all groups > asp.net security > october 2006
Filter by week: 1 2 3 4 5
Should I use Membership and Roles in ASP.NET 2.0
Posted by msnews.microsoft.com at 10/31/2006 12:12:20 PM
Hello All,
I did a lot of reading on this new feature from Microsoft ASP.NET 2.0, but I
ran into a design problem. In my project the user information contains much
more information then the information shown in the default membership and
roles tables that are installed with SQL server.
T... more >>
unable to execute dos commands through web application
Posted by Arjun at 10/31/2006 5:19:02 AM
Problem definition:: Register a .dll assembly into GAC(\windows\assembly)
through web application
I have a code which works fine with web application before
deployment(Without IIS), But the same code doesn't work when the web
application is ran through IIS(Without errorthe code exe... more >>
login control and custom db
Posted by ken s at 10/27/2006 11:16:02 AM
I'm creating an ASP.NET 2.0 web application. I want to use the login
control to validate users using my existing SQL 2005 database (stores
username, password, and role)
The documentation seems to want me to create this new aspnet db and use
roles and memberships.
Can I simply use my own da... more >>
Why encryption failed?
Posted by CAIBird at 10/27/2006 1:48:02 AM
hi,
i'm trying to encrypt a present section in web.config named "system.net"
using following command line:
aspnet_regiis.exe -pef "system.net" C:\site
i get failed everytime i execute it, getting a error"The configuration
section 'system.net' was not found". i'm almost crazy, this secti... more >>
Using login alias in Membership Provider
Posted by Stephen Walch at 10/26/2006 7:30:41 PM
Our user directly allows authentication with "short names". For example,
the user "Joe Cool/Acme" can log in with the user id "jcool".
In implementing an ASP.NET Membership Provider, we can not figure out how to
supply the real user name (used in access control settings, etc.) when users
l... more >>
Enabling Windows Authentication from inside Forms Authentication (ASP.NET 2.0)
Posted by Michael D. Ober at 10/25/2006 2:52:40 PM
I need the ability to bypass the forms authentication login page when the
user requesting the protected page is running on our corporate network and
is also logged into the corporate domain. How do I do this?
Thanks,
Mike Ober.
... more >>
How to resolve "WSE Settings Error" - unable to save policycache f
Posted by John K at 10/25/2006 12:49:01 PM
I receive a "WSE Settings Error" when I click OK on the WSE 3 Settings (i.e.
click "WSE Settings 3.0") I edited the appropriate settings but then I get
the "WSE Settings Error" "Unable to add ...\wsePolicyCache.config to the
project. Check if the file is in the Project directory or try adding... more >>
Access denied errors
Posted by krallabandi NO[at]SPAM gmail.com at 10/25/2006 7:14:45 AM
Do you have any idea about the below errors?
Access to the path
"C:\DOCUME~1\P005715\ASPNET\LOCALS~1\Temp\cumhnc6b.cmdline" is denied.
Access to the path
"C:\DOCUME~1\P005715\ASPNET\LOCALS~1\Temp\fbc8tyiu.cmdline" is denied.
Access to the path
"C:\DOCUME~1\P005715\ASPNET\LOCALS~1\Temp\... more >>
Don't see what you're looking for? Search DevelopmentNow.com.
No authentication with Server.Transfer("url")
Posted by Ashok at 10/24/2006 8:28:03 AM
Hi All,
I am using Integrated windows authentication(IWA) on my child virtual
directory(VD) which is beneath the parent Virtual Directory. When i use
Server.Transfer("/Parent VD/Child VD/StartingPage.aspx")
i am getting the error "Error executing child request for
/Parent VD/Child VD/Start... more >>
Can't access web service.
Posted by ad at 10/23/2006 8:47:59 PM
I can use my pc to access any asp.net web page, but can't access web
service.
Is it due to firewall? What setting can block web servcie but not web page?
... more >>
<location> multiple file question
Posted by David Thielen at 10/21/2006 2:59:02 PM
Hi;
I need to have the following in Web.config:
<location path="help/login*.htm">
<system.web>
<authorization>
<allow users="*"/>
</authorization>
</system.web>
</location>
But it does not like the * in login*.htm. We have this as the help files for
the login page - bu... more >>
Roles.IsUserInRole != Context.User.IsInRole
Posted by Lyndon Hills at 10/20/2006 8:04:02 AM
Hi,
I'm hoping that someone might enlighten me as to how the Roles.IsUserInRole
functionality works.
I have my custom role provider set up and working, but realised that the
caching wasn't working. When my c# code hit the line Roles.IsUserInRole I saw
the identity property of my role pri... more >>
asp.net postbacks don't work after leaving browser open all night w/ windows integrated authentication
Posted by Ken Yee at 10/20/2006 7:11:41 AM
Has anyone seen this?
If you open up an MSIE (latest 6.x) browser window on a web app that is
set to allow only windows integrated authentication, the next morning, if
you click on any of the links (they're trivial asp.net controls like a
hyperlink but it uses postbacks), you'll get cryptic... more >>
ActiveDirectoryMembershipProvider.ValidateUser problem
Posted by Renaud Langis at 10/20/2006 6:49:03 AM
Hello,
I am using the ActiveDirectoryMembershipProvider class to access active
directory in an asp.net application. It is working well appart from one
thing. When a user's password has expired, i can't validate if the password
entered is correct before allowing the user to change it.
Ac... more >>
LoginName in .vb
Posted by Herb at 10/19/2006 7:33:02 AM
Using ASP.NET membership, is it possible to access the LoginName in my
aspx.vb code?
I can create the LoginName object which displays the currently logged in
user on the page, but how do I refer to that name in code?
TIA... more >>
CRL And C#
Posted by Leeor Chernov at 10/18/2006 5:36:55 PM
What is the best way to check certificate against CRL, by code.
Should it be directly from the CA site ( CRL Distribution Point =
http://icd6.ica.co.il/oca02.crl ),
or should I download the crl to the web server hard disk???
TNX
Leeor Chernov... more >>
EnvelopedCMS and MailMessage [.NET 2.0 - VB_VS2005]
Posted by VIOT Yves at 10/18/2006 5:19:57 PM
Hi all,
I'm new in VS2005 (and .NET framework 2.0) and i have a problem with
envelopedCMS and MaiMessage objects. I can't make it work. I've tried
several things but it doesn't work. I would like to know if anybody have
a code example ? The only thing i'm sure is that recipients and
certifi... more >>
Membership - Database Security
Posted by rbfigueira at 10/18/2006 5:51:02 AM
Hi friends,
In our institution we want to install the Membership Database (tables,
stored procedures, views, etc) in one separated database for share of all web
application (avoid installing in each new asp.net application database all
the tables, stored procedures, views, etc for support ... more >>
Need for encryption in WSE 3.0 if using SS-avoid man-in-middle att
Posted by John K at 10/17/2006 11:04:02 AM
Hello.
I plan on upgrading my .NET 2.0 web service to use WSE 3.0. I am using my
web service over SSL and the PC client application access the web service
directly (no middle man server(s)). I will be adding the UserNameToken
option to authenticate the user to the web service. I am consi... more >>
Newbie, connection timing out problem
Posted by verci at 10/16/2006 9:59:33 PM
Hi, sorry if this seems stupid :(
I'm running WindowsXP, Asp.net 1.1 and Sql Server 2000 , the problem is the
my pages are timing randomly, I use a ODBC connection to the database in
the global.asa file (below), the problem is that my pages some times work
right and some times the... more >>
Can't get access with some role logins - on IIS 6 only
Posted by David Thielen at 10/16/2006 4:08:02 PM
Hi;
This is turning into a major PITA. Someone is in the admin part of our web
app and they logout to login back in without admin privleges (least
privleges). They enter their uname/pw and what happens???
It tries to go back to the page they were last on - which is almost always
an admin... more >>
printersettings.installedprinters in asp.net not working for non-domain webserver with network printers on domain
Posted by Tessa at 10/16/2006 4:02:14 PM
Hi,
We have a .net web application, and are trying to use
PrinterSettings.InstalledPrinters to list the printers installed on the
webserver. (Windows 2003 server R2, IIS 6, .net framework 2.0.)
The printers installed on the web server under the account used by asp.net
for this web applica... more >>
AD Group Memberships (MyADMembershipProvider) Question
Posted by Andy Melick at 10/16/2006 3:02:33 PM
All,
I am using MyADMembershipProvider as my membership provider to authenticate
to my application via Active Directory. I have found how I can allow / deny
authorization for users via <authorization> section in the web.config.
What is a method to search users membership to return all the ... more >>
Error exporting RSA key container via aspnet_regiis
Posted by dpomt at 10/16/2006 2:58:01 PM
Hello,
I have an issue exporting a RSA key container via aspnet_regiis.
I am using
aspnet_regiis -px "HoKeyCont7" HoKeyCont7.xml -pri
and I get the following (german) error message:
Exporting RSA Keys to file...
Schlüssel ist im angegebenen Status nicht gültig.
(translat... more >>
Impersonation and UnauthorizedAccessException
Posted by kevingeist NO[at]SPAM hotmail.com at 10/16/2006 12:18:50 PM
I hope someone can help me with this. Please tell me what I'm not
seeing. In my web app, I'm trying to create files to a common
directory. Only some network IDs have access to write to this
directory.
In my web.config I have:
<authentication mode="Windows"/>
<identity impersonat... more >>
problem connecting to dbase from webservice with impersonation
Posted by Nadav Popplewell at 10/15/2006 11:39:01 PM
Hi everybody,
I've got a ASP.NET 2.0 WebService that need to connect to a SQL Server on
another machine.
I've setup the anonymous Account of the web application to an domain account
that has permissions to access the dbase,
and I've set
<identity impersonate="true" />
in the web.co... more >>
Custom providor help
Posted by Etariq at 10/14/2006 11:44:51 PM
dear all
I have created a custom MembershipProvider but if I run it from the built in
server of the .net 2.0 every thing goes well and if I try to run it from the
localhost using the same username and password it wont Authenticate me any
ideas
thanks
... more >>
How to avoid URL direct access?
Posted by Gus at 10/14/2006 4:31:29 PM
Hi:
I have a documents program in mi intranet, it only shows each user
authorized files and each line has the file description and a link to
open it.
The problem is that if anyone writes the file's URL address directly
into the browser (like: http://mydomain/myintranet/myfiles/myfile.pdf)
... more >>
How worker process navigate request to web application.
Posted by trialproduct2004 NO[at]SPAM yahoo.com at 10/11/2006 11:31:17 PM
Hi all,
I am having one question regarding worker process of asp.net.
I have heard that there is one worker process running on webserver i.e
aspnet.exe
So when any request get to webserver, webserver navigate that reaquest
to this worker process.
and then this worker process navigate r... more >>
how to sign out forms authentication on session end
Posted by JohnDeHope3 at 10/11/2006 6:25:02 AM
I will keep this short and sweet.
I am using the default session (inproc) and forms authentication.
When a user looses session (for whatever reason) I want that to cause them
to loose forms authentication also. I want them to be sent to the forms
authentication login screen when they loose the... more >>
Does dotnet synchorize accesses to MemberShip.UpdateUser?
Posted by CAIBird at 10/10/2006 11:38:02 PM
hi,
As title, i don't know whether dotnet synchorizes accesses to function
MemberShip.UpdateUser especially when update the same user at the same time.
Or, we need to implement synchorization ourselves?
And, if i want to code in sequence like:
...
MemberShip.UpdateUser();
... more >>
AzMan non-admin problem under Win XP
Posted by Vovan.Net at 10/10/2006 11:11:05 AM
Hello All,
I have a problem with AzMan under Windows XP.
On my web site I use AzMan/AD role management. Store installed on Win 2003 SP1 server, but site works under WinXP SP2.
For IIS identity domain account with non-admin’s privileges is used.
In this case the error occurs: "The paramet... more >>
Forms Authentication Cohabitation Between Framework 1.1 and 2.0
Posted by Andrés Giraldo at 10/10/2006 10:44:21 AM
Hi!
I have an ASP.NET/C# app and I've got to obtain some user data from a
System.Security.Principal.GenericPrincipal object, created in framework
1.1 in a solution, wich my app will be part of it.
In my Web.Config I write the same configuration that the 1.1 framework
Web.Config projects:
... more >>
Can't get Impersonation / delegation to work
Posted by Al at 10/10/2006 10:16:02 AM
Sorry that I've posted this in a couple of places, but i'm getting desperate.
I'm trying to use Impersonation in a website, and use delegation to allow
connection to a remote SQL Server. It's this delegation step that I'm stuck
on.
My test enviroment is a Virtual Server 2005 R2, hosting 3... more >>
LogonUser Access Denied
Posted by Bill Alexander at 10/10/2006 7:06:01 AM
I'm also having problems with impersonation. Or rather, I'm not quite
getting that far.
I need to be able to manually authenticate users. However, every attempt to
make the Win32 call to LogonUser returns an "Access Denied" exception.
I've attempted this from both web and windows forms a... more >>
How to programatically activate the ASP.net "Password Recovery" ?
Posted by Ofer at 10/9/2006 6:54:01 AM
Hi,
We use the ASP.net loginControls and the DB schema.
How to programmatically activate the "PasswordRecovery" of a specific
end-user when a user clicks my web application's button?
I need to send a specific user an email with a new "reset" password.
I thought of including an invisible Pa... more >>
Using two membership providers
Posted by Daniel at 10/6/2006 12:50:56 PM
Hello,
imagine an application that has two membership providers installed. The
first provider is used for public user to access some restricted
functions, e.g. a forum, his mailbox, or others.
The second provider is used for administrative purposes. Obviosly only
select users have such an a... more >>
Authentication loop-hole?
Posted by Griff at 10/6/2006 12:00:00 AM
In the design stage, so I don't have the ability to test this scenario at
the moment, so I would be grateful if someone could prove to me that the
following scenario does not exist...
The idea is that we will have one website with multiple URLs pointing to it.
For example www.mySite.com and... more >>
Performance issues With Impersonation and Delegation
Posted by Bill Ward at 10/5/2006 11:49:47 AM
Hi there,
I have some severe performance issues that seem to be associated with
impersonation and delegation. We are designing n-tier solutions with ASP.NET
web services as the middle tiers and SQL databases and windows services on
the back end. None of the traffic hits the internet. All of... more >>
Single Sign-On with OWA and MetaFrame XP
Posted by Brad Miller at 10/5/2006 7:22:02 AM
Hi All -
I have a question regarding OWA.
We currently have 2 sign-on screens we are trying combine, one is OWA and
the other is Citrix MetaFrame XP. The solution requested is that we have one
web page where the user logs in, and upon successful login, the user is
presented with 2 lin... more >>
authentication , roles - sql serwer
Posted by m_mis at 10/4/2006 3:32:38 PM
Hi,
to use local/doman user and roles in web.config <authorization> section =
i =
have to add :
<roleManager defaultProvider=3D"WindowsProvider" enabled=3D"true">
<providers>
<add
name=3D"WindowsProvider"
type=3D"System.Web.Security.WindowsTo... more >>
authorization / authentication policy help
Posted by yofnik NO[at]SPAM comcast.net at 10/4/2006 12:52:33 PM
Hello,
Using policy (modifying web.config) and FormsAuthentication, is it
possible to return an error message (or redirect to error page) instead
of redirecting to the login page for specific users only?
Here's an example:
I have a section of my web app that is for admins only. The
authori... more >>
Unable to connect to SQL Server database
Posted by James at 10/4/2006 7:13:02 AM
Hello
I am new to ASP and I am using ASP.Net Visual Web Developer Express Edition.
I have been following 'How To' videos online and I am currently trying to
add Login forms.
When I first go to add a Role, by clicking on the ASP.Net Configuration
button, then select Security like it sho... more >>
Security Trimming in ASP.Net 2.0 question
Posted by Patrick.O.Ige at 10/4/2006 12:10:40 AM
Hi guys,
Just got a questions here regarding Site Navigation
I have SiteMapNode with Roles attribute
The Roles are from Active Directory since i'm using Windows Auth.
But the problem is my treeview menu is going to be huge and i would have to
be constructing the siteMap and then as... more >>
Single sign on for Outlook web access
Posted by Vince Varallo at 10/3/2006 5:55:02 PM
Hello everyone,
Is there any way to create a single sign on solution that can authenticate a
user and then store the credentials and pass them to outlook web accees?
Essentially we want the first web page to ask the user for the user name and
password and the second page to give the user op... more >>
Windows authentication and Roles
Posted by m_mis at 10/2/2006 4:08:28 PM
Hi,
i have problems with understanding a security matter:
i have set:
<authentication mode=3D"Windows" />
and:
<authorization>
<deny users=3D"?" />
<allow roles=3D"role1"/>
<deny users=3D"*"/>
</authorization>
it doesn't work . i can't l... more >>
|