SCENARIO:
The user logs into their machine with their id/password and authenicates
against the domain. Fine. That works. However, when this u...
more >>
Hi,
I have a page where I allow some people upload to one directory some images.
What is the best praéctices or what permissions I should grant (IUSR...,
everyone, aspnet.......) so my logged users (using forms not NT
authentification) can upload to one directory and not others.
I was oblig...
more >>
I hope can explain this properly. I have a time keeping site that host
multiple companies data in a single database. I would like the logins to be
unique for each company but not across the entire site (i.e. I could have
two jsmith logins as long as they are with seperate companies).
I...
more >>
I have a new project which is a web site used by Internal and External users
(login required users) and public users (no login required users). On
internal users, all users login network using Windows or Forms
authentication login. External users will use Forms authentication login.
Both a...
more >>
my current project uses FormsAuthentocation.. I need a logoff page -
may logo off page contains the following in the Page_Load:
Session.Abandon();
FormsAuthentication.SignOut();
After 'logging off', HttpContext.Current.User.Identity.IsAuthenticated and
Request.IsAuthenticated is still t...
more >>
I write a web site with security and role management using ASP.NET's
security management system. Once a user logined, then Close browser.
Re-open Browser to enter web site, the last logined user id is existing.
How can prevent this case?
Thanks
...
more >>
Hi,
In this article:
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnpag2/html/paght000023.asp
there is a section called "Impersonating by Using the WindowsIdentity
Constructor",
I try it, but I receive a "There are currently no logon servers available to
service t...
more >>
So we have a client who doesn't want to run a Service Level Account
(either via an Application Pool or IIS impersonation) and we need to
connect to a remote SQL Server instance w/ Read-Write permissions. They
don't want to do it that way due to the maintenance issues with
passwords in multip...
more >>
Hi all,
I have developed a web project in ASP.NET that uses a legacy COM object
(developed in VB6) by creating a wrapper using TlbImp.exe. Everything works
fine on the Web server on Windows 2000, but I've been trying to move to
Windows 2003 and everytime a call is made to the COM object th...
more >>
Sorry to re-post, but apparently I was not registered correctly to receive a
reply when I posted this the first time.
I need to save a file from an ASP.Net page to a folder on a separate file
server. The file server is on a different domain than the web server. I
have been told that due...
more >>
Hi,
I have to implement a security like this:
1. The user is logged into a home made extranet in PHP, a directory server
is used (not the active directory) (its a form based authentication)
2. the user click on a link on the extranet application and jump to another
server & application whic...
more >>
I want a class for encryption that takes a password or key and a string and
use the key to encrypt the string, so the decrypt method of that class will
never decrypt the encrypted string without giving it the same key.
Thanks,
Bishoy
...
more >>
I've been trying to build an LDAP provider in ASP.Net 2.0. I know the basic
steps are to search the directory for user object, grab the full user object
context and bind to it securely, and then attempt to authenticate by sending
the username and password. I can't find any documentation on usi...
more >>
Posted by b>Khurram
Hi All,
I am required to design and build an application which
would have two
flavors i.e. Web Application and a Desktop Application (
without
internet access).
i need to keep data synchronized b/w these two
applications.
The functionality of the both applications is same.
I...
more >>
Basic Security Control Question Please.
Posted by ChristianProgrammer at 10/18/2005 9:12:15 AM
We Have a solution with some odd 19 or so projects one of which is a ASP.NET
E-Commerce web site.
The remaining projects support same in some way or another. Customer
Support, Order Tracking,, whatever...
I created a Wonderful Custom Data Grid Control for Win Forms (we write in
C#)
based u...
more >>
Sharing session objects across the projects
Posted by Rahul at 10/18/2005 4:26:42 AM
Hi,
I have a solution which consists of two web projects. I am calling a
web page in project2 from project1. Before calling a web page from
project2 I set some value in session from a web page in project1. Later
on web page in project2 I tru to acces the value i stored in the
session but am n...
more >>
Explorer doesn't load asp files
Posted by orly at 10/17/2005 11:58:02 AM
when loading asp files through the folder it's located at - it works
but when loading throuhg IE it fails to load, if I change the extension to
html it loads with not a problem.
It seems like just asp extension and asa extensions are blocked.
Appreciate advice...
more >>
HttpContext.Current.User.Identity.IsAuthenticated
Posted by paul NO[at]SPAM domainscanners.com at 10/17/2005 9:46:38 AM
Hi,
Quick question - does HttpContext.Current.User.Identity.IsAuthenticated
perform a hit on the database if using forms authentication?
Just wondering if I should perform this once when a user logs into my
site then store in a session as to not repeatidly hit the database as
the user navig...
more >>
How do I fix this error: "The current identity (NT AUTHORITY\NETWORK SERVICE) does not have write access to "
Posted by TheBurgerMan at 10/17/2005 9:38:17 AM
Hi all. I am using W2K3, .NET2 on a machine running AD and Exchange. I
started getting the message below last week. I googled the error and not
much was returned, but I did find this;
http://forums.asp.net/918725/ShowPost.aspx
I tried both items in the forum and it works for a few hits then...
more >>
How to get session value at where out of asp.net process domain?(session ID is known)
Posted by ocean at 10/16/2005 12:00:00 AM
The scenario:
I have a web application(asp.net);
This web application need an ACTIVEX control to perform some advanced
communication work;
The activex control run at where out of web application process.(run at
customer's computer).Now the question is,how the control login to the ...
more >>
Urgent Plz
Posted by Yoshitha at 10/15/2005 9:50:17 AM
HI
i've asp.net aplication and it is working fine in all systems but when i
uploaded it into clients server and trying to run the aplication then i'm
getting the following error
Server Error in '/' Application.
--------------------------------------------------------------------------...
more >>
Impersonate domain user account from DMZ
Posted by Shawn at 10/14/2005 9:25:15 AM
Hi.
I have a VB.NET application that retrieve files from a file-share on our
network. In the program I impersonate a user account on our domain that has
access to the file-share. This works fine inside the network, but when I
run the program from our DMZ zone I'm unable to impersonate. When I...
more >>
How to config and use the role manager on my ASP.NET?
Posted by ABC at 10/14/2005 12:00:00 AM
How to config and use the role manager on my ASP.NET?
...
more >>
integrated login and folder permissions
Posted by fuzzyreality NO[at]SPAM gmail.com at 10/13/2005 9:07:35 AM
I am running and asp.net site with IIS6.0. I have integrated login
turned on and it works fine for all our users. However, I am trying to
prevent all but specific groups of users from having access to specific
folders on the website.
I tried doing this by setting the permissions on the folders...
more >>
How can I make an aspx page bypass forms authentication?
Posted by itchy_0305 at 10/13/2005 5:37:40 AM
Hi guys,
I just registered in this site. Its a great site and I'v learned a lot
by just reading your forums....
I'm new to dotnet and I have a question...
I'm creating a Site and using forms authentication for my secured
pages. My problem is that all aspx pages cannot be accessed unle...
more >>
AD roles from a username
Posted by thomas.solbjor NO[at]SPAM gmail.com at 10/13/2005 12:20:09 AM
Hi,
I have custom membership database which I want to add members to
automaticcally based on AD username.
I have a database with a list of users and their AD username. I want to
loop these users and query AD to get their roles based on just their
username. Alle the samples I have found rela...
more >>
Membership Login Question
Posted by TdarTdar at 10/12/2005 4:16:01 PM
HI,
I have a website I created on my local system with vs 2005 beta2 and used a
membership database on our sql server, MS login controls etc.. when I
published this site from my machine to the webserver(using the same database
SQLmembership provider) the login info i had already setup has...
more >>
Requested registry access is not allowed.
Posted by Web Developer at 10/12/2005 12:21:03 PM
When errors occur in my ASP.Net apps, I write them to the application event
log. However, I can't write to the log if my web app isn't registered as a
valid EventLog source (as designated by the
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application\
registry key). If my...
more >>
Getting attributs for membership provider from web.config
Posted by news.microsoft.com at 10/12/2005 10:22:09 AM
How can get the values of for example RequiresUniqueEmail from my own
membershipprovider? Using is
System.Web.Security.Membership.RequiresQuestionAndAnswer; is not an option
because it will call the property from the membership provider.
<membership userIsOnlineTimeWindow="15"
defaultProv...
more >>
Delegation with S4U or How to use S4U to impersonate a user on a remote server?
Posted by Borislav Marinov at 10/11/2005 7:04:27 PM
How to use S4U to impersonate a user on a remote server (delegation)
In an Active Directory domain (2003), I have the following setup:
A Client computer, an application computer, one or more backend servers
and a domain controller.
The user connects (remotely) to the application running on the
...
more >>
Question about handles when doing impersonation.
Posted by Ken Varn at 10/11/2005 3:39:32 PM
I am using WindowsIdentity.Impersonate() to impersonate using a logon token
acquired from the Win32 LogonUser account.
I was wondering if it is safe to close the LogonUser handle passed to the
WindowsIdentity constructor while the WindowsIdentity object is still in
use, or does the WindowsIden...
more >>
Stumped w/ vague com exception error -- "Error 0x80004005 occurred."
Posted by Bill Youngman at 10/11/2005 9:36:29 AM
Not sure if this is the right forum but my searches on this error code seem
to be pointing to a security issue. Here's what I have--
I am trying to change a users password in my client's document management
system through a .net web app that I am developing using C# and the core
services ap...
more >>
IsInRole always returns false?
Posted by Dave at 10/11/2005 9:05:03 AM
Hi,
I'm using Windows authentication with impersonation turned on but I wanted
to pull user roles from my database. Once I person logs in, I want to check
their roles.
I have the following code that loads an array of roles for a
person(hardcoded in this sample but will be pulled from a d...
more >>
IIS and FQDN authentication confusion
Posted by Stu Carter at 10/11/2005 12:00:00 AM
Hi,
ENV: Windows 2003 Server SP1, IIS6, .Net 1.1
I'd like to know why the authentication and delegation differs when
accessing a web site using the Fully Qualified Domain Name as opposed to
'localhost'.
We have an ASP.Net application which has only 'Integrated authentication'
enabled ...
more >>
.Net client and SSL mutual authentication : 403 Forbidden, client certificate not sent
Posted by Mfenetre at 10/10/2005 7:09:18 AM
Hello all,
I'm trying to build a .Net client connecting to a Web service and I
want to use SSL with mutual authentication. The web service is designed
to require a client certificate.
I use .Net Framework v1.1.4322, IIS 6.0, Windows 2003 Srv and Visual
Studio.
So far I've been able to se...
more >>
Where is the user impersonation token stored?
Posted by Gery D. Dorazio at 10/10/2005 4:02:00 AM
When a user visits a web site and is authenticated through the popup dialog
box (Windows authentication) he enters his username and password. Evidently
this creates the users impersonation token that is used on subsequent
requests to secured web pages. On subsequent requests the
WindowsAuthe...
more >>
Forms Authentication
Posted by Rich at 10/9/2005 10:59:00 PM
I'm new to ASP.net I went to a whats new in 2.0 in pittsburgh and am trying
to put together a little demonstration for my company, I wanted to have a
basic login page to chage the site theme. But everytime I got into the
configureation page select form authentocation and try to create a user i...
more >>
Error msg when doing client-side authentication
Posted by David Martin at 10/8/2005 7:51:01 PM
Hi,
I am trying to make a request from a web service to an external
site which uses https. I have a certificate (.p12 format) from them. I
have performed the following steps:
1. Exported the certificate to DER encoded .CER file.
2. Imported the certificate into the Trusted Root CA of the loca...
more >>
IE prompts for password, even though Forms Authentication is used
Posted by Charles Forsyth at 10/8/2005 5:16:46 PM
Hi all,
I have an ASP.Net application that has worked swell on both my
development environment and production for some time now. Development
is running on a WinXP Pro box, Production is running on a Win 2000
Server.
However, the other day we had to move the application to another
server. T...
more >>
How to read (non-event log) registry keys as ASP .NET process
Posted by rhenders at 10/7/2005 7:46:03 AM
Can someone please outline the required steps to allow the ASPNET user to
read selected registry keys? Here is what I've tried so far:
I've created (copied) the DPAPI implementation from MSDN into an assembly
called DataProtection. This works fine as long as the ASPNET process runs as
SY...
more >>
Thread identity
Posted by Raster Space at 10/6/2005 10:47:39 PM
I have managed Web Application running on ASPNET user rights. How can I
execute certain (not all) methods with administrator privileges? Any ideas?...
more >>
Forms authentication across apps - missing something basic?
Posted by Geoff Pennington at 10/6/2005 9:52:05 AM
I have two applications running on the same server. The URL for one is
http://mydomain/app1/ and the other is http://mydomain/app2/ . Currently the
login and authentication is handled by each application, but we want to use
one login screen that will handle authentication for both apps. We hav...
more >>
Cryptography.
Posted by Bala Nagarajan at 10/5/2005 5:51:01 PM
Hello,
I am using .NET's cryptography classes(Symmetric algorithm) to
encrypt/decrypt strings and streams. I want to know the place i should store
the Key and the IV values for the algorithms?Since these values are
sensitive information i definitely cannot store them in the code or con...
more >>
Integrated Authentication with SQL
Posted by Scott Elgram at 10/5/2005 2:14:13 PM
Hello,
I am trying to create a site using integrated windows authentication to
access SQL databases. All the tutorials I have found so far require that
both SQL server and IIS reside on the same server. This is a problem for me
because I need to access multiple SQL servers from the same si...
more >>
Windows authentication and user info
Posted by C Trailer at 10/5/2005 2:13:04 PM
Hi, thanks in advance for any help.
I'm trying to simply get user info (properties) from AD based on the current
user. ie. after a user is authenticated via IIS, i want to programatically
look up info from AD about the user, like displayname, group membership,
email, etc. I'm using asp....
more >>
Forms authentication and search engines
Posted by Guy Incognito at 10/5/2005 8:57:19 AM
Hello,
Can forms authentication in asp.net be set up so that search engines
like Google can get through?
My client wants their site to force visitors to register before they can
read the content, but still wants search engines like Google to index
the content.
Is this possible?
Thank...
more >>