Groups | Blog | Home


Archived Months
July 2003
August 2003
September 2003
October 2003
November 2003
December 2003
January 2004
February 2004
March 2004
April 2004
May 2004
June 2004
July 2004
August 2004
September 2004
October 2004
November 2004
December 2004
January 2005
February 2005
March 2005
April 2005
May 2005
June 2005
July 2005
August 2005
September 2005
October 2005
November 2005
December 2005
January 2006
February 2006
March 2006
April 2006
May 2006
June 2006
July 2006
August 2006
September 2006
October 2006
November 2006
December 2006
January 2007
February 2007
March 2007
April 2007
May 2007
June 2007
July 2007
August 2007
September 2007
October 2007
November 2007
December 2007
January 2008
February 2008
March 2008
April 2008
May 2008
June 2008
all groups > asp.net security > august 2006 > threads for august 22 - 28, 2006

Filter by week: 1 2 3 4 5

membership/roles create user problem
Posted by John at 8/28/2006 10:26:27 PM
Hi I have a web service asmx file in a sub folders of site app root folder. With in the web service I am trying to cerate the user as below; <WebMethod()> _ Public Function CreateUser(ByVal Username As String, ByVal Password As String, ByVal Email As String, ByRef ErrMsg As String) As Boo...more >>


How to disable WinNT Login Prompt
Posted by JeffP NO[at]SPAM Work at 8/28/2006 5:34:51 PM
I have a few websites setup on one system on the DMZ Accessing the website and web apps via an alias domain name (free DynDNS.Org) When I try to open default.htm I can view this page in three web apps. When I try to open the login.aspx, which accepts a querystring and will auto-login, o...more >>

MembershipProvider and ADAM
Posted by Lancelot NO[at]SPAM community.nospam at 8/28/2006 9:17:22 AM
Hello, I am trying to find the simplest way to work with ADAM (or any other AD) and I have discovered the MembershipProvider class.... seems like it is doing just about everything I need. So, my project is developed on Windows XP, VS 2005 C# and I am not targeting ASP.... but seems l...more >>

Active Directory Access from a Web App
Posted by Jon Schneider at 8/28/2006 7:03:01 AM
I am trying to access employee information from Active Directory from my ASP ..Net web application. I have tried several different methods and each fail. Protected Sub Page_Load(ByVal sender As Object, ByVal e As System.EventArgs) Handles Me.Load Dim user As MembershipUser = Membership.Ge...more >>

Webpermission denied for a Windows Application
Posted by Axford at 8/28/2006 6:48:02 AM
Hi all, a localhost web service is configured anonymous+windows at the root level and at the virtual map level (Win XP). In the web.config I wrote <authentication mode="None" /> and <allow users="*"/>. The a Windows Application calls the service. The application code resides on a ne...more >>

Membership/roles help
Posted by John at 8/28/2006 2:09:36 AM
Hi I have looked in help but am not clear how to do the following in vb.net code. 1. Check if a user belongs to a specific role. 2. Change user's password. Is it possible to do it without knowing the old/existing password? Would appreciate if someone could give me some pointers. T...more >>

Createuser exception handling
Posted by John at 8/28/2006 1:52:57 AM
Hi I am using the membership createuser method but need to find the error when one arise. I am using the below code; Public Function CreateUser(ByVal Username As String, ByVal Password As String, ByVal Email As String, ByRef ErrMsg As String) As Boolean Try Membership.CreateUser(Use...more >>

using AspNetActiveDirectoryMembershipProvider question
Posted by Patrick.O.Ige at 8/28/2006 12:00:00 AM
As anybody here used the AspNetActiveDirectoryMembershipProvider with the SiteMap For example mapping the roles from Active Directory to the siteMapNode for security trimming? What i mean is that for example below i have "roles="members" is it possible to map AD roles to that directly? ...more >>



Problem starting windows forms application from ASP.Net 2.0
Posted by Quille at 8/27/2006 6:17:55 PM
Hi ! I'm having trouble starting desktop windows forms application with gui. So far i have managed to make it run when I access website on local computer, trying to start application from any other machine fails. I have modified machine.config process model as follows: <processModel autoC...more >>

Problem adopting asp.net web site configuration tool code
Posted by John at 8/27/2006 2:09:51 AM
Hi I am trying to use the asp.net web site configuration tool with my app and I have copied all files from C:\WINNT\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles into the ASP.NETWebAdminFiles sub folder of the root of my app. I am getting several errors. One of the errors is ...more >>

Distributable asp.net web site configuration tool
Posted by John at 8/26/2006 7:53:51 PM
Hi Is there a distributable version of asp.net web site configuration tool available? I need it to distribute with my app to allow end user client to manage their own users. Thanks Regards ...more >>

I can't access a web application hosted on a workgroup computer
Posted by gmogollon NO[at]SPAM gmail.com at 8/26/2006 12:47:58 PM
I created a web application that works fine if I access it from the computer that hosts the application. If I try accessing the web application from another computer in the workgroup it doesn't work. Can anybody help me with the necessary IIS or permission settings so I can get to my web applica...more >>

ASP.NET 2.0 calling a COM object
Posted by Queue at 8/25/2006 6:25:02 AM
Hi, I have a ASP.NET 2.0 application running on IIS 6. The application pool associated with the application is running under the "Network Service" account. Within the app, a COM object is instantiated and used. Within this COM object access to a file share on the same server is needed, b...more >>

Run batch files with impersonation
Posted by dd.squad NO[at]SPAM gmail.com at 8/24/2006 2:01:07 PM
When creating a new process, the aspnet worker process always runs it under the ASPNET user instead of the user that is being impersonated. After some research, I got around this by invoking the CreateProcessAsUser win api call. That works ok for executables, but trying to run batch files gave ...more >>

AzMan Still the way to go?
Posted by John Graham at 8/24/2006 9:06:40 AM
I've been reading a bunch on the Roles based set-ups people are using, and am sort of at an impass. Meaning, I need to stop reading and start coding. Brief background, I am starting fresh with an intranet, and was planning on having the whole site use IIS windows authentication. However I ...more >>

How to convert string to SecureString?
Posted by Bishoy George at 8/24/2006 12:21:57 AM
I want to pass a string password in System.Diagnostics.Process.Start. The problem is that the defined password parameter is SecureString not string while my password is string. Normal casting evaluates to errors. Please how to cast string to SecureString? ...more >>

SSL Help
Posted by David at 8/23/2006 8:13:16 PM
Can noyo9ne recommend a web group, usenet group that can answer questions about SSL certificates? What I need to know is if you purchased a cert. for www.yyy.com and you move it from one provider to another, can you take the SSL cert. along or will you need a new one? Also, can you get a ...more >>

ActiveDirectoryMembershipProvider without storing username and password?
Posted by Karl at 8/23/2006 8:12:06 PM
Hello; I am trying to create an ASP login page that authenticates against AD. Is there any way to setup a connection string in web.config that does not store a user name and password? If I do this, it works great, but I need to modify the web.config every time the password changes: <...more >>

How to run as in a deamon
Posted by David Thielen at 8/23/2006 5:07:01 PM
Hi; We have this web app that handles security great. For everything we do we run as the client so we do not have to store any credentials ourselves and it handles Sql Server access, reading files from the server, everything. But... we have a deamon program where users can schedule these s...more >>

Are AuthTickets Secure?
Posted by Dima Maltsev at 8/23/2006 1:27:02 PM
HI All, I've a question about AuthTickets. Microsoft recommends using either SSL for all pages or Envcryption to protect the AuthTicket. Here is the quote from the http://support.microsoft.com/kb/813829/ page: "How to Help Make Forms Authentication Secure • Use SSL for all pages. ...more >>

Forms Authentication Problem
Posted by vss at 8/23/2006 12:17:16 PM
Hi, I have a .net web application hosted within an asp web site. that is at root web is an ASP site under the root there is a .net web application. -root |_ DotNetApplication We have menus on a ASP page and on one menu item click it open a new browser window and in this new window I inv...more >>

CryptographicException: Bad Data. Any idea why this happens?
Posted by simonmarkjones NO[at]SPAM gmail.com at 8/23/2006 5:30:27 AM
Hi my webserver is running .Net 1.1 and intermittently i get the following error when I look at one of the websites. Does anyone out there have any idea why this happens? And how I can try and start solving the problem. Most of the time the website works okay. Thanks in advance! Server Erro...more >>

"ASP.NET Machine Account" problem
Posted by James Wong at 8/23/2006 12:00:00 AM
Hi, When I use VB.Net 2005 to develop some web service program, this program will connect to other domain server. Therefore, the permission of "ASP.NET Machine Account" cannot access to this server. Can I change the other domain user to instead of "ASP.NET Machine Account" for the IIS ...more >>

how to use change the security question and answer
Posted by Roberto Kohler at 8/22/2006 8:52:47 AM
I would like to allow users to change their security question and answer in much the same way they are allowed to change their password. I thought the ChangePassword control would allow them to also change their security question and answer but apparently it does not. Is there a way to do ...more >>

how to use 'aspnet_Membership_CreateUser' directly through T-SQL
Posted by Roberto Kohler at 8/22/2006 8:44:42 AM
I would like to be able to use the stored procedure 'aspnet_Membership_CreateUser' directly through T-SQL code (instead of going through .Net wrappers) because I need to automate the creation of hundreds of users. aspnet_Membership_CreateUser has among others the following parameters: @Pa...more >>

Off loading the providers
Posted by MikeS at 8/22/2006 8:23:10 AM
Anyone have a good idea how to make the membership, role and profile providers be remote and be accessed only using http/soap so that I don't have to have LDAP, msldap and SQL traffic from my web server to the middle tier/back end? I looked at using a web service or enterprise services but in ...more >>


DevelopmentNow Blog