Archived Months
July 2003
August 2003
September 2003
October 2003
November 2003
December 2003
January 2004
February 2004
March 2004
April 2004
May 2004
June 2004
July 2004
August 2004
September 2004
October 2004
November 2004
December 2004
January 2005
February 2005
March 2005
April 2005
May 2005
June 2005
July 2005
August 2005
September 2005
October 2005
November 2005
December 2005
January 2006
February 2006
March 2006
April 2006
May 2006
June 2006
July 2006
August 2006
September 2006
October 2006
November 2006
December 2006
January 2007
February 2007
March 2007
April 2007
May 2007
June 2007
July 2007
August 2007
September 2007
October 2007
November 2007
December 2007
January 2008
February 2008
March 2008
April 2008
May 2008
June 2008
all groups > asp.net security > october 2006

Filter by week: 1 2 3 4 5

Should I use Membership and Roles in ASP.NET 2.0
Posted by msnews.microsoft.com at 10/31/2006 12:12:20 PM
Hello All, I did a lot of reading on this new feature from Microsoft ASP.NET 2.0, but I ran into a design problem. In my project the user information contains much more information then the information shown in the default membership and roles tables that are installed with SQL server. T...more >>


unable to execute dos commands through web application
Posted by Arjun at 10/31/2006 5:19:02 AM
Problem definition:: Register a .dll assembly into GAC(\windows\assembly) through web application I have a code which works fine with web application before deployment(Without IIS), But the same code doesn't work when the web application is ran through IIS(Without errorthe code exe...more >>

login control and custom db
Posted by ken s at 10/27/2006 11:16:02 AM
I'm creating an ASP.NET 2.0 web application. I want to use the login control to validate users using my existing SQL 2005 database (stores username, password, and role) The documentation seems to want me to create this new aspnet db and use roles and memberships. Can I simply use my own da...more >>

Why encryption failed?
Posted by CAIBird at 10/27/2006 1:48:02 AM
hi, i'm trying to encrypt a present section in web.config named "system.net" using following command line: aspnet_regiis.exe -pef "system.net" C:\site i get failed everytime i execute it, getting a error"The configuration section 'system.net' was not found". i'm almost crazy, this secti...more >>

Using login alias in Membership Provider
Posted by Stephen Walch at 10/26/2006 7:30:41 PM
Our user directly allows authentication with "short names". For example, the user "Joe Cool/Acme" can log in with the user id "jcool". In implementing an ASP.NET Membership Provider, we can not figure out how to supply the real user name (used in access control settings, etc.) when users l...more >>

Enabling Windows Authentication from inside Forms Authentication (ASP.NET 2.0)
Posted by Michael D. Ober at 10/25/2006 2:52:40 PM
I need the ability to bypass the forms authentication login page when the user requesting the protected page is running on our corporate network and is also logged into the corporate domain. How do I do this? Thanks, Mike Ober. ...more >>

How to resolve "WSE Settings Error" - unable to save policycache f
Posted by John K at 10/25/2006 12:49:01 PM
I receive a "WSE Settings Error" when I click OK on the WSE 3 Settings (i.e. click "WSE Settings 3.0") I edited the appropriate settings but then I get the "WSE Settings Error" "Unable to add ...\wsePolicyCache.config to the project. Check if the file is in the Project directory or try adding...more >>

Access denied errors
Posted by krallabandi NO[at]SPAM gmail.com at 10/25/2006 7:14:45 AM
Do you have any idea about the below errors? Access to the path "C:\DOCUME~1\P005715\ASPNET\LOCALS~1\Temp\cumhnc6b.cmdline" is denied. Access to the path "C:\DOCUME~1\P005715\ASPNET\LOCALS~1\Temp\fbc8tyiu.cmdline" is denied. Access to the path "C:\DOCUME~1\P005715\ASPNET\LOCALS~1\Temp\...more >>



No authentication with Server.Transfer("url")
Posted by Ashok at 10/24/2006 8:28:03 AM
Hi All, I am using Integrated windows authentication(IWA) on my child virtual directory(VD) which is beneath the parent Virtual Directory. When i use Server.Transfer("/Parent VD/Child VD/StartingPage.aspx") i am getting the error "Error executing child request for /Parent VD/Child VD/Start...more >>

Can't access web service.
Posted by ad at 10/23/2006 8:47:59 PM
I can use my pc to access any asp.net web page, but can't access web service. Is it due to firewall? What setting can block web servcie but not web page? ...more >>

<location> multiple file question
Posted by David Thielen at 10/21/2006 2:59:02 PM
Hi; I need to have the following in Web.config: <location path="help/login*.htm"> <system.web> <authorization> <allow users="*"/> </authorization> </system.web> </location> But it does not like the * in login*.htm. We have this as the help files for the login page - bu...more >>

Roles.IsUserInRole != Context.User.IsInRole
Posted by Lyndon Hills at 10/20/2006 8:04:02 AM
Hi, I'm hoping that someone might enlighten me as to how the Roles.IsUserInRole functionality works. I have my custom role provider set up and working, but realised that the caching wasn't working. When my c# code hit the line Roles.IsUserInRole I saw the identity property of my role pri...more >>

asp.net postbacks don't work after leaving browser open all night w/ windows integrated authentication
Posted by Ken Yee at 10/20/2006 7:11:41 AM
Has anyone seen this? If you open up an MSIE (latest 6.x) browser window on a web app that is set to allow only windows integrated authentication, the next morning, if you click on any of the links (they're trivial asp.net controls like a hyperlink but it uses postbacks), you'll get cryptic...more >>

ActiveDirectoryMembershipProvider.ValidateUser problem
Posted by Renaud Langis at 10/20/2006 6:49:03 AM
Hello, I am using the ActiveDirectoryMembershipProvider class to access active directory in an asp.net application. It is working well appart from one thing. When a user's password has expired, i can't validate if the password entered is correct before allowing the user to change it. Ac...more >>

LoginName in .vb
Posted by Herb at 10/19/2006 7:33:02 AM
Using ASP.NET membership, is it possible to access the LoginName in my aspx.vb code? I can create the LoginName object which displays the currently logged in user on the page, but how do I refer to that name in code? TIA...more >>

CRL And C#
Posted by Leeor Chernov at 10/18/2006 5:36:55 PM
What is the best way to check certificate against CRL, by code. Should it be directly from the CA site ( CRL Distribution Point = http://icd6.ica.co.il/oca02.crl ), or should I download the crl to the web server hard disk??? TNX Leeor Chernov...more >>

EnvelopedCMS and MailMessage [.NET 2.0 - VB_VS2005]
Posted by VIOT Yves at 10/18/2006 5:19:57 PM
Hi all, I'm new in VS2005 (and .NET framework 2.0) and i have a problem with envelopedCMS and MaiMessage objects. I can't make it work. I've tried several things but it doesn't work. I would like to know if anybody have a code example ? The only thing i'm sure is that recipients and certifi...more >>

Membership - Database Security
Posted by rbfigueira at 10/18/2006 5:51:02 AM
Hi friends, In our institution we want to install the Membership Database (tables, stored procedures, views, etc) in one separated database for share of all web application (avoid installing in each new asp.net application database all the tables, stored procedures, views, etc for support ...more >>

Need for encryption in WSE 3.0 if using SS-avoid man-in-middle att
Posted by John K at 10/17/2006 11:04:02 AM
Hello. I plan on upgrading my .NET 2.0 web service to use WSE 3.0. I am using my web service over SSL and the PC client application access the web service directly (no middle man server(s)). I will be adding the UserNameToken option to authenticate the user to the web service. I am consi...more >>

Newbie, connection timing out problem
Posted by verci at 10/16/2006 9:59:33 PM
Hi, sorry if this seems stupid :( I'm running WindowsXP, Asp.net 1.1 and Sql Server 2000 , the problem is the my pages are timing randomly, I use a ODBC connection to the database in the global.asa file (below), the problem is that my pages some times work right and some times the...more >>

Can't get access with some role logins - on IIS 6 only
Posted by David Thielen at 10/16/2006 4:08:02 PM
Hi; This is turning into a major PITA. Someone is in the admin part of our web app and they logout to login back in without admin privleges (least privleges). They enter their uname/pw and what happens??? It tries to go back to the page they were last on - which is almost always an admin...more >>

printersettings.installedprinters in asp.net not working for non-domain webserver with network printers on domain
Posted by Tessa at 10/16/2006 4:02:14 PM
Hi, We have a .net web application, and are trying to use PrinterSettings.InstalledPrinters to list the printers installed on the webserver. (Windows 2003 server R2, IIS 6, .net framework 2.0.) The printers installed on the web server under the account used by asp.net for this web applica...more >>

AD Group Memberships (MyADMembershipProvider) Question
Posted by Andy Melick at 10/16/2006 3:02:33 PM
All, I am using MyADMembershipProvider as my membership provider to authenticate to my application via Active Directory. I have found how I can allow / deny authorization for users via <authorization> section in the web.config. What is a method to search users membership to return all the ...more >>

Error exporting RSA key container via aspnet_regiis
Posted by dpomt at 10/16/2006 2:58:01 PM
Hello, I have an issue exporting a RSA key container via aspnet_regiis. I am using aspnet_regiis -px "HoKeyCont7" HoKeyCont7.xml -pri and I get the following (german) error message: Exporting RSA Keys to file... Schlüssel ist im angegebenen Status nicht gültig. (translat...more >>

Impersonation and UnauthorizedAccessException
Posted by kevingeist NO[at]SPAM hotmail.com at 10/16/2006 12:18:50 PM
I hope someone can help me with this. Please tell me what I'm not seeing. In my web app, I'm trying to create files to a common directory. Only some network IDs have access to write to this directory. In my web.config I have: <authentication mode="Windows"/> <identity impersonat...more >>

problem connecting to dbase from webservice with impersonation
Posted by Nadav Popplewell at 10/15/2006 11:39:01 PM
Hi everybody, I've got a ASP.NET 2.0 WebService that need to connect to a SQL Server on another machine. I've setup the anonymous Account of the web application to an domain account that has permissions to access the dbase, and I've set <identity impersonate="true" /> in the web.co...more >>

Custom providor help
Posted by Etariq at 10/14/2006 11:44:51 PM
dear all I have created a custom MembershipProvider but if I run it from the built in server of the .net 2.0 every thing goes well and if I try to run it from the localhost using the same username and password it wont Authenticate me any ideas thanks ...more >>

How to avoid URL direct access?
Posted by Gus at 10/14/2006 4:31:29 PM
Hi: I have a documents program in mi intranet, it only shows each user authorized files and each line has the file description and a link to open it. The problem is that if anyone writes the file's URL address directly into the browser (like: http://mydomain/myintranet/myfiles/myfile.pdf) ...more >>

How worker process navigate request to web application.
Posted by trialproduct2004 NO[at]SPAM yahoo.com at 10/11/2006 11:31:17 PM
Hi all, I am having one question regarding worker process of asp.net. I have heard that there is one worker process running on webserver i.e aspnet.exe So when any request get to webserver, webserver navigate that reaquest to this worker process. and then this worker process navigate r...more >>

how to sign out forms authentication on session end
Posted by JohnDeHope3 at 10/11/2006 6:25:02 AM
I will keep this short and sweet. I am using the default session (inproc) and forms authentication. When a user looses session (for whatever reason) I want that to cause them to loose forms authentication also. I want them to be sent to the forms authentication login screen when they loose the...more >>

Does dotnet synchorize accesses to MemberShip.UpdateUser?
Posted by CAIBird at 10/10/2006 11:38:02 PM
hi, As title, i don't know whether dotnet synchorizes accesses to function MemberShip.UpdateUser especially when update the same user at the same time. Or, we need to implement synchorization ourselves? And, if i want to code in sequence like: ... MemberShip.UpdateUser(); ...more >>

AzMan non-admin problem under Win XP
Posted by Vovan.Net at 10/10/2006 11:11:05 AM
Hello All, I have a problem with AzMan under Windows XP. On my web site I use AzMan/AD role management. Store installed on Win 2003 SP1 server, but site works under WinXP SP2. For IIS identity domain account with non-admin’s privileges is used. In this case the error occurs: "The paramet...more >>

Forms Authentication Cohabitation Between Framework 1.1 and 2.0
Posted by Andrés Giraldo at 10/10/2006 10:44:21 AM
Hi! I have an ASP.NET/C# app and I've got to obtain some user data from a System.Security.Principal.GenericPrincipal object, created in framework 1.1 in a solution, wich my app will be part of it. In my Web.Config I write the same configuration that the 1.1 framework Web.Config projects: ...more >>

Can't get Impersonation / delegation to work
Posted by Al at 10/10/2006 10:16:02 AM
Sorry that I've posted this in a couple of places, but i'm getting desperate. I'm trying to use Impersonation in a website, and use delegation to allow connection to a remote SQL Server. It's this delegation step that I'm stuck on. My test enviroment is a Virtual Server 2005 R2, hosting 3...more >>

LogonUser Access Denied
Posted by Bill Alexander at 10/10/2006 7:06:01 AM
I'm also having problems with impersonation. Or rather, I'm not quite getting that far. I need to be able to manually authenticate users. However, every attempt to make the Win32 call to LogonUser returns an "Access Denied" exception. I've attempted this from both web and windows forms a...more >>

How to programatically activate the ASP.net "Password Recovery" ?
Posted by Ofer at 10/9/2006 6:54:01 AM
Hi, We use the ASP.net loginControls and the DB schema. How to programmatically activate the "PasswordRecovery" of a specific end-user when a user clicks my web application's button? I need to send a specific user an email with a new "reset" password. I thought of including an invisible Pa...more >>

Using two membership providers
Posted by Daniel at 10/6/2006 12:50:56 PM
Hello, imagine an application that has two membership providers installed. The first provider is used for public user to access some restricted functions, e.g. a forum, his mailbox, or others. The second provider is used for administrative purposes. Obviosly only select users have such an a...more >>

Authentication loop-hole?
Posted by Griff at 10/6/2006 12:00:00 AM
In the design stage, so I don't have the ability to test this scenario at the moment, so I would be grateful if someone could prove to me that the following scenario does not exist... The idea is that we will have one website with multiple URLs pointing to it. For example www.mySite.com and...more >>

Performance issues With Impersonation and Delegation
Posted by Bill Ward at 10/5/2006 11:49:47 AM
Hi there, I have some severe performance issues that seem to be associated with impersonation and delegation. We are designing n-tier solutions with ASP.NET web services as the middle tiers and SQL databases and windows services on the back end. None of the traffic hits the internet. All of...more >>

Single Sign-On with OWA and MetaFrame XP
Posted by Brad Miller at 10/5/2006 7:22:02 AM
Hi All - I have a question regarding OWA. We currently have 2 sign-on screens we are trying combine, one is OWA and the other is Citrix MetaFrame XP. The solution requested is that we have one web page where the user logs in, and upon successful login, the user is presented with 2 lin...more >>

authentication , roles - sql serwer
Posted by m_mis at 10/4/2006 3:32:38 PM
Hi, to use local/doman user and roles in web.config <authorization> section = i = have to add : <roleManager defaultProvider=3D"WindowsProvider" enabled=3D"true"> <providers> <add name=3D"WindowsProvider" type=3D"System.Web.Security.WindowsTo...more >>

authorization / authentication policy help
Posted by yofnik NO[at]SPAM comcast.net at 10/4/2006 12:52:33 PM
Hello, Using policy (modifying web.config) and FormsAuthentication, is it possible to return an error message (or redirect to error page) instead of redirecting to the login page for specific users only? Here's an example: I have a section of my web app that is for admins only. The authori...more >>

Unable to connect to SQL Server database
Posted by James at 10/4/2006 7:13:02 AM
Hello I am new to ASP and I am using ASP.Net Visual Web Developer Express Edition. I have been following 'How To' videos online and I am currently trying to add Login forms. When I first go to add a Role, by clicking on the ASP.Net Configuration button, then select Security like it sho...more >>

Security Trimming in ASP.Net 2.0 question
Posted by Patrick.O.Ige at 10/4/2006 12:10:40 AM
Hi guys, Just got a questions here regarding Site Navigation I have SiteMapNode with Roles attribute The Roles are from Active Directory since i'm using Windows Auth. But the problem is my treeview menu is going to be huge and i would have to be constructing the siteMap and then as...more >>

Single sign on for Outlook web access
Posted by Vince Varallo at 10/3/2006 5:55:02 PM
Hello everyone, Is there any way to create a single sign on solution that can authenticate a user and then store the credentials and pass them to outlook web accees? Essentially we want the first web page to ask the user for the user name and password and the second page to give the user op...more >>

Windows authentication and Roles
Posted by m_mis at 10/2/2006 4:08:28 PM
Hi, i have problems with understanding a security matter: i have set: <authentication mode=3D"Windows" /> and: <authorization> <deny users=3D"?" /> <allow roles=3D"role1"/> <deny users=3D"*"/> </authorization> it doesn't work . i can't l...more >>


DevelopmentNow Blog