all groups > asp.net security > june 2006 > threads for june 8 - 14, 2006
Filter by week: 1 2 3 4 5
authentication mode for specific files?
Posted by Jeremy Chapman at 6/14/2006 7:00:22 PM
I'm my web application, I've specified to use forms authentication in the
web config. In my signin page, I have an img tag to an image in my web
applications virtual directory. Because the user is not signed in yet, the
image url is not available, is there any way in the web config file to
... more >>
SqlMembershipProvider -
Posted by Sherman KB at 6/14/2006 1:23:01 PM
In have my web.config set up so that after three invalid login attempts, the
user account will be locked out
maxInvalidPasswordAttempts="3"
passwordAttemptWindow="10"
This all works fine. If I want the account to be enabled after a specific
period of time has pas... more >>
membership and redirect of unauthenticated requests
Posted by Jerry C at 6/14/2006 11:48:01 AM
I am trying to implment membership.
The problem I am having is setting up the authentication and authorization
section.
I may have misunderstood this class.
I want to have a user that is using IE and is a member of the domain or if
there is a stand alone server that has a companion accoun... more >>
Asp.net & Ssl
Posted by DimX at 6/14/2006 11:04:41 AM
I have created a web service in microsoft studio .NET (.asmx file). The
web service uses SOAP messages in order to communicate with the web
page client. The programming language for the server is VB and
Javascript for the client. I would like some help in order to insert an
SSL protocol for ... more >>
Calling Web Service that calls other Web Service with Windows Authentication
Posted by manuelserpabrandao NO[at]SPAM gmail.com at 6/14/2006 8:17:35 AM
Hi all
I would like to now the answer to the following problem, if someone can
help.
Given a windows application client that's calling a web service (using
default credentials) the
web service gets invoked fine with the users credentials. However they
need
to call a second web service f... more >>
Weird issue with Login Control and Authentication
Posted by CarlosSanchezJr NO[at]SPAM gmail.com at 6/14/2006 7:12:33 AM
Quick background on what I'm using:
Visual Web Developer 2005
SQL Server Express 2005
Hosted on my local machine (this is just a "get used to 2.0" test
website)
I have created the membership (?) schema in my existing Express 2005
database. That has went well. I have two users in that dat... more >>
IIS Sql Server ASP NET 2 authentication
Posted by digbydog at 6/13/2006 10:03:55 PM
Hi,
we are creating an intranet where iis and sql server reside on different
machines. We have been able to use identityimpersonate=true with windows
authentication etc when iis and sql server reside on the same machine but
cannot get this to work when they are on different machines.
I r... more >>
How many roles is too many?
Posted by Warm.Beer NO[at]SPAM gmail.com at 6/13/2006 3:40:13 PM
Hi there,
We are upgrading an ASP classic application to ASP.NET 2.0, and
currently have a permission set of about 200 distict permissions.
I am thinking of using the Membership provider to map each permission
to a named Role, so we can explicitly or declaritively check for a
given permissi... more >>
Don't see what you're looking for? Search DevelopmentNow.com.
Membership Provider problem: spot Wally
Posted by Andrew Wrigley at 6/13/2006 10:43:12 AM
Hi
I am using a custom database for Membership. The web admin tool connects
fine to MySqlMembershipProvider, but when I try to use my login page I get
the following error:
System.Web.HttpException: Could not find the specified Membership Provider.
All was working fine until I changed t... more >>
Unable to establish secure connection with the server
Posted by Jerry C at 6/13/2006 6:20:01 AM
I am trying to use ActivedirectoryMembershipProvider in membership using
Asp.net 2.0, VS2005. I am getting the error "Unable to establish secure
connection with the server" . The server is a standalone server Windows
server 2003. The server name is CDCROTTY The connection string is
<add na... more >>
"Could not find the specified membership provider." Error
Posted by Andrew Wrigley at 6/12/2006 4:34:47 PM
Hi
I am getting a "Could not find the specified membership provider." error
when trying to use the membership api.
I can find no documentation on this error, or any other threads. Does
anyone know how I can solve this?
Thanks
Andrew Wrigley
... more >>
View current sessions
Posted by Magnus at 6/12/2006 3:49:25 PM
Hi!
I have several dotnet applications (or small webs).
Sometimes it's necessary to restart IIS, but before doing this I would like
to know currect sessions in IIS or in different apps.
Is this possible?!?!
Best regards /Magnus
... more >>
Exception adding user with no email
Posted by David Thielen at 6/12/2006 3:34:02 PM
Hi;
When I add a user using the SqlMembershipProvider (I have
requiresUniqueEmail="false") and use CreateUser(name, password) - ie no email
address, the user is created but CreateUser throws an exception saying the
user already exists.
Any idea why?
--
thanks - dave
david_at_windwa... more >>
SqlClientPermission
Posted by James Hokes at 6/12/2006 2:44:38 PM
Hello,
We have an ASP.Net 2.0 web application running. If we connect to (and use)
SqlClient objects from within the aspx pages themselves, all is well.
However, if we create a Data Access Layer assembly, and place it into the
/bin directory, and attempt to use said assembly, we get an erro... more >>
ASP.NET default db connect credentials
Posted by John A Grandy at 6/12/2006 12:55:35 PM
How to configure ASP.NET to attempt database connections as NETWORK SERVICE
rather than MACHINE ACCOUNT {DOMAIN-NAME}\{MACHINE-NAME}$ ?
... more >>
redirect on failed authorization in ASP.NET 2.0
Posted by bryanp10 NO[at]SPAM hotmail.com at 6/12/2006 12:44:57 PM
This is driving me crazy. How do I redirect a failed AUTHORIZATION to
a custom page in ASP.NET 2.0?
All failed authorizations are going to my loginUrl, which is next to
useless. I want an error page that says WHY a user can't access a URL.
This seems like it should have been an obvious feat... more >>
<identity impersonate="true"/> means can, not is
Posted by David Thielen at 6/12/2006 9:52:01 AM
Hi;
I just want to confirm this. When I set <identity impersonate="true"/> that
means I can impersonate on the server side. It does not mean that
impersonation is set up in advance for each call to the code-behind.
correct ??? - thanks - dave
--
thanks - dave
david_at_windward_dot_ne... more >>
QueryString for HTTP GET in IIS Log
Posted by Steve Besalke at 6/12/2006 9:30:02 AM
I have IIS configured to log the query string for one of my companies'
applications because it's used for some statistics, but I need to keep the
query string from logging during a HTTP GET for a specific page. Is there a
way to keep IIS from logging the query string for just one page? Or is ... more >>
problem accessing ActiveDirectory through Mozill Firefox
Posted by krisshnaprabhu at 6/12/2006 5:11:40 AM
hi all,
by using the following code i can be able to retrieve the User
"DisplayName" from the ActiveDirectory by using IE, if i run the same
application by using Mozilla Firefox then i am getting "An operations
error occurred" message, my requirements is my application should run
in this tw... more >>
Site security config file and directories
Posted by steven scaife at 6/12/2006 2:07:01 AM
I am creating a site for the intranet at the company i work for, but there
are 3 levels of security and a login form.
All users have to authenticate with the system. Logins are stored in a DB,
but i use windows authentication to find the account, this is working fine,
and i have set the fo... more >>
Newbie 2.0 Authentication question
Posted by GaryDean at 6/11/2006 5:08:49 PM
I'm trying to use 2.0 forms authentication in a new web site. My book shows
how to set this up with the ASP.Net Web Site Administration Tool by going to
the Security tab and following the instructions there.
However, on this page I get an "Unable to connect to SQL Server database"
mess... more >>
Membership problem!
Posted by Sean at 6/10/2006 4:23:01 PM
have membership tables installed on external SQL database? check
have login controls working such that new users are created in that table?
check
those users also show up in the asp management page? check
Can grab all the users in a memberhship collection object and they are all
valid and cor... more >>
Sql Membership & Role provider
Posted by David Thielen at 6/10/2006 9:04:02 AM
Hi;
We are thinking of writing our on membership & role provider. This would use
whatever database each of our customers prefers - Sql Server, Oracle, DB2, or
MySql. We figure that since the repository for our web app is in the
database, that makes more sense than also requiring SqlExpress ... more >>
login fails on production system
Posted by David Thielen at 6/9/2006 3:51:26 PM
Hi;
My system runs fine on my test system. On the production system it runs fine
if I use windows authentication. But when I switch to the
AspNetSqlMembershipProvider system for authentication/authorization I get
"Your login attempt was not successful. Please try again."
I copied App_Dat... more >>
Principal flowing and caching
Posted by James at 6/9/2006 11:21:01 AM
Hy,
I'm currently working on an web app with ASP.NET 2.0.
Here are my needs :
-I would like a custom form login screen.
-My user information is kept in AD.
-My ASP.NET application must access internal WebServices which require IIS
Intregrated Windows Authntication.
I current understanding ... more >>
Menu disappears on <authorization> change
Posted by David Thielen at 6/9/2006 10:35:01 AM
Hi;
If I have:
<authorization>
<deny users="?"/>
<allow roles="Windward Users"/>
</authorization>
Then my page shows up fine and it allows any authenticated user (even those
not in the Users role) in.
If I do:
<authorization>
<deny users="*"/>
<allow roles... more >>
Delegation problems
Posted by michael.rasmussen NO[at]SPAM nborder.com at 6/9/2006 8:39:19 AM
I am trying to setup delegation from a IIS server to a SQL 2K backend
server running on a different physical server from the IIS server. I am
running into problems because when I try to delegate the MSSQL service
is not on the list of services to select for the SQL server. Has anyone
seen this b... more >>
Accessing a network share with a non-domain account
Posted by lf at 6/9/2006 4:41:01 AM
Hi,
I have an ASP.NET 2.0 application that is trying to access a shared drive.
The shared drive requires a username and password. The username and
password correspond to a local account on the W2K3 server where the drive is
located.
I have been looking at using impersonation to try and... more >>
Impersonation doesn't work with UNC
Posted by Tom Bennart at 6/9/2006 2:40:02 AM
hi,
I have a web application that lets the users copy files from one unc source
to different unc destinations. The impersonation flag in my web.config is set
to true and I get the user's correct account name. When copying a file to a
unc path the anonymous users context is used instead the us... more >>
Trying to create a secure app that never times out - very confused
Posted by pgorry NO[at]SPAM gmail.com at 6/8/2006 9:46:51 PM
Hi all,
I am trying to create an new website using ASP.NET 2.0. I am using
forms authentication, and I am trying to have it so that once a user
signs in, they will never time out.
However, after logging in - and then leaving the browser (IE6) open for
a given period (I have not managed to ... more >>
Reading - Parsing Records From An LDAP LDIF File In .Net?
Posted by jeangv NO[at]SPAM gmail.com at 6/8/2006 3:03:47 PM
Reading - Parsing Records From An LDAP LDIF File In .Net?
I am in need of a .Net class that will allow for the parsing of a LDAP
LDIF file. An LDIF file is the standard format for representing LDAP
objects. I need to be able to read the records from an LDIF file into
..Net.
There exists a... more >>
iis 5.0 running as domain account
Posted by Scott Walters at 6/8/2006 2:10:51 PM
Hi,
I'm trying to get delegation to work in my asp.net 2.0 web service. I've
had the domain admins enable delegation for the web service machine but
when I switch the iis service to run as a domain account instead of
local system, I can't get in anymore from a remote machine. Internet
exp... more >>
Forms Authentication
Posted by danielevans NO[at]SPAM gmail.com at 6/8/2006 9:06:39 AM
Hi
Is it possible with forms authentication to have two seperate areas
that need users to register for both for access. For example, i have a
/trade/ directory and a /game/ directory. I need to allow users access
to both after they have provided contact details. What i want to happen
is that ... more >>
|