all groups > asp.net security > september 2005
Filter by week: 1 2 3 4 5
ASP.NET + Windows Service
Posted by Andy at 9/30/2005 10:25:43 PM
Hello,
I would like to access to Windows Service via ASP.NET. I have written
very simple web application which starts and stops windows service. Here
is my StarButton event:
private void StartButton_Click(object sender, System.EventArgs e)
{
ServiceController sc = new ServiceController(... more >>
Forms Authentication with Active Directory LDAP Problem
Posted by Tdar at 9/29/2005 10:02:04 PM
Sorry for the dup post but looking for a response and this is being posted
under my MSDN
managed newsgroups handle and in a different newsgroup
Hi,
As I said in the past post I am using this Article
http://msdn.microsoft.com/security/default.aspx?pull=/library/en-us/dnpag2/html/paght000026.... more >>
Windows Integrated authentication
Posted by Stephen Noronha at 9/29/2005 4:51:15 PM
Is there a way to use only "Windows Integrated authentication" but not have
the pop up window at all? even when the webapplication is requested for the
first time.
Thanks,
Stephen
... more >>
aspnet UNC file share authentication
Posted by Jereme at 9/29/2005 4:07:29 PM
I am having much the same problem as Eric from the thread 'Rendering
in-memory images from UNC file share', unfortunately I couldn't find a
reply button on his thread.
I have a NAS device which stores all my images, I have a asp.net page
which access these images and displays them. I am work... more >>
Failed forms authentication with LDAP
Posted by Lino Garcia at 9/29/2005 1:32:03 PM
Hi,
I'm using the walkthrough described in
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnnetsec/html/SecNetHT02.asp
and I followed step by step.
However, when I try with a valid AD account/password combination the code
always throws an exception in the line
Objec... more >>
Windows Authentication and Domain Suffixes
Posted by ericmatz at 9/29/2005 7:46:13 AM
I've been baffled by this for awhile now. I have a simple site set up to use
Windows Authentication, with an allow="*" and deny="?" to allow only domain
users. The web server is Win2003 and is not exposed to the internet. If I
access the site with the URL http://myserver/mysite/, I can acce... more >>
thoughts?
Posted by melinda at 9/28/2005 2:41:02 PM
Is it useful at all to use Apache as a reverse proxy server to redirect to an
IIS server? I've seen some articles on doing this for security purposes, is
this necessary? ... more >>
ASP.Net 1.1 cookieless session security issue?
Posted by Stefan Hoffmann at 9/28/2005 11:45:25 AM
Hello everyone!
We are developing a webshop in asp.net. We did not want to use cookies
for session management, so we tried cookieless sessions.
This changes the URL requested to something like
http://.../WebApplication3/(xwa4n4a3cr45h2idog25v355)/WebForm1.aspx
Well, this -> (xwa4n... more >>
Don't see what you're looking for? Search DevelopmentNow.com.
Getting password from Basic authenticated site
Posted by mike at 9/27/2005 11:17:35 AM
Hello.
Is there a way to retrieve the password of the user that was authenticated
using Basic Authentication? What if the user was authenticated using
Integrated Windows Authentication?
Thanks in advance,
Mike
... more >>
Prevent access to advapi32.dll RevertToSelf()
Posted by kevin.kenny NO[at]SPAM zygonia.net at 9/27/2005 6:06:58 AM
Hi All,
Sorry to crosspost but it's a security and an ASP.NET problem I have.
We run each website site under it's own I_<user> account and ASP.NET is
configured to impersonate so requests run under the identity of the
I_<user> account.
In windows 2000 server how do I prevent a user from c... more >>
Password and LDAP
Posted by ABUnNOUR at 9/27/2005 12:46:14 AM
hi
how can i know the expiry date for users PASSWORD in active directory
?
i want to detect the date to notify the user about ?
am using Asp.net with C# in my application .. So can you please tell me
how ?
... more >>
Configuration Error in web.config
Posted by alex444 at 9/26/2005 8:03:02 PM
I would appreciate any help with the following error. I'd like to mention
that application works on my Dev server no problems at all but not on the 3d
party host server (they saying it's coding problem).
=====================================
Server Error in '/' Application
------------------... more >>
ReadXml (DataSet) and WebException (401)
Posted by Marcos MartÃnez at 9/26/2005 12:00:00 AM
I am trying to generate and to consume a file RSS dinamicamente. I generate
it correctly, if I call from the explorer (http://localhost/Prueba/rss.aspx)
or an application client RSS Bandit, for example, everything works
costraight.
But if I want to load "http://localhost/Prueba/rss.aspx" in a... more >>
RedirectFromLoginPage: Returns to login page.
Posted by Tim Murphy at 9/26/2005 12:00:00 AM
I'm using the following code in my login.aspx page to validate a user. The
FormsAuthentication.RedirectFromLoginPage(cUser,bPersistent) gets called but
login.aspx gets redisplayed instead of returning to the calling page. If I
change the address line in IE to the calling page I can see the new us... more >>
ASP.NET Login Control
Posted by milkyway at 9/25/2005 8:38:54 AM
Hello out there,
Is there a place where I can find documentation on how this control
actually works? I am trying to provide a list of valid users who can
log in as well as provide the name of a form that should be accessed if
login is successful.
TIA
... more >>
WebProxy with System.Net.WebClient
Posted by Shahid at 9/24/2005 5:51:02 AM
hi,
i m trying to get html from a website using asp.net. i wrote following code
to access html of a website. it works fine but whenever i try this code from
network (behind proxy server) , it gives me error " The underlying connection
was closed: Unable to connect to the remote server". i d... more >>
Using WMI to grant permissions to new users on folder..
Posted by scsharma at 9/23/2005 7:27:04 AM
Hi,
I would like to programatically modify the security setting of
folder. I am using Windows XP professional OS and C# as programming
language.I am using WMI(Windows Management instrumentation) for that.
I got a head start through a code that i got from Internet. Using WMI
i w... more >>
HttpWebRequest failure with TLS
Posted by Sholto Douglas at 9/23/2005 12:14:02 AM
I am using HttpWebRequest to access a WebLogic web servce. It is currently
in a console app, but will be 'elevated' to a service.
The code is pretty standard, but I get the dreaded WebException:
The underlying connection was closed: Could not establish secure channel
for SSL/TLS
It uses 2-... more >>
pop-up logon dialog box - Integrated Windows authentication - asp.net
Posted by E. Kwong at 9/22/2005 4:04:13 PM
I'm experimentating with Integrated Windows authentication and am puzzled by
certain aspect of the native pop-up logon dialog box. After all the setup,
everything seems to work as expected: when logon to the domain, the dialog
box does not show; when logon outside the domain the dialog box ... more >>
eployment
Posted by Ty at 9/22/2005 12:08:02 PM
One of our Asp.Net web applications utilizes a 3rd party webservice that
requires a client cert as part of the security model. The application code
runs fine, authenticates the message, and returns the expected results in the
development environment.
I have installed the CA & Client Certs i... more >>
Windows authentication information
Posted by Stephen Noronha at 9/20/2005 4:09:36 PM
Hi,
I want to create an application that uses Windows authentication only (cool
windows NT pop-up), I have to use other criteria also
suppose the user walks away for 15 min then checks the page again, then
again I have to show the pop -up
Please advice,
Stephen
... more >>
Forms Authentication with Active Directory
Posted by E. Kwong at 9/20/2005 10:43:52 AM
We are interested in using Forms Authentication with Active Directory. We
understand that the presence of web.config prevents access to .aspx files
unless authenticated. Is there similar mechanism that authenticate users
against AD when they want to access Word files or PDF files? We pr... more >>
Login Application
Posted by NG at 9/20/2005 12:00:00 AM
Hi All
I am making a suite of independent web applications on a single IIS server /
multiple IIS servers. However, I want the user to login (using an
independent login web application on any one of the IIS servers). After the
user logs in, I want that his login session to be retained even if... more >>
permissions & roles...
Posted by Ollie Riches at 9/19/2005 6:53:04 PM
Is it possible to find out what the permissions & roles are for the
'ASP.NET' and the 'NETWORK SERVICE' accounts?
Cheers
Ollie Riches
... more >>
Using Active Directory
Posted by scsharma at 9/19/2005 1:59:05 PM
Hi,
I am new to active directory world but based on what i know i am trying to
achieve following:
1. Look for user/groups on a windows 2000 machine which is not a PDC(primary
domain controller). I created Directory entry object as follows:
DirectoryEntry group = new
DirectoryEntry("LDAP:/... more >>
Forms Authentication works with Mozilla but not IE6
Posted by Manuel at 9/19/2005 10:29:36 AM
How can a MS ASP.NET forms authentication work in Mozilla but not IE6?
I haven't been able to make a site work in IE, it always throws me back to
login page whereas in Mozilla it works just fine!
... more >>
(CustomIdentity)Thread.CurrentPrincipal.Identity - Cast not Valid
Posted by John K at 9/19/2005 9:28:08 AM
I have created CustomPrincipal and CustomIdentity classes. Everything works
great on my WinForms application, but as soon as i run my ASP.NET client I
get a System.InvalidCastException: Specified cast is not valid error on the
following line.
CustomIdentity id = (CustomIdentity)Thread.Curre... more >>
Getting hacked?
Posted by Arne at 9/19/2005 8:10:05 AM
I have a web server that I have tried my best to secure from hacking. I see
some sign that they have tried to hack. I haven't seen any corruption at my
web site. Is there anything I am supposed to look for that tells me that I
have been hacked?... more >>
Forms Authentication losing IsAuthenticated after 1 page
Posted by vipergtsrz NO[at]SPAM gmail.com at 9/17/2005 3:59:01 PM
I am wanting to use Forms Authentication on my site, and I have the
exact same code on another site I am using, but it's not working on
this one.
I only want to limit the "admin" folder to require me to log in, so I
have this in my web config:
<location path="admin" >
<system.web>
<aut... more >>
Forms Authentication Ticket Functionality With Windows Authentication
Posted by jfer at 9/16/2005 9:32:38 AM
I am creating a web application for a company intranet and I am using
Windows Authentication for a somewhat "transparent" login process.
What I would like to do is allow all users into the application that
exist in our LDAP under a particular user (their is a heirarchy
associated with the LDAP t... more >>
Authentication provider for different sites
Posted by Al at 9/16/2005 7:55:13 AM
Hello everybody,
how can I use one authentication site (https://login.site.com) for other
sites (on separate machines, i.e. http://www.books.biz)?
What should I do to use Forms Authentication in this case?... more >>
Accessing Local COM Server from ASP.NET - Access Denied
Posted by Philip at 9/16/2005 5:52:04 AM
I have a ASP.NET web service using COM Interop to hopefully access a Local
COM Server ... however when I attempt to reference the Local COM Server I am
receiving "Access Denied".
We have provided full permissions to the EXE which is the foundation of the
Local COM Server.... however I can ... more >>
Certmgr
Posted by Russ at 9/15/2005 3:00:59 PM
I'm trying to use Certmgr.msc but when I run it I get message:
"The certificates store cannot be enumerated. The system cannot find
the file specified."
This happens if I run from my dev work station or from my server. I
thought Certmgr used to work on my dev work station.
Can anyone tell... more >>
Programmatically installing certificates
Posted by Russ at 9/15/2005 2:28:48 PM
Is there a way to build a program to import certificates into IE - in
place of using the import wizard? If so, where can I find the
documentation and samples? For C++ or C# please.
Thank you, Russ... more >>
Access level needed to look up username
Posted by sqlboy2000 at 9/15/2005 7:30:05 AM
Hi all,
I'm currently using the following call to look up a user's windows Full Name
from the domain controller:
Dim strFilter = "(&(sAMAccountname=" & strUser &
")(objectClass=user))"
Dim objEntry As New DirectoryEntry("LDAP://myDC", "user", "password")
Dim search... more >>
User management with Windows Authentication
Posted by jfer at 9/15/2005 7:28:40 AM
I am creating a web application for use on an intranet and am having
some problems understanding how to maintain web application user lists
with windows authentication. Adding domain users to a group on the web
server and utilizing <allow><deny> tags to restrict access is quite
nice. However t... more >>
Access to the registry key HKEY_CLASSES_ROOT\EntSrvcTest1_direct.Global is denied
Posted by z f at 9/15/2005 12:00:00 AM
Hi,
using enterprise services from dot-net:
on windows application it did OK.
on ASP.NET i get the folowing error. (see in the end)
Access to the registry key HKEY_CLASSES_ROOT\EntSrvcTest1_direct.Global is
denied
if i use the components services MMC snap in to create a new applicatio... more >>
Basic Authentication/Custom Login page
Posted by mike at 9/14/2005 2:57:44 PM
Hello.
I'm creating a site that has basic authentication. Is it possible to have a
custom login page display instead of the Windows login page?
Thanks in advance,
Mike
... more >>
Other than BuiltIn groups for Windows Authentication
Posted by Joey Lee at 9/14/2005 12:00:00 AM
Hi,
I am using windows authentication on my ASP.Net application. With the
WindowsPrincipal I can authenticate myself against groups such as
BUILTIN\Users
I am assuming that this group is supplied by the active directory when i log
into the domain using my pc.
The problem now is I hav... more >>
Authenticating on a remote domain via ASP.Net
Posted by Alan via DotNetMonster.com at 9/14/2005 12:00:00 AM
I have been struggling with this for a little while now.
Let me explain my problem:
I have a remote domain and a workgroup.
I have an IIS server running on the workgroup.
When I log into the IIS server I can map a drive located on the domain and
can authenticate with a domain acocunt fine. Now... more >>
How to sets credentials used to authenticate Web requests
Posted by Li Pang at 9/13/2005 12:46:05 AM
Hi,
I put a xml file in a web site "http://localhost/XML/default.xml", and I try
to open it from the following codes:
Dim doc As XmlDocument
doc = New XmlDocument()
doc.Load("http://localhost/XML/default.xml")
then I got an error: "(401) Unauthorized"
When I enabled anonymous access ... more >>
ASP.Net app in DMZ cannot be accessed by client PC's
Posted by hakl at 9/11/2005 11:15:03 PM
Hi,
I have a small asp.net app (with SSL, Win 2003 server standare, IIS6, SQL
2k)) which was working fine before it was moved to the DMZ. The application
is accessed through our intranet only. We've given IP addresses of the user
workstations that need access to the Server to the security peo... more >>
Windows Authentication with ASP.Net and SQL Server
Posted by Siobhan at 9/11/2005 10:26:14 AM
Hi - I am trying to set up Windows Authentication for an application to pass
through credentials to SQL Server but I have done everything that most
documentation seems to say to do but keep getting The request failed with
HTTP Status 401: Access Denied !!
My set up is as follows:
Development... more >>
Cannot start aspnet_wp.exe
Posted by Matt Eustace at 9/11/2005 2:06:01 AM
Well this little gem is popping up everywhere it seems! I installed VS.Net 03
on my machine along with all the pre-reqs including the .Net Redist framework
1.1. Subsequent to this, I lost the ability to run ASP let alone ASPX on my
machine. All the information I have found pointed to ASPNET no... more >>
secure design w/ ASP.NET 1.1
Posted by Fred at 9/9/2005 10:05:29 PM
hi,
can u plz point me to some good books and/or articles on managing user
authentication and authorization w/ IIS 5,6 and IE 5,6... more >>
How to prevent user from authenticating
Posted by salickc NO[at]SPAM gmail.com at 9/9/2005 9:11:46 AM
Hello,
I'm using Forms Authentication.
When the user logins for the first time, i create a persistent cookie,
so the user will login automatically every time he browse the site.
But suppose after I a week, i deleted the user from my DB.
He still has the cookie on his computer, and will conn... more >>
check if a user is a member of a particular group in active direct
Posted by Smitha at 9/9/2005 7:30:03 AM
Hi everyone,
in my asp.net application,i need to find out if a particular user is in the
administrator group and permit him access to certain pages accordingly.
can anybody help me in finding out the administrative group in the active
directory using c# and check if the user is a member of... more >>
System.Security.Principal.WindowsIdentity.GetCurrent()
Posted by Jeremy Chapman at 9/8/2005 4:48:51 PM
I have a web application which calls a web service, which calls a method in
an assembly of it's bin directory.
The web application and web service use windows authentication with windows
impersonation set in the web.config files. In IIS, these virtual
directories have anonymous access turned... more >>
ASPNET account and NT Authentication with SQL Server -Account Locked Out
Posted by ryan.d.rembaum NO[at]SPAM kp.org at 9/8/2005 4:07:14 PM
I have an application running on an IIS box that is trying to make a
connection to a separate SQL server box. The application is using
Windows NT authentication. During development I can access my data
just fine. When I view it in the browser I get the message that the
database does not exist... more >>
custom Asp.Net 2 Forms Authentication question
Posted by Al at 9/8/2005 6:16:03 AM
Hello everybody,
I need to create custom forms authentification using SqlMembershipProvider.
I want to place authentication ticket into query string (or use sessionID in
query string instead ticket).
How can I do this?
... more >>
|