Archived Months
July 2003
August 2003
September 2003
October 2003
November 2003
December 2003
January 2004
February 2004
March 2004
April 2004
May 2004
June 2004
July 2004
August 2004
September 2004
October 2004
November 2004
December 2004
January 2005
February 2005
March 2005
April 2005
May 2005
June 2005
July 2005
August 2005
September 2005
October 2005
November 2005
December 2005
January 2006
February 2006
March 2006
April 2006
May 2006
June 2006
July 2006
August 2006
September 2006
October 2006
November 2006
December 2006
January 2007
February 2007
March 2007
April 2007
May 2007
June 2007
July 2007
August 2007
September 2007
October 2007
November 2007
December 2007
January 2008
February 2008
March 2008
April 2008
all groups > asp.net security > may 2007

Filter by week: 1 2 3 4 5

Error accessing pages
Posted by i.sobha NO[at]SPAM gmail.com at 5/30/2007 11:09:08 PM
Hi, I have an application where each user can log in to the system with a unique username and password. One of the user is facing an issue like after he logs in with his username and password he is not able to view some of the pages by clicking on specified links. He says that he gets an...more >>


Roles vs. Capability concept for the Role Managers in .NET?
Posted by Vince Varallo at 5/30/2007 8:42:00 PM
Hello I'm looking at using the Role Manager features in .NET 2.0 and am a little confused. The concept of a role that I'm used to is that a role is composed of capabilities. For example, the System Administrator role has access to the "Create User" capability and the "Create Role" capabil...more >>

SqlPersonalizationProvider source code
Posted by Anton at 5/30/2007 7:56:02 AM
We are using webparts in new release of AlphaFrontier and that is why need SqlPersonalizationProvider to handle users personalization. By our business requirements we need to generate database connection string dynamically at execution time, which is not supported by standard Microsoft SqlPe...more >>

how to add vc unmanaged dll to asp.net web site
Posted by Volodia at 5/30/2007 7:22:59 AM
Hi, I have a problem to find information how to add unmanaged dll build in VC++ 2005 to the asp.net web site What I have tried: 1. use DllImport("MyDll.dll") to declare function in mypage.aspx.cs 2. put MyDll.dll into Bin folder for ASP.Net web site But unfortunately an exception has bee...more >>

Connect to anothe database
Posted by Husam at 5/30/2007 1:42:01 AM
Hi EveryBody: How can I connect to another database instaed of the default database aspnetdb in the local SQL Server in the App_Data folder that exist in my web site application ? My database that I want to connect is in my local Machine and its name=Husam. Any Help or redirection will ...more >>

Trouble with office Sharepoint 2007 and dotnet 2003
Posted by apondu at 5/30/2007 12:04:16 AM
hi, I am new to Sharepoint Server. I was just trying to install sharepoint server and work with it. I wanted to access the sharepoint server services with dotnet and work with it. I just installed the hsarepoint server on my system. Now i am in all sorts of trouble. I am now not able to creat...more >>

Security Problems
Posted by beckongp NO[at]SPAM gmail.com at 5/28/2007 11:48:03 PM
Hi. I have a web application here which needs to authorize users only from a particular domain to gain access. I am new to the Security aspect of DotNet. Pls help me out....more >>

How to determine authorized roles for a page?
Posted by MyndPhlyp at 5/28/2007 5:21:04 PM
I've been combing through Google trying to find the answer but not luck. I'm using Forms authentication. Determining what Roles the current user is in was the easy part. But how does one determine what Roles are permitted to use a particular ASPX page? (.NET 2.0, VS05) ...more >>



Membership & Profiles
Posted by A_Republican at 5/25/2007 11:13:01 AM
I have a CreateUserWizard object on my page with some additional fields: First Name, Last Name, etc, etc. I store all these additional fields in a profile for the user. The problem is if I use Membership.DeleteUser(...) it will delete the user from the User table, but it will not remove the...more >>

Profiles & Membership
Posted by A_Republican at 5/25/2007 11:12:01 AM
I have a CreateUserWizard object on my page with some additional fields: First Name, Last Name, etc, etc. I store all these additional fields in a profile for the user. The problem is if I use Membership.DeleteUser(...) it will delete the user from the User table, but it will not remove the...more >>

Login LoggedIn event and Profile object question
Posted by Rusty Hill at 5/24/2007 1:27:38 PM
My site does not allow anonymous users. After a user has logged in and been authenticated I need to access some information in their profile object. I thought I would do this in the LoggedIn event of the Login object but when that event fires the user is still not authenticated so the profil...more >>

ajax.asp.net Tools and Firewall Settings
Posted by Mike McAllister at 5/24/2007 12:43:06 PM
Can anyone recommend generic documentation on how to allow AJAX to work through our firewall? I need help convincing our IT department that our firewall is blocking AJAX from Internet-side clients. Thanks. -- Mike McAllister...more >>

Forms Authentication and Application Restarts
Posted by Drew at 5/24/2007 10:43:00 AM
We are experiencing an issue where users who are authenticated and active in an application are not getting redirected to a login screen when the application restarts. Can anyone verify this is by design that there is a disconnect between the application and the forms authentication? TIA ...more >>

Re: X.509 Certificate based authentication
Posted by gudujarlson NO[at]SPAM gmail.com at 5/23/2007 10:10:15 AM
On May 23, 11:18 am, "Joe Kaplan" <joseph.e.kap...@removethis.accenture.com> wrote: > When you think about it though, it makes sense. If the certificate was just > transmitted directly back the server, then anyone with the certificate could > pretend to be that client. Since certificates are e...more >>

Re: X.509 Certificate based authentication
Posted by gudujarlson NO[at]SPAM gmail.com at 5/23/2007 8:32:38 AM
I had some familiarity with public-private keys at a theoretical level and in the context of SSH and PGP prior to this project, but I had never used them with ASP.NET. I think this problem would have been easier to figure out if the .NET documentation was better. In particular this document co...more >>

Windows authentication with custom user store
Posted by Danny Vucinec at 5/23/2007 4:32:02 AM
I'm building a solution that uses Windows authentication. However, the Windows users that are allowed to login and use the application are defined in a custom user store. If a user is successfully authenticated by Windows, access should be denied to if the user isn't in the custom user store. ...more >>

Login Control PasswordRecoveryURL Issue
Posted by Rusty Hill at 5/22/2007 4:41:54 PM
I am using the ASP.NET 2.0 Login control and have provided a valid URL for the PasswordRecoveryURL property. However when the hyperlink is selected the login page continues to be displayed. The URL I start with at the login page is this: http://localhost:1123/MyBox/Unsecured/Login.aspx?Re...more >>

how to avoid challenge window when windows authentication mode is
Posted by andy at 5/21/2007 2:08:02 PM
I got web app (asp.net) with authenticaiton mode set to windows. I don't have impersonate on since I need to get NT credentials who access the web app. My iis is set to on for "integration window authentication ". But basically I don't know how to remove User/Pwd challenge (NT) popup everyt...more >>

prevent duplicate logins
Posted by Jeff Beem at 5/20/2007 8:45:00 PM
I'm working on an application in which we have employed the use of the aspnet membership model. My employer has asked me to ensure that any given account can be logged in only once at a time. Determining whether or not an account is already logged in is very simple. The next requirement is ...more >>

AzMan scope level application groups seem to be broken
Posted by Jim Pierson at 5/20/2007 10:33:57 AM
I've not been able to find anything on this, so it's time to ask for help. I have an AzMan store in an ADAM instance using ADAM principals. There is one application defined and a multitude of scopes. ApplicationGroups are defined at all three levels (store, app & scope). If I assign an ADA...more >>

X.509 Certificate based authentication
Posted by gudujarlson NO[at]SPAM gmail.com at 5/18/2007 3:19:09 PM
I want to use X.509 certificates to authenticate and then subsequently authorize HTTP requests between a Windows Forms client and a ASP.NET server. So far I have accomplished all of the following: - created and installed a server certificate - setup a virtual directory to require client certi...more >>

Web.config encryption in shared hosting scenario
Posted by Jazza at 5/18/2007 1:31:00 AM
Hi, I am an experienced .Net developer, but new to ASP.Net 2.0. I have been using the Personal Web Site Starter Kit and have successfully uploaded the site to a shared hosting provider. I am connecting to the SQL database via SQL authentication rather than Windows authentication, as I have ...more >>

Thread.CurrentPrincipal problem when client calls an IIS process hosting a remoting service
Posted by Anthony Paul at 5/17/2007 2:19:25 PM
Hello everyone! I have the following problem : I have a remoting service hosted through IIS called "MyService". MyService has the standard login method (username, password) that encapsulates an authentication mechanism that results in the Thread.CurrentPrincipal being set to a newly created...more >>

.Net applet security question
Posted by genc ymeri at 5/17/2007 11:14:01 AM
Hi, I'm planning to build a dotnet applet which will download a file from a webservice, save it in the local disk, editing and then upload it back in the server side. I was doing a test to access local directories and files from a .Net applet but I couldn't. How can I resolve this ? -...more >>

Session vs. RoleProvider
Posted by Arthur Dent at 5/15/2007 12:07:20 PM
Please help... i am stumped... I have an app, written in VB.NET fwiw. I have a custom RoleProvider class, cuz i finally got tired enough of hacking with application variables, to learn the "correct" way to do roles. ;) .... Now, the problem, is that my RoleProvider, and my FormsAuthentic...more >>

Hiding labels and textboxs in formview templates according to role
Posted by Ann at 5/14/2007 9:55:01 AM
I have a formview with templates. I want to hide certain labels or textboxes according to the user's role membership. I can do this in a sub routine as long as it's not inside a template, is it possible to do this inside a formview template? Some code sample that does not work: (passphra...more >>

Newbie, create a smart client help
Posted by verci at 5/11/2007 11:44:08 AM
Hi guys, I'm running VS2005 Team, SQL Server 2005, .net framework 2.0 I've been asked to develop a small smart client that uses form based membership authentication and writes to only one sql server table, can anyone help me find an example or tutorial regarding this application. I'm far...more >>

get returning user for forms auth?
Posted by Sergei Shelukhin at 5/9/2007 3:24:03 PM
Hi. I have the following scenario; user logs in using standard login control for forms auth, I validate his credentials against the database, optionally make the cookie persistent and then set some application-specific session variables for that user. Now, when the user closes the browser and ...more >>

forms authentication and wildcard mappings on UNC share
Posted by Fabrizio Cipriani at 5/9/2007 4:22:01 AM
I am trying to configure a UNC share where to put the files, since my application is load balanced on a web cluster. I have configured the application with forms authentication. When I try to access files in the UNC share, the login form doesn't pop up. I have also written a simple httphand...more >>

Sitemap trimming with Forms auth (Active Directory)
Posted by CJ at 5/8/2007 9:55:11 PM
Hi All, I am trying to get a site map working using the roles tag, but cannot get the items displaing/hiding depending on the roles. I am using forms authentication. I have tried multiple forms of autherization flags, adding locations etc. I've gone back to the basic configuration just to try...more >>

Authentication issue
Posted by M K at 5/8/2007 7:35:10 PM
Ok a newbie here... i have a sql server db I got from a book to learn. I am having problems with the 'Authentication' mode. I need a valid id to be authenticated with... i have a web config file but I am not sure what goes where? name of server MKLAPTOP\VAIO_VEDB connection MKLAP...more >>

Stream pdf to browser
Posted by Rick at 5/8/2007 3:45:57 PM
I have a web service that retrieve a pdf file and streams the file into a buffer passing the buffer on to the calling web page. This works perfect if I use a button to submit a call to the web service and stream the file into the calling web form, the problem I have is I need to open the strea...more >>

Could anyone provide a sample on using System.Diagnostics.Process with Domain, UserName and Password specified?
Posted by Speech Lover at 5/7/2007 10:57:30 PM
I am trying to find a sample from the Internet about invoking a command line from .NET 2.0 by using System.Diagnostics.Process with Domain, UserName and Password specified? All samples I found so far are without UserName and Password specified. thanks, Speech Lover ...more >>

Problem of invoking a command line from ASP.NET 2.0?
Posted by Speech Lover at 5/7/2007 7:08:06 PM
Hi, First of all thanks for any response! I want to start a command line command from C# 2.0. Since .net 2.0 provides a way to specify a particular credential in ProcessStartInfo object to run the command line, I am able to impersonate a particular user to run this command. However, no m...more >>

AzMan Role Based Security vs. ASP.NET Role Based Security
Posted by Kursat at 5/7/2007 3:31:16 PM
Hi, As far as I understand there are two types of role based security available to use with ASP.NET applications : AzMan Role Based Security and ASP.NET Role Based Security. What kind of decision should be made about using one of two? Thanks in advance. ...more >>

ADFS and Classic ASP
Posted by Robert Thompson at 5/7/2007 3:08:01 PM
Not sure if this is the correct newsgroup but I'm looking at ADFS as a way to provide SSO to multiple web based applications over the Internet. Unfortunately, one of the apps was written in classic ASP and is too big to change any time soon. Can ADFS support classic ASP as well as .NET bas...more >>

Forms Authentication : Works locally but not when hosted in IIS???
Posted by I.W Coetzer at 5/5/2007 3:35:00 AM
Hi I have a Asp.Net 2.0 app which uses the built in Membership Role Provider (sql server based) when I run it locally it allows me to create a new account, log in and access the 'secured' pages. but when I copy and host this site on a windows 2003 server IIS it does not go to the 'secur...more >>

Win 2003 svr/ASP.NET 2.0 UNC share
Posted by Langedal, Roger at 5/4/2007 2:33:47 PM
I'm trying to setup a simple test on writing to a file on an UNC share from an asp.net 2.0 webpage. This is whats happing in default.aspx: ----------------------------------------------------------------------------------- Dim path As String = "\\remoteserver\testshare" Response.Write(User.I...more >>

Using Login Control to Authenticate???
Posted by Mike Voissem at 5/4/2007 6:49:02 AM
I've been searching for 2 days now, and haven't really been able to get a complete solution to my problem(s). And let me preface this by stating this is my first crack at asp.net development so please excuse the ineptness. My environment is W2003 server, IIS 6.0. This server is in our DMZ a...more >>

2.0: change of password rules (newbie)
Posted by R.A.M. at 5/3/2007 7:05:32 PM
Hello, I am writing my first ASP.NET application. I would like to change rules for password to allow 4-letter passwords without nonalphanumeric characters. Thus, I added the following section to my web.config: <membership defaultProvider="SqlMembershipProvider" userIsOnlineTimeWindow="20">...more >>

Assigning application specific rights to existing Windows domain users
Posted by Kursat at 5/2/2007 2:55:41 PM
Hello, I am developing a Web based (ASP.NET 2.0) intranet application which will run in a Windows domain environment. Users will login using their domain accounts. So far so good but if one user have a valid domain account he or she can access all the functionality exposed by the applicati...more >>


DevelopmentNow Blog