all groups > asp.net security > may 2007
Filter by week: 1 2 3 4 5
Error accessing pages
Posted by i.sobha NO[at]SPAM gmail.com at 5/30/2007 11:09:08 PM
Hi,
I have an application where each user can log in to the system with a
unique username and password.
One of the user is facing an issue like after he logs in with his
username and password he is not able to view some of the pages by
clicking on specified links.
He says that he gets an... more >>
Roles vs. Capability concept for the Role Managers in .NET?
Posted by Vince Varallo at 5/30/2007 8:42:00 PM
Hello
I'm looking at using the Role Manager features in .NET 2.0 and am a little
confused. The concept of a role that I'm used to is that a role is composed
of capabilities. For example, the System Administrator role has access to
the "Create User" capability and the "Create Role" capabil... more >>
SqlPersonalizationProvider source code
Posted by Anton at 5/30/2007 7:56:02 AM
We are using webparts in new release of AlphaFrontier and that is why need
SqlPersonalizationProvider to handle users personalization. By our business
requirements we need to generate database connection string dynamically at
execution time, which is not supported by standard Microsoft
SqlPe... more >>
how to add vc unmanaged dll to asp.net web site
Posted by Volodia at 5/30/2007 7:22:59 AM
Hi,
I have a problem to find information how to add unmanaged dll
build in VC++ 2005 to the asp.net web site
What I have tried:
1. use DllImport("MyDll.dll") to declare function in mypage.aspx.cs
2. put MyDll.dll into Bin folder for ASP.Net web site
But unfortunately an exception has bee... more >>
Connect to anothe database
Posted by Husam at 5/30/2007 1:42:01 AM
Hi EveryBody:
How can I connect to another database instaed of the default database
aspnetdb in the local SQL Server in the App_Data folder that exist in my web
site application ?
My database that I want to connect is in my local Machine and its name=Husam.
Any Help or redirection will ... more >>
Trouble with office Sharepoint 2007 and dotnet 2003
Posted by apondu at 5/30/2007 12:04:16 AM
hi,
I am new to Sharepoint Server. I was just trying to install sharepoint
server and work with it. I wanted to access the sharepoint server
services with dotnet and work with it. I just installed the hsarepoint
server on my system. Now i am in all sorts of trouble. I am now not
able to creat... more >>
Security Problems
Posted by beckongp NO[at]SPAM gmail.com at 5/28/2007 11:48:03 PM
Hi. I have a web application here which needs to authorize users only from a particular domain to gain access. I am new to the Security aspect of DotNet. Pls help me out.... more >>
How to determine authorized roles for a page?
Posted by MyndPhlyp at 5/28/2007 5:21:04 PM
I've been combing through Google trying to find the answer but not luck.
I'm using Forms authentication. Determining what Roles the current user is
in was the easy part. But how does one determine what Roles are permitted to
use a particular ASPX page? (.NET 2.0, VS05)
... more >>
Don't see what you're looking for? Search DevelopmentNow.com.
Membership & Profiles
Posted by A_Republican at 5/25/2007 11:13:01 AM
I have a CreateUserWizard object on my page with some additional fields:
First Name, Last Name, etc, etc.
I store all these additional fields in a profile for the user. The problem
is if I use Membership.DeleteUser(...) it will delete the user from the User
table, but it will not remove the... more >>
Profiles & Membership
Posted by A_Republican at 5/25/2007 11:12:01 AM
I have a CreateUserWizard object on my page with some additional fields:
First Name, Last Name, etc, etc.
I store all these additional fields in a profile for the user. The problem
is if I use Membership.DeleteUser(...) it will delete the user from the User
table, but it will not remove the... more >>
Login LoggedIn event and Profile object question
Posted by Rusty Hill at 5/24/2007 1:27:38 PM
My site does not allow anonymous users. After a user has logged in and been
authenticated I need to access some information in their profile object. I
thought I would do this in the LoggedIn event of the Login object but when
that event fires the user is still not authenticated so the profil... more >>
ajax.asp.net Tools and Firewall Settings
Posted by Mike McAllister at 5/24/2007 12:43:06 PM
Can anyone recommend generic documentation on how to allow AJAX to work
through our firewall? I need help convincing our IT department that our
firewall is blocking AJAX from Internet-side clients.
Thanks.
--
Mike McAllister... more >>
Forms Authentication and Application Restarts
Posted by Drew at 5/24/2007 10:43:00 AM
We are experiencing an issue where users who are authenticated and active in
an application are not getting redirected to a login screen when the
application restarts. Can anyone verify this is by design that there is a
disconnect between the application and the forms authentication?
TIA
... more >>
Re: X.509 Certificate based authentication
Posted by gudujarlson NO[at]SPAM gmail.com at 5/23/2007 10:10:15 AM
On May 23, 11:18 am, "Joe Kaplan"
<joseph.e.kap...@removethis.accenture.com> wrote:
> When you think about it though, it makes sense. If the certificate was just
> transmitted directly back the server, then anyone with the certificate could
> pretend to be that client. Since certificates are e... more >>
Re: X.509 Certificate based authentication
Posted by gudujarlson NO[at]SPAM gmail.com at 5/23/2007 8:32:38 AM
I had some familiarity with public-private keys at a theoretical level
and in the context of SSH and PGP prior to this project, but I had
never used them with ASP.NET. I think this problem would have been
easier to figure out if the .NET documentation was better. In
particular this document co... more >>
Windows authentication with custom user store
Posted by Danny Vucinec at 5/23/2007 4:32:02 AM
I'm building a solution that uses Windows authentication. However, the
Windows users that are allowed to login and use the application are defined
in a custom user store. If a user is successfully authenticated by Windows,
access should be denied to if the user isn't in the custom user store.
... more >>
Login Control PasswordRecoveryURL Issue
Posted by Rusty Hill at 5/22/2007 4:41:54 PM
I am using the ASP.NET 2.0 Login control and have provided a valid URL for
the PasswordRecoveryURL property. However when the hyperlink is selected
the login page continues to be displayed. The URL I start with at the login
page is this:
http://localhost:1123/MyBox/Unsecured/Login.aspx?Re... more >>
how to avoid challenge window when windows authentication mode is
Posted by andy at 5/21/2007 2:08:02 PM
I got web app (asp.net) with authenticaiton mode set to windows.
I don't have impersonate on since I need to get NT credentials who access
the web app. My iis is set to on for "integration window authentication ".
But basically I don't know how to remove User/Pwd challenge (NT) popup
everyt... more >>
prevent duplicate logins
Posted by Jeff Beem at 5/20/2007 8:45:00 PM
I'm working on an application in which we have employed the use of the aspnet
membership model. My employer has asked me to ensure that any given account
can be logged in only once at a time. Determining whether or not an account
is already logged in is very simple. The next requirement is ... more >>
AzMan scope level application groups seem to be broken
Posted by Jim Pierson at 5/20/2007 10:33:57 AM
I've not been able to find anything on this, so it's time to ask for help.
I have an AzMan store in an ADAM instance using ADAM principals. There is
one application defined
and a multitude of scopes. ApplicationGroups are defined at all three
levels (store, app & scope).
If I assign an ADA... more >>
X.509 Certificate based authentication
Posted by gudujarlson NO[at]SPAM gmail.com at 5/18/2007 3:19:09 PM
I want to use X.509 certificates to authenticate and then subsequently
authorize HTTP requests between a Windows Forms client and a ASP.NET
server. So far I have accomplished all of the following:
- created and installed a server certificate
- setup a virtual directory to require client certi... more >>
Web.config encryption in shared hosting scenario
Posted by Jazza at 5/18/2007 1:31:00 AM
Hi, I am an experienced .Net developer, but new to ASP.Net 2.0.
I have been using the Personal Web Site Starter Kit and have successfully
uploaded the site to a shared hosting provider. I am connecting to the SQL
database via SQL authentication rather than Windows authentication, as I have
... more >>
Thread.CurrentPrincipal problem when client calls an IIS process hosting a remoting service
Posted by Anthony Paul at 5/17/2007 2:19:25 PM
Hello everyone!
I have the following problem :
I have a remoting service hosted through IIS called "MyService".
MyService has the standard login method (username, password) that
encapsulates an authentication mechanism that results in the
Thread.CurrentPrincipal being set to a newly created... more >>
.Net applet security question
Posted by genc ymeri at 5/17/2007 11:14:01 AM
Hi,
I'm planning to build a dotnet applet which will download a file from a
webservice, save it in the local disk, editing and then upload it back in the
server side.
I was doing a test to access local directories and files from a .Net applet
but I couldn't.
How can I resolve this ?
-... more >>
Session vs. RoleProvider
Posted by Arthur Dent at 5/15/2007 12:07:20 PM
Please help... i am stumped...
I have an app, written in VB.NET fwiw. I have a custom RoleProvider class,
cuz i finally got tired enough of hacking with application variables, to
learn the "correct" way to do roles. ;) ....
Now, the problem, is that my RoleProvider, and my FormsAuthentic... more >>
Hiding labels and textboxs in formview templates according to role
Posted by Ann at 5/14/2007 9:55:01 AM
I have a formview with templates. I want to hide certain labels or textboxes
according to the user's role membership. I can do this in a sub routine as
long as it's not inside a template, is it possible to do this inside a
formview template?
Some code sample that does not work: (passphra... more >>
Newbie, create a smart client help
Posted by verci at 5/11/2007 11:44:08 AM
Hi guys,
I'm running VS2005 Team, SQL Server 2005, .net framework 2.0
I've been asked to develop a small smart client that uses form based
membership authentication and writes to only one sql server table, can
anyone help me find an example or tutorial regarding this application. I'm
far... more >>
get returning user for forms auth?
Posted by Sergei Shelukhin at 5/9/2007 3:24:03 PM
Hi. I have the following scenario; user logs in using standard login
control for forms auth, I validate his credentials against the
database, optionally make the cookie persistent and then set some
application-specific session variables for that user.
Now, when the user closes the browser and ... more >>
forms authentication and wildcard mappings on UNC share
Posted by Fabrizio Cipriani at 5/9/2007 4:22:01 AM
I am trying to configure a UNC share where to put the files, since my
application is load balanced on a web cluster. I have configured the
application with forms authentication.
When I try to access files in the UNC share, the login form doesn't pop up.
I have also written a simple httphand... more >>
Sitemap trimming with Forms auth (Active Directory)
Posted by CJ at 5/8/2007 9:55:11 PM
Hi All,
I am trying to get a site map working using the roles tag, but cannot
get the items displaing/hiding depending on the roles. I am using
forms authentication. I have tried multiple forms of autherization
flags, adding locations etc. I've gone back to the basic configuration
just to try... more >>
Authentication issue
Posted by M K at 5/8/2007 7:35:10 PM
Ok a newbie here...
i have a sql server db I got from a book to learn. I am having problems
with the 'Authentication' mode.
I need a valid id to be authenticated with...
i have a web config file but I am not sure what goes where?
name of server
MKLAPTOP\VAIO_VEDB
connection
MKLAP... more >>
Stream pdf to browser
Posted by Rick at 5/8/2007 3:45:57 PM
I have a web service that retrieve a pdf file and streams the file into a
buffer passing the buffer on to the calling web page. This works perfect if
I use a button to submit a call to the web service and stream the file into
the calling web form, the problem I have is I need to open the strea... more >>
Could anyone provide a sample on using System.Diagnostics.Process with Domain, UserName and Password specified?
Posted by Speech Lover at 5/7/2007 10:57:30 PM
I am trying to find a sample from the Internet about invoking a command line
from .NET 2.0 by using System.Diagnostics.Process with Domain, UserName and
Password specified?
All samples I found so far are without UserName and Password specified.
thanks,
Speech Lover
... more >>
Problem of invoking a command line from ASP.NET 2.0?
Posted by Speech Lover at 5/7/2007 7:08:06 PM
Hi,
First of all thanks for any response!
I want to start a command line command from C# 2.0.
Since .net 2.0 provides a way to specify a particular credential in
ProcessStartInfo object to run the command line, I am able to impersonate a
particular user to run this command.
However, no m... more >>
AzMan Role Based Security vs. ASP.NET Role Based Security
Posted by Kursat at 5/7/2007 3:31:16 PM
Hi,
As far as I understand there are two types of role based security available
to use with ASP.NET applications : AzMan Role Based Security and ASP.NET
Role Based Security. What kind of decision should be made about using one of
two?
Thanks in advance.
... more >>
ADFS and Classic ASP
Posted by Robert Thompson at 5/7/2007 3:08:01 PM
Not sure if this is the correct newsgroup but I'm looking at ADFS as a way to
provide SSO to multiple web based applications over the Internet.
Unfortunately, one of the apps was written in classic ASP and is too big to
change any time soon.
Can ADFS support classic ASP as well as .NET bas... more >>
Forms Authentication : Works locally but not when hosted in IIS???
Posted by I.W Coetzer at 5/5/2007 3:35:00 AM
Hi
I have a Asp.Net 2.0 app which uses the built in Membership Role Provider
(sql server based) when I run it locally it allows me to create a new
account, log in and access the 'secured' pages.
but when I copy and host this site on a windows 2003 server IIS it does not
go to the 'secur... more >>
Win 2003 svr/ASP.NET 2.0 UNC share
Posted by Langedal, Roger at 5/4/2007 2:33:47 PM
I'm trying to setup a simple test on writing to a file on an UNC share from
an asp.net 2.0 webpage. This is whats happing in default.aspx:
-----------------------------------------------------------------------------------
Dim path As String = "\\remoteserver\testshare"
Response.Write(User.I... more >>
Using Login Control to Authenticate???
Posted by Mike Voissem at 5/4/2007 6:49:02 AM
I've been searching for 2 days now, and haven't really been able to get a
complete solution to my problem(s). And let me preface this by stating this
is my first crack at asp.net development so please excuse the ineptness.
My environment is W2003 server, IIS 6.0. This server is in our DMZ a... more >>
2.0: change of password rules (newbie)
Posted by R.A.M. at 5/3/2007 7:05:32 PM
Hello,
I am writing my first ASP.NET application. I would like to change rules for
password to allow 4-letter passwords without nonalphanumeric characters.
Thus, I added the following section to my web.config:
<membership defaultProvider="SqlMembershipProvider"
userIsOnlineTimeWindow="20">... more >>
Assigning application specific rights to existing Windows domain users
Posted by Kursat at 5/2/2007 2:55:41 PM
Hello,
I am developing a Web based (ASP.NET 2.0) intranet application which will
run in a Windows domain environment. Users will login using their domain
accounts. So far so good but if one user have a valid domain account he or
she can access all the functionality exposed by the applicati... more >>
|