Groups | Blog | Home


Archived Months
July 2003
August 2003
September 2003
October 2003
November 2003
December 2003
January 2004
February 2004
March 2004
April 2004
May 2004
June 2004
July 2004
August 2004
September 2004
October 2004
November 2004
December 2004
January 2005
February 2005
March 2005
April 2005
May 2005
June 2005
July 2005
August 2005
September 2005
October 2005
November 2005
December 2005
January 2006
February 2006
March 2006
April 2006
May 2006
June 2006
July 2006
August 2006
September 2006
October 2006
November 2006
December 2006
January 2007
February 2007
March 2007
April 2007
May 2007
June 2007
July 2007
August 2007
September 2007
October 2007
November 2007
December 2007
January 2008
February 2008
March 2008
April 2008
May 2008
June 2008


all groups > asp.net security > march 2005 > threads for march 22 - 28, 2005

Filter by week: 1 2 3 4 5

Security permissions for Win32 LogonUser call.
Posted by Ken Varn at 3/28/2005 1:10:28 PM
I am running my ASP.NET page under IIS in Windows 2000 Pro. I need to make a call to the Win32 LogonUser function to get a logon token. How can I get security permission to do this while running under the MACHINE account for ASP.NET? -- ----------------------------------- Ken Varn Senior...more >>

Problem with DirectoryServices Access
Posted by Brian01 at 3/28/2005 12:53:03 PM
I have a Win2K server in a DMZ without domain access. My C# ASP.net page can not see the DirectoryServices namespace. I found a KB article on the security issue with this, but I don't have domain accounts to use from the DMZ, and don't want to set the machine.config properties for all aspx...more >>

why not SQL Authentication?
Posted by Pavlos Kariotellis at 3/28/2005 11:45:50 AM
With Forms authentication and SQL Server, MS recommends creating a User table and storing user names and password hashes to that table. http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnnetsec/html/SecNetHT03.aspThey go on proposing a Roles table and so on.I wonder why not just ...more >>

Forms Authentication Ticket Reissue
Posted by sleyhane NO[at]SPAM gmail.com at 3/28/2005 9:32:50 AM
When using Forms Authentication with the SlidingExpiration attribute set to 'true', the authentication ticket is reissued sometime after half of the timeout value specified has elapsed. From the documentation: "To prevent compromised performance, and to avoid multiple browser warnings for use...more >>

Newbie: NT Authentication
Posted by Steven K0 at 3/27/2005 11:47:32 AM
Hello, I have been charged with building an ASP.NET website at work. Some of the pages (like head count info) need to to be secured. One of the requirements is that the site use NT Authentication for the login form instead of creating new passwords for everyone. My question is how is the...more >>

Impersonation with Forms Authentication
Posted by Paul Gregory via DotNetMonster.com at 3/25/2005 7:51:07 PM
Can anybody help, I?m pretty new to .NET but followed the instructions for the following. How to authenticate against the Active Directory by using forms authentication and Visual Basic .NET http://support.microsoft.com/default.aspx?scid=kb;en-us;326340 Got the authentication working but ...more >>

Protect file with different extension from .aspx
Posted by Alessandro Zucchi at 3/24/2005 7:21:07 AM
Hi, I'm developing an asp.net application. I'm using form authentication. All runs with page aspx, but when I try to connect to a protected file diverse to an aspx (such as a PDF file) and I'm not authenticated , the application download the file instead of redirect to the predefined login p...more >>

Need the equivalent of CryptGenKey for PUBLIC/PRIVATE pairs
Posted by Roy Chastain at 3/23/2005 1:27:35 PM
I have found the GenerateKey method for SymmerticAlgorithm based CSP classes, but I can not find any way to create a public/private pair for use with AsymmerticAlgorithm classes. In particular I need a key that I can use to sign hashes with. Thanks for a pointer to the right item. ----------...more >>



Cookies question
Posted by Joe Fallon at 3/22/2005 6:21:33 PM
I use forms authentication for my app. After I log in successfully each request by the browser contains 2 cookies. One for the SessionID and one for forms authentication which contains my ticket. Can someone please explain where these cookies are stored? I think it is in memory in the browse...more >>

no write permissions
Posted by Jimmy at 3/22/2005 6:11:28 PM
Hi I trying to create a new directory "newdir" but i get the error: Exception Details: System.UnauthorizedAccessException: Access to the path "c:\inetpub\wwwroot\MakeLab4\newdir" is denied. I think i have to grant the necessary permissions. Where can i do that because in the explorer i c...more >>

ASP.NET file security problem
Posted by Amit Batish via .NET 247 at 3/22/2005 1:13:21 PM
Hi I am developing a site with ASP=2ENET which involves displaying PDf= ifles using acrobat activeX control=2E To avoid a user to directly= open a PDF file using the path of the file I am trying to= implement security for the files using the article "Protecting= Files with ASP=2ENET " post...more >>


DevelopmentNow Blog