Archived Months
July 2003
August 2003
September 2003
October 2003
November 2003
December 2003
January 2004
February 2004
March 2004
April 2004
May 2004
June 2004
July 2004
August 2004
September 2004
October 2004
November 2004
December 2004
January 2005
February 2005
March 2005
April 2005
May 2005
June 2005
July 2005
August 2005
September 2005
October 2005
November 2005
December 2005
January 2006
February 2006
March 2006
April 2006
May 2006
June 2006
July 2006
August 2006
September 2006
October 2006
November 2006
December 2006
January 2007
February 2007
March 2007
April 2007
May 2007
June 2007
July 2007
August 2007
September 2007
October 2007
November 2007
December 2007
January 2008
February 2008
March 2008
April 2008
May 2008
June 2008


all groups > asp.net security > may 2007 > threads for may 22 - 28, 2007

Filter by week: 1 2 3 4 5

Security Problems
Posted by beckongp NO[at]SPAM gmail.com at 5/28/2007 11:48:03 PM
Hi. I have a web application here which needs to authorize users only from a particular domain to gain access. I am new to the Security aspect of DotNet. Pls help me out....more >>

How to determine authorized roles for a page?
Posted by MyndPhlyp at 5/28/2007 5:21:04 PM
I've been combing through Google trying to find the answer but not luck. I'm using Forms authentication. Determining what Roles the current user is in was the easy part. But how does one determine what Roles are permitted to use a particular ASPX page? (.NET 2.0, VS05) ...more >>

Membership & Profiles
Posted by A_Republican at 5/25/2007 11:13:01 AM
I have a CreateUserWizard object on my page with some additional fields: First Name, Last Name, etc, etc. I store all these additional fields in a profile for the user. The problem is if I use Membership.DeleteUser(...) it will delete the user from the User table, but it will not remove the...more >>

Profiles & Membership
Posted by A_Republican at 5/25/2007 11:12:01 AM
I have a CreateUserWizard object on my page with some additional fields: First Name, Last Name, etc, etc. I store all these additional fields in a profile for the user. The problem is if I use Membership.DeleteUser(...) it will delete the user from the User table, but it will not remove the...more >>

Login LoggedIn event and Profile object question
Posted by Rusty Hill at 5/24/2007 1:27:38 PM
My site does not allow anonymous users. After a user has logged in and been authenticated I need to access some information in their profile object. I thought I would do this in the LoggedIn event of the Login object but when that event fires the user is still not authenticated so the profil...more >>

ajax.asp.net Tools and Firewall Settings
Posted by Mike McAllister at 5/24/2007 12:43:06 PM
Can anyone recommend generic documentation on how to allow AJAX to work through our firewall? I need help convincing our IT department that our firewall is blocking AJAX from Internet-side clients. Thanks. -- Mike McAllister...more >>

Forms Authentication and Application Restarts
Posted by Drew at 5/24/2007 10:43:00 AM
We are experiencing an issue where users who are authenticated and active in an application are not getting redirected to a login screen when the application restarts. Can anyone verify this is by design that there is a disconnect between the application and the forms authentication? TIA ...more >>

Re: X.509 Certificate based authentication
Posted by gudujarlson NO[at]SPAM gmail.com at 5/23/2007 10:10:15 AM
On May 23, 11:18 am, "Joe Kaplan" <joseph.e.kap...@removethis.accenture.com> wrote: > When you think about it though, it makes sense. If the certificate was just > transmitted directly back the server, then anyone with the certificate could > pretend to be that client. Since certificates are e...more >>



Re: X.509 Certificate based authentication
Posted by gudujarlson NO[at]SPAM gmail.com at 5/23/2007 8:32:38 AM
I had some familiarity with public-private keys at a theoretical level and in the context of SSH and PGP prior to this project, but I had never used them with ASP.NET. I think this problem would have been easier to figure out if the .NET documentation was better. In particular this document co...more >>

Windows authentication with custom user store
Posted by Danny Vucinec at 5/23/2007 4:32:02 AM
I'm building a solution that uses Windows authentication. However, the Windows users that are allowed to login and use the application are defined in a custom user store. If a user is successfully authenticated by Windows, access should be denied to if the user isn't in the custom user store. ...more >>

Login Control PasswordRecoveryURL Issue
Posted by Rusty Hill at 5/22/2007 4:41:54 PM
I am using the ASP.NET 2.0 Login control and have provided a valid URL for the PasswordRecoveryURL property. However when the hyperlink is selected the login page continues to be displayed. The URL I start with at the login page is this: http://localhost:1123/MyBox/Unsecured/Login.aspx?Re...more >>


DevelopmentNow Blog