Insufficient access rights to perform the operation -- asp.net security

Russ
12/21/2005 2:07:02 PM

Insufficient access rights to perform the operationI am trying to figure out
if a user is a member of a role. I installed the AzMan on my XPSP2 box, and
set up a role in our Win2k3 domain. I myself to that role, and I call:
if (Roles.IsUserInRole(user.UserName, "WholeCompany"))
{}

But as soon as I do, I get a "Unable to update the password. The value
provided as the current password is incorrect". I then go into the web.config
file and set up <identity impersonate="true" userName="domain\administrator"
password="password"/>. When I do that, ( and I am assuming that the domain
admin has access to what ever it needs in AD ), I get a "Insufficient access
rights to perform the operation" exception.

I have been fighting this AD membership thing for almost a wekk, making
painfull headway, and I am waitsing valuable time, and my manager is

Russ
12/22/2005 5:48:01 AM

I'm not exactly sure how I should make the MACHINE$ account a member of the
reader group in AzMan since all of my web servers are machines that are
members of a domain. ( I also don't see any machine$ account on any of them?
). Are you suggesting I create a domain account to run IIS with?

Secondly, I thought setting the impersonate attribute would allow my .NET
web app to run AS the user I set in the username and password values. Since I
set those to the domain admin I should be running my web app with
considerably more privilege that is necessary or appropriate.

Also, the entire Domain Admins group is a member of the AzMan Administrators
group, which I suspect includes read, and write access to the AzMan store. (I
put the domain admin in the reader group in AzMan and there was no change in
behavior).

Finally, the AzMan interop is installed by default on Win2K3 boxes, and all
of my web servers are Win2K3 SP1 boxes. My dev machine is a WinXPSP2 box,
with all of the AzMan stuff installed. Both my dev box, and the web servers
behave exactly the same.

[quoted text, click to view]

Russ
12/22/2005 6:01:03 AM

I figured out the machine$ thing and added it to the reader group, but I got
the same error.

[quoted text, click to view]

Got something to say? Click here to post a reply to this thread.

Don't see what you're looking for? Try a search.

View other messages about asp.net security

asp.net security : Insufficient access rights to perform the operation