Groups | Blog | Home


Archived Months
July 2003
August 2003
September 2003
October 2003
November 2003
December 2003
January 2004
February 2004
March 2004
April 2004
May 2004
June 2004
July 2004
August 2004
September 2004
October 2004
November 2004
December 2004
January 2005
February 2005
March 2005
April 2005
May 2005
June 2005
July 2005
August 2005
September 2005
October 2005
November 2005
December 2005
January 2006
February 2006
March 2006
April 2006
May 2006
June 2006
July 2006
August 2006
September 2006
October 2006
November 2006
December 2006
January 2007
February 2007
March 2007
April 2007
May 2007
June 2007
July 2007
August 2007
September 2007
October 2007
November 2007
December 2007
January 2008
February 2008
March 2008
April 2008
May 2008
June 2008
all groups > asp.net security > june 2006 > threads for june 8 - 14, 2006

Filter by week: 1 2 3 4 5

authentication mode for specific files?
Posted by Jeremy Chapman at 6/14/2006 7:00:22 PM
I'm my web application, I've specified to use forms authentication in the web config. In my signin page, I have an img tag to an image in my web applications virtual directory. Because the user is not signed in yet, the image url is not available, is there any way in the web config file to ...more >>


SqlMembershipProvider -
Posted by Sherman KB at 6/14/2006 1:23:01 PM
In have my web.config set up so that after three invalid login attempts, the user account will be locked out maxInvalidPasswordAttempts="3" passwordAttemptWindow="10" This all works fine. If I want the account to be enabled after a specific period of time has pas...more >>

membership and redirect of unauthenticated requests
Posted by Jerry C at 6/14/2006 11:48:01 AM
I am trying to implment membership. The problem I am having is setting up the authentication and authorization section. I may have misunderstood this class. I want to have a user that is using IE and is a member of the domain or if there is a stand alone server that has a companion accoun...more >>

Asp.net & Ssl
Posted by DimX at 6/14/2006 11:04:41 AM
I have created a web service in microsoft studio .NET (.asmx file). The web service uses SOAP messages in order to communicate with the web page client. The programming language for the server is VB and Javascript for the client. I would like some help in order to insert an SSL protocol for ...more >>

Calling Web Service that calls other Web Service with Windows Authentication
Posted by manuelserpabrandao NO[at]SPAM gmail.com at 6/14/2006 8:17:35 AM
Hi all I would like to now the answer to the following problem, if someone can help. Given a windows application client that's calling a web service (using default credentials) the web service gets invoked fine with the users credentials. However they need to call a second web service f...more >>

Weird issue with Login Control and Authentication
Posted by CarlosSanchezJr NO[at]SPAM gmail.com at 6/14/2006 7:12:33 AM
Quick background on what I'm using: Visual Web Developer 2005 SQL Server Express 2005 Hosted on my local machine (this is just a "get used to 2.0" test website) I have created the membership (?) schema in my existing Express 2005 database. That has went well. I have two users in that dat...more >>

IIS Sql Server ASP NET 2 authentication
Posted by digbydog at 6/13/2006 10:03:55 PM
Hi, we are creating an intranet where iis and sql server reside on different machines. We have been able to use identityimpersonate=true with windows authentication etc when iis and sql server reside on the same machine but cannot get this to work when they are on different machines. I r...more >>

How many roles is too many?
Posted by Warm.Beer NO[at]SPAM gmail.com at 6/13/2006 3:40:13 PM
Hi there, We are upgrading an ASP classic application to ASP.NET 2.0, and currently have a permission set of about 200 distict permissions. I am thinking of using the Membership provider to map each permission to a named Role, so we can explicitly or declaritively check for a given permissi...more >>



Membership Provider problem: spot Wally
Posted by Andrew Wrigley at 6/13/2006 10:43:12 AM
Hi I am using a custom database for Membership. The web admin tool connects fine to MySqlMembershipProvider, but when I try to use my login page I get the following error: System.Web.HttpException: Could not find the specified Membership Provider. All was working fine until I changed t...more >>

Unable to establish secure connection with the server
Posted by Jerry C at 6/13/2006 6:20:01 AM
I am trying to use ActivedirectoryMembershipProvider in membership using Asp.net 2.0, VS2005. I am getting the error "Unable to establish secure connection with the server" . The server is a standalone server Windows server 2003. The server name is CDCROTTY The connection string is <add na...more >>

"Could not find the specified membership provider." Error
Posted by Andrew Wrigley at 6/12/2006 4:34:47 PM
Hi I am getting a "Could not find the specified membership provider." error when trying to use the membership api. I can find no documentation on this error, or any other threads. Does anyone know how I can solve this? Thanks Andrew Wrigley ...more >>

View current sessions
Posted by Magnus at 6/12/2006 3:49:25 PM
Hi! I have several dotnet applications (or small webs). Sometimes it's necessary to restart IIS, but before doing this I would like to know currect sessions in IIS or in different apps. Is this possible?!?! Best regards /Magnus ...more >>

Exception adding user with no email
Posted by David Thielen at 6/12/2006 3:34:02 PM
Hi; When I add a user using the SqlMembershipProvider (I have requiresUniqueEmail="false") and use CreateUser(name, password) - ie no email address, the user is created but CreateUser throws an exception saying the user already exists. Any idea why? -- thanks - dave david_at_windwa...more >>

SqlClientPermission
Posted by James Hokes at 6/12/2006 2:44:38 PM
Hello, We have an ASP.Net 2.0 web application running. If we connect to (and use) SqlClient objects from within the aspx pages themselves, all is well. However, if we create a Data Access Layer assembly, and place it into the /bin directory, and attempt to use said assembly, we get an erro...more >>

ASP.NET default db connect credentials
Posted by John A Grandy at 6/12/2006 12:55:35 PM
How to configure ASP.NET to attempt database connections as NETWORK SERVICE rather than MACHINE ACCOUNT {DOMAIN-NAME}\{MACHINE-NAME}$ ? ...more >>

redirect on failed authorization in ASP.NET 2.0
Posted by bryanp10 NO[at]SPAM hotmail.com at 6/12/2006 12:44:57 PM
This is driving me crazy. How do I redirect a failed AUTHORIZATION to a custom page in ASP.NET 2.0? All failed authorizations are going to my loginUrl, which is next to useless. I want an error page that says WHY a user can't access a URL. This seems like it should have been an obvious feat...more >>

<identity impersonate="true"/> means can, not is
Posted by David Thielen at 6/12/2006 9:52:01 AM
Hi; I just want to confirm this. When I set <identity impersonate="true"/> that means I can impersonate on the server side. It does not mean that impersonation is set up in advance for each call to the code-behind. correct ??? - thanks - dave -- thanks - dave david_at_windward_dot_ne...more >>

QueryString for HTTP GET in IIS Log
Posted by Steve Besalke at 6/12/2006 9:30:02 AM
I have IIS configured to log the query string for one of my companies' applications because it's used for some statistics, but I need to keep the query string from logging during a HTTP GET for a specific page. Is there a way to keep IIS from logging the query string for just one page? Or is ...more >>

problem accessing ActiveDirectory through Mozill Firefox
Posted by krisshnaprabhu at 6/12/2006 5:11:40 AM
hi all, by using the following code i can be able to retrieve the User "DisplayName" from the ActiveDirectory by using IE, if i run the same application by using Mozilla Firefox then i am getting "An operations error occurred" message, my requirements is my application should run in this tw...more >>

Site security config file and directories
Posted by steven scaife at 6/12/2006 2:07:01 AM
I am creating a site for the intranet at the company i work for, but there are 3 levels of security and a login form. All users have to authenticate with the system. Logins are stored in a DB, but i use windows authentication to find the account, this is working fine, and i have set the fo...more >>

Newbie 2.0 Authentication question
Posted by GaryDean at 6/11/2006 5:08:49 PM
I'm trying to use 2.0 forms authentication in a new web site. My book shows how to set this up with the ASP.Net Web Site Administration Tool by going to the Security tab and following the instructions there. However, on this page I get an "Unable to connect to SQL Server database" mess...more >>

Membership problem!
Posted by Sean at 6/10/2006 4:23:01 PM
have membership tables installed on external SQL database? check have login controls working such that new users are created in that table? check those users also show up in the asp management page? check Can grab all the users in a memberhship collection object and they are all valid and cor...more >>

Sql Membership & Role provider
Posted by David Thielen at 6/10/2006 9:04:02 AM
Hi; We are thinking of writing our on membership & role provider. This would use whatever database each of our customers prefers - Sql Server, Oracle, DB2, or MySql. We figure that since the repository for our web app is in the database, that makes more sense than also requiring SqlExpress ...more >>

login fails on production system
Posted by David Thielen at 6/9/2006 3:51:26 PM
Hi; My system runs fine on my test system. On the production system it runs fine if I use windows authentication. But when I switch to the AspNetSqlMembershipProvider system for authentication/authorization I get "Your login attempt was not successful. Please try again." I copied App_Dat...more >>

Principal flowing and caching
Posted by James at 6/9/2006 11:21:01 AM
Hy, I'm currently working on an web app with ASP.NET 2.0. Here are my needs : -I would like a custom form login screen. -My user information is kept in AD. -My ASP.NET application must access internal WebServices which require IIS Intregrated Windows Authntication. I current understanding ...more >>

Menu disappears on <authorization> change
Posted by David Thielen at 6/9/2006 10:35:01 AM
Hi; If I have: <authorization> <deny users="?"/> <allow roles="Windward Users"/> </authorization> Then my page shows up fine and it allows any authenticated user (even those not in the Users role) in. If I do: <authorization> <deny users="*"/> <allow roles...more >>

Delegation problems
Posted by michael.rasmussen NO[at]SPAM nborder.com at 6/9/2006 8:39:19 AM
I am trying to setup delegation from a IIS server to a SQL 2K backend server running on a different physical server from the IIS server. I am running into problems because when I try to delegate the MSSQL service is not on the list of services to select for the SQL server. Has anyone seen this b...more >>

Accessing a network share with a non-domain account
Posted by lf at 6/9/2006 4:41:01 AM
Hi, I have an ASP.NET 2.0 application that is trying to access a shared drive. The shared drive requires a username and password. The username and password correspond to a local account on the W2K3 server where the drive is located. I have been looking at using impersonation to try and...more >>

Impersonation doesn't work with UNC
Posted by Tom Bennart at 6/9/2006 2:40:02 AM
hi, I have a web application that lets the users copy files from one unc source to different unc destinations. The impersonation flag in my web.config is set to true and I get the user's correct account name. When copying a file to a unc path the anonymous users context is used instead the us...more >>

Trying to create a secure app that never times out - very confused
Posted by pgorry NO[at]SPAM gmail.com at 6/8/2006 9:46:51 PM
Hi all, I am trying to create an new website using ASP.NET 2.0. I am using forms authentication, and I am trying to have it so that once a user signs in, they will never time out. However, after logging in - and then leaving the browser (IE6) open for a given period (I have not managed to ...more >>

Reading - Parsing Records From An LDAP LDIF File In .Net?
Posted by jeangv NO[at]SPAM gmail.com at 6/8/2006 3:03:47 PM
Reading - Parsing Records From An LDAP LDIF File In .Net? I am in need of a .Net class that will allow for the parsing of a LDAP LDIF file. An LDIF file is the standard format for representing LDAP objects. I need to be able to read the records from an LDIF file into ..Net. There exists a...more >>

iis 5.0 running as domain account
Posted by Scott Walters at 6/8/2006 2:10:51 PM
Hi, I'm trying to get delegation to work in my asp.net 2.0 web service. I've had the domain admins enable delegation for the web service machine but when I switch the iis service to run as a domain account instead of local system, I can't get in anymore from a remote machine. Internet exp...more >>

Forms Authentication
Posted by danielevans NO[at]SPAM gmail.com at 6/8/2006 9:06:39 AM
Hi Is it possible with forms authentication to have two seperate areas that need users to register for both for access. For example, i have a /trade/ directory and a /game/ directory. I need to allow users access to both after they have provided contact details. What i want to happen is that ...more >>


DevelopmentNow Blog