Psst! Did you know DevelopmentNow is a mobile web site design agency?

Contact us for help mobilizing your site, or to sign up for our beta Mobile Web SDK!


Archived Months
July 2003
August 2003
September 2003
October 2003
November 2003
December 2003
January 2004
February 2004
March 2004
April 2004
May 2004
June 2004
July 2004
August 2004
September 2004
October 2004
November 2004
December 2004
January 2005
February 2005
March 2005
April 2005
May 2005
June 2005
July 2005
August 2005
September 2005
October 2005
November 2005
December 2005
January 2006
February 2006
March 2006
April 2006
May 2006
June 2006
July 2006
August 2006
September 2006
October 2006
November 2006
December 2006
January 2007
February 2007
March 2007
April 2007
May 2007
June 2007
July 2007
August 2007
September 2007
October 2007
November 2007
December 2007
January 2008
February 2008
March 2008
April 2008
May 2008
June 2008
all groups > asp.net security > september 2005

Filter by week: 1 2 3 4 5

ASP.NET + Windows Service
Posted by Andy at 9/30/2005 10:25:43 PM
Hello, I would like to access to Windows Service via ASP.NET. I have written very simple web application which starts and stops windows service. Here is my StarButton event: private void StartButton_Click(object sender, System.EventArgs e) { ServiceController sc = new ServiceController(...more >>


Forms Authentication with Active Directory LDAP Problem
Posted by Tdar at 9/29/2005 10:02:04 PM
Sorry for the dup post but looking for a response and this is being posted under my MSDN managed newsgroups handle and in a different newsgroup Hi, As I said in the past post I am using this Article http://msdn.microsoft.com/security/default.aspx?pull=/library/en-us/dnpag2/html/paght000026....more >>

Windows Integrated authentication
Posted by Stephen Noronha at 9/29/2005 4:51:15 PM
Is there a way to use only "Windows Integrated authentication" but not have the pop up window at all? even when the webapplication is requested for the first time. Thanks, Stephen ...more >>

aspnet UNC file share authentication
Posted by Jereme at 9/29/2005 4:07:29 PM
I am having much the same problem as Eric from the thread 'Rendering in-memory images from UNC file share', unfortunately I couldn't find a reply button on his thread. I have a NAS device which stores all my images, I have a asp.net page which access these images and displays them. I am work...more >>

Failed forms authentication with LDAP
Posted by Lino Garcia at 9/29/2005 1:32:03 PM
Hi, I'm using the walkthrough described in http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnnetsec/html/SecNetHT02.asp and I followed step by step. However, when I try with a valid AD account/password combination the code always throws an exception in the line Objec...more >>

Windows Authentication and Domain Suffixes
Posted by ericmatz at 9/29/2005 7:46:13 AM
I've been baffled by this for awhile now. I have a simple site set up to use Windows Authentication, with an allow="*" and deny="?" to allow only domain users. The web server is Win2003 and is not exposed to the internet. If I access the site with the URL http://myserver/mysite/, I can acce...more >>

thoughts?
Posted by melinda at 9/28/2005 2:41:02 PM
Is it useful at all to use Apache as a reverse proxy server to redirect to an IIS server? I've seen some articles on doing this for security purposes, is this necessary? ...more >>

ASP.Net 1.1 cookieless session security issue?
Posted by Stefan Hoffmann at 9/28/2005 11:45:25 AM
Hello everyone! We are developing a webshop in asp.net. We did not want to use cookies for session management, so we tried cookieless sessions. This changes the URL requested to something like http://.../WebApplication3/(xwa4n4a3cr45h2idog25v355)/WebForm1.aspx Well, this -> (xwa4n...more >>



Getting password from Basic authenticated site
Posted by mike at 9/27/2005 11:17:35 AM
Hello. Is there a way to retrieve the password of the user that was authenticated using Basic Authentication? What if the user was authenticated using Integrated Windows Authentication? Thanks in advance, Mike ...more >>

Prevent access to advapi32.dll RevertToSelf()
Posted by kevin.kenny NO[at]SPAM zygonia.net at 9/27/2005 6:06:58 AM
Hi All, Sorry to crosspost but it's a security and an ASP.NET problem I have. We run each website site under it's own I_<user> account and ASP.NET is configured to impersonate so requests run under the identity of the I_<user> account. In windows 2000 server how do I prevent a user from c...more >>

Password and LDAP
Posted by ABUnNOUR at 9/27/2005 12:46:14 AM
hi how can i know the expiry date for users PASSWORD in active directory ? i want to detect the date to notify the user about ? am using Asp.net with C# in my application .. So can you please tell me how ? ...more >>

Configuration Error in web.config
Posted by alex444 at 9/26/2005 8:03:02 PM
I would appreciate any help with the following error. I'd like to mention that application works on my Dev server no problems at all but not on the 3d party host server (they saying it's coding problem). ===================================== Server Error in '/' Application ------------------...more >>

ReadXml (DataSet) and WebException (401)
Posted by Marcos Martínez at 9/26/2005 12:00:00 AM
I am trying to generate and to consume a file RSS dinamicamente. I generate it correctly, if I call from the explorer (http://localhost/Prueba/rss.aspx) or an application client RSS Bandit, for example, everything works costraight. But if I want to load "http://localhost/Prueba/rss.aspx" in a...more >>

RedirectFromLoginPage: Returns to login page.
Posted by Tim Murphy at 9/26/2005 12:00:00 AM
I'm using the following code in my login.aspx page to validate a user. The FormsAuthentication.RedirectFromLoginPage(cUser,bPersistent) gets called but login.aspx gets redisplayed instead of returning to the calling page. If I change the address line in IE to the calling page I can see the new us...more >>

ASP.NET Login Control
Posted by milkyway at 9/25/2005 8:38:54 AM
Hello out there, Is there a place where I can find documentation on how this control actually works? I am trying to provide a list of valid users who can log in as well as provide the name of a form that should be accessed if login is successful. TIA ...more >>

WebProxy with System.Net.WebClient
Posted by Shahid at 9/24/2005 5:51:02 AM
hi, i m trying to get html from a website using asp.net. i wrote following code to access html of a website. it works fine but whenever i try this code from network (behind proxy server) , it gives me error " The underlying connection was closed: Unable to connect to the remote server". i d...more >>

Using WMI to grant permissions to new users on folder..
Posted by scsharma at 9/23/2005 7:27:04 AM
Hi, I would like to programatically modify the security setting of folder. I am using Windows XP professional OS and C# as programming language.I am using WMI(Windows Management instrumentation) for that. I got a head start through a code that i got from Internet. Using WMI i w...more >>

HttpWebRequest failure with TLS
Posted by Sholto Douglas at 9/23/2005 12:14:02 AM
I am using HttpWebRequest to access a WebLogic web servce. It is currently in a console app, but will be 'elevated' to a service. The code is pretty standard, but I get the dreaded WebException: The underlying connection was closed: Could not establish secure channel for SSL/TLS It uses 2-...more >>

pop-up logon dialog box - Integrated Windows authentication - asp.net
Posted by E. Kwong at 9/22/2005 4:04:13 PM
I'm experimentating with Integrated Windows authentication and am puzzled by certain aspect of the native pop-up logon dialog box. After all the setup, everything seems to work as expected: when logon to the domain, the dialog box does not show; when logon outside the domain the dialog box ...more >>

eployment
Posted by Ty at 9/22/2005 12:08:02 PM
One of our Asp.Net web applications utilizes a 3rd party webservice that requires a client cert as part of the security model. The application code runs fine, authenticates the message, and returns the expected results in the development environment. I have installed the CA & Client Certs i...more >>

Windows authentication information
Posted by Stephen Noronha at 9/20/2005 4:09:36 PM
Hi, I want to create an application that uses Windows authentication only (cool windows NT pop-up), I have to use other criteria also suppose the user walks away for 15 min then checks the page again, then again I have to show the pop -up Please advice, Stephen ...more >>

Forms Authentication with Active Directory
Posted by E. Kwong at 9/20/2005 10:43:52 AM
We are interested in using Forms Authentication with Active Directory. We understand that the presence of web.config prevents access to .aspx files unless authenticated. Is there similar mechanism that authenticate users against AD when they want to access Word files or PDF files? We pr...more >>

Login Application
Posted by NG at 9/20/2005 12:00:00 AM
Hi All I am making a suite of independent web applications on a single IIS server / multiple IIS servers. However, I want the user to login (using an independent login web application on any one of the IIS servers). After the user logs in, I want that his login session to be retained even if...more >>

permissions & roles...
Posted by Ollie Riches at 9/19/2005 6:53:04 PM
Is it possible to find out what the permissions & roles are for the 'ASP.NET' and the 'NETWORK SERVICE' accounts? Cheers Ollie Riches ...more >>

Using Active Directory
Posted by scsharma at 9/19/2005 1:59:05 PM
Hi, I am new to active directory world but based on what i know i am trying to achieve following: 1. Look for user/groups on a windows 2000 machine which is not a PDC(primary domain controller). I created Directory entry object as follows: DirectoryEntry group = new DirectoryEntry("LDAP:/...more >>

Forms Authentication works with Mozilla but not IE6
Posted by Manuel at 9/19/2005 10:29:36 AM
How can a MS ASP.NET forms authentication work in Mozilla but not IE6? I haven't been able to make a site work in IE, it always throws me back to login page whereas in Mozilla it works just fine! ...more >>

(CustomIdentity)Thread.CurrentPrincipal.Identity - Cast not Valid
Posted by John K at 9/19/2005 9:28:08 AM
I have created CustomPrincipal and CustomIdentity classes. Everything works great on my WinForms application, but as soon as i run my ASP.NET client I get a System.InvalidCastException: Specified cast is not valid error on the following line. CustomIdentity id = (CustomIdentity)Thread.Curre...more >>

Getting hacked?
Posted by Arne at 9/19/2005 8:10:05 AM
I have a web server that I have tried my best to secure from hacking. I see some sign that they have tried to hack. I haven't seen any corruption at my web site. Is there anything I am supposed to look for that tells me that I have been hacked?...more >>

Forms Authentication losing IsAuthenticated after 1 page
Posted by vipergtsrz NO[at]SPAM gmail.com at 9/17/2005 3:59:01 PM
I am wanting to use Forms Authentication on my site, and I have the exact same code on another site I am using, but it's not working on this one. I only want to limit the "admin" folder to require me to log in, so I have this in my web config: <location path="admin" > <system.web> <aut...more >>

Forms Authentication Ticket Functionality With Windows Authentication
Posted by jfer at 9/16/2005 9:32:38 AM
I am creating a web application for a company intranet and I am using Windows Authentication for a somewhat "transparent" login process. What I would like to do is allow all users into the application that exist in our LDAP under a particular user (their is a heirarchy associated with the LDAP t...more >>

Authentication provider for different sites
Posted by Al at 9/16/2005 7:55:13 AM
Hello everybody, how can I use one authentication site (https://login.site.com) for other sites (on separate machines, i.e. http://www.books.biz)? What should I do to use Forms Authentication in this case?...more >>

Accessing Local COM Server from ASP.NET - Access Denied
Posted by Philip at 9/16/2005 5:52:04 AM
I have a ASP.NET web service using COM Interop to hopefully access a Local COM Server ... however when I attempt to reference the Local COM Server I am receiving "Access Denied". We have provided full permissions to the EXE which is the foundation of the Local COM Server.... however I can ...more >>

Certmgr
Posted by Russ at 9/15/2005 3:00:59 PM
I'm trying to use Certmgr.msc but when I run it I get message: "The certificates store cannot be enumerated. The system cannot find the file specified." This happens if I run from my dev work station or from my server. I thought Certmgr used to work on my dev work station. Can anyone tell...more >>

Programmatically installing certificates
Posted by Russ at 9/15/2005 2:28:48 PM
Is there a way to build a program to import certificates into IE - in place of using the import wizard? If so, where can I find the documentation and samples? For C++ or C# please. Thank you, Russ...more >>

Access level needed to look up username
Posted by sqlboy2000 at 9/15/2005 7:30:05 AM
Hi all, I'm currently using the following call to look up a user's windows Full Name from the domain controller: Dim strFilter = "(&(sAMAccountname=" & strUser & ")(objectClass=user))" Dim objEntry As New DirectoryEntry("LDAP://myDC", "user", "password") Dim search...more >>

User management with Windows Authentication
Posted by jfer at 9/15/2005 7:28:40 AM
I am creating a web application for use on an intranet and am having some problems understanding how to maintain web application user lists with windows authentication. Adding domain users to a group on the web server and utilizing <allow><deny> tags to restrict access is quite nice. However t...more >>

Access to the registry key HKEY_CLASSES_ROOT\EntSrvcTest1_direct.Global is denied
Posted by z f at 9/15/2005 12:00:00 AM
Hi, using enterprise services from dot-net: on windows application it did OK. on ASP.NET i get the folowing error. (see in the end) Access to the registry key HKEY_CLASSES_ROOT\EntSrvcTest1_direct.Global is denied if i use the components services MMC snap in to create a new applicatio...more >>

Basic Authentication/Custom Login page
Posted by mike at 9/14/2005 2:57:44 PM
Hello. I'm creating a site that has basic authentication. Is it possible to have a custom login page display instead of the Windows login page? Thanks in advance, Mike ...more >>

Other than BuiltIn groups for Windows Authentication
Posted by Joey Lee at 9/14/2005 12:00:00 AM
Hi, I am using windows authentication on my ASP.Net application. With the WindowsPrincipal I can authenticate myself against groups such as BUILTIN\Users I am assuming that this group is supplied by the active directory when i log into the domain using my pc. The problem now is I hav...more >>

Authenticating on a remote domain via ASP.Net
Posted by Alan via DotNetMonster.com at 9/14/2005 12:00:00 AM
I have been struggling with this for a little while now. Let me explain my problem: I have a remote domain and a workgroup. I have an IIS server running on the workgroup. When I log into the IIS server I can map a drive located on the domain and can authenticate with a domain acocunt fine. Now...more >>

How to sets credentials used to authenticate Web requests
Posted by Li Pang at 9/13/2005 12:46:05 AM
Hi, I put a xml file in a web site "http://localhost/XML/default.xml", and I try to open it from the following codes: Dim doc As XmlDocument doc = New XmlDocument() doc.Load("http://localhost/XML/default.xml") then I got an error: "(401) Unauthorized" When I enabled anonymous access ...more >>

ASP.Net app in DMZ cannot be accessed by client PC's
Posted by hakl at 9/11/2005 11:15:03 PM
Hi, I have a small asp.net app (with SSL, Win 2003 server standare, IIS6, SQL 2k)) which was working fine before it was moved to the DMZ. The application is accessed through our intranet only. We've given IP addresses of the user workstations that need access to the Server to the security peo...more >>

Windows Authentication with ASP.Net and SQL Server
Posted by Siobhan at 9/11/2005 10:26:14 AM
Hi - I am trying to set up Windows Authentication for an application to pass through credentials to SQL Server but I have done everything that most documentation seems to say to do but keep getting The request failed with HTTP Status 401: Access Denied !! My set up is as follows: Development...more >>

Cannot start aspnet_wp.exe
Posted by Matt Eustace at 9/11/2005 2:06:01 AM
Well this little gem is popping up everywhere it seems! I installed VS.Net 03 on my machine along with all the pre-reqs including the .Net Redist framework 1.1. Subsequent to this, I lost the ability to run ASP let alone ASPX on my machine. All the information I have found pointed to ASPNET no...more >>

secure design w/ ASP.NET 1.1
Posted by Fred at 9/9/2005 10:05:29 PM
hi, can u plz point me to some good books and/or articles on managing user authentication and authorization w/ IIS 5,6 and IE 5,6...more >>

How to prevent user from authenticating
Posted by salickc NO[at]SPAM gmail.com at 9/9/2005 9:11:46 AM
Hello, I'm using Forms Authentication. When the user logins for the first time, i create a persistent cookie, so the user will login automatically every time he browse the site. But suppose after I a week, i deleted the user from my DB. He still has the cookie on his computer, and will conn...more >>

check if a user is a member of a particular group in active direct
Posted by Smitha at 9/9/2005 7:30:03 AM
Hi everyone, in my asp.net application,i need to find out if a particular user is in the administrator group and permit him access to certain pages accordingly. can anybody help me in finding out the administrative group in the active directory using c# and check if the user is a member of...more >>

System.Security.Principal.WindowsIdentity.GetCurrent()
Posted by Jeremy Chapman at 9/8/2005 4:48:51 PM
I have a web application which calls a web service, which calls a method in an assembly of it's bin directory. The web application and web service use windows authentication with windows impersonation set in the web.config files. In IIS, these virtual directories have anonymous access turned...more >>

ASPNET account and NT Authentication with SQL Server -Account Locked Out
Posted by ryan.d.rembaum NO[at]SPAM kp.org at 9/8/2005 4:07:14 PM
I have an application running on an IIS box that is trying to make a connection to a separate SQL server box. The application is using Windows NT authentication. During development I can access my data just fine. When I view it in the browser I get the message that the database does not exist...more >>

custom Asp.Net 2 Forms Authentication question
Posted by Al at 9/8/2005 6:16:03 AM
Hello everybody, I need to create custom forms authentification using SqlMembershipProvider. I want to place authentication ticket into query string (or use sessionID in query string instead ticket). How can I do this? ...more >>


DevelopmentNow Blog