Archived Months
July 2003
August 2003
September 2003
October 2003
November 2003
December 2003
January 2004
February 2004
March 2004
April 2004
May 2004
June 2004
July 2004
August 2004
September 2004
October 2004
November 2004
December 2004
January 2005
February 2005
March 2005
April 2005
May 2005
June 2005
July 2005
August 2005
September 2005
October 2005
November 2005
December 2005
January 2006
February 2006
March 2006
April 2006
May 2006
June 2006
July 2006
August 2006
September 2006
October 2006
November 2006
December 2006
January 2007
February 2007
March 2007
April 2007
May 2007
June 2007
July 2007
August 2007
September 2007
October 2007
November 2007
December 2007
January 2008
February 2008
March 2008
April 2008
all groups > asp.net security > july 2007

ResetPassword() to Alpha-numeric?
Posted by WB at 7/24/2007 11:32:04 PM
Hi, Is there any way to specify ResetPassword() of the MembershipUser class to generate passwords of only alpha-numeric characters? Thanks, wb...more >>


Asp membership database question
Posted by Nathan Laff at 7/24/2007 1:18:47 PM
I have a SQL Express 2005 db which a WinForm application connects to. I've chosen to use the ASP SQL Membership provider to manage application users and roles. Currently, I run the aspnet_regsql tool on my existing database. Does it make sense to create a seperate database just for users and...more >>

Forms authentication, downloading files and Web Dialogs
Posted by Iain at 7/24/2007 9:10:00 AM
My applications allows files to be uploaded and downloaded. I don't want to give direct access, instead to stream them out of an aspx handler. The files can have any extension. The asp.net application (V2) has forms authentication. What happens is that I launch a web dialog with a list...more >>

How to find Current User Name
Posted by Herb at 7/23/2007 7:34:03 AM
When I run my ASP.NET application from my development PC, Me.User.Identity.Name works. When I run it from my Intranet site, it does not. Any suggestions? ...more >>

Thick and Thin Client authentication
Posted by Suresh at 7/23/2007 4:08:00 AM
Hi, I have couple of applications (rich client and web client) written in .NET. I would like to have a common authentication mechanism for both. Active Directory authentication is straight foreward for this type of requirement. But I would like to have single sign-on to be achieved between the...more >>

best practice for accessing a network share from IIS
Posted by Paolo Liverani at 7/23/2007 12:00:00 AM
Hello, I have a web application (ASP.NET 2.0) which should allow authenticated users (via forms authentication) to download files that are stored in a network share in the same domain (windows 2000). I am byte streaming the content of the files so that clients do not connect directly to the...more >>

User objects cannot be created in the specified container
Posted by chand at 7/20/2007 6:38:24 PM
Hi, I am using ActiveDirectoryProvider to authenticate users (AD). If I point my provider to the root of AD every thing works fine. If I point the provider to a CN which has a group of users under a nested container under root I am getting the following error. Root --> OU1--> OU12--> CN ...more >>

spawn web page with user logged in
Posted by David Thielen at 7/17/2007 7:12:03 PM
Hi; We have a case in our web app, which uses the asp.net membership/role stuff for security, where we launch a second web page that is bringing up a page on the site. When we do so, it asks the user to log in on that browser. Is there a ay to have it launch with the credentials of the pag...more >>



How to call a Web service by using a client certificate for authentication in an ASP.NET Web application
Posted by Colin at 7/13/2007 8:09:51 PM
I created a walkthrough for "How to call a Web service by using a client certificate for authentication in an ASP.NET Web application"using makecert, certutil, WinHttpCertCfg.exe X509Certificate. You can find it here: http://igottools.com/Lists/Posts/Post.aspx?ID=11 Hope it helps you guys...more >>

restricts Access to DLL
Posted by jkilmister NO[at]SPAM gmail.com at 7/13/2007 12:25:45 PM
I have 3 Dll's 1) Core Objects and Utilities 2) Data Access layer 3) GUI Layer 2 and 3 both have a reference to 1 (the Core Objects and Utilities) however certain classes in the utilities I want only to be accessible for 2 (such as the database access). Any Ideas? Thank you John K...more >>

Debugging asp.net is grayed
Posted by Y.A at 7/12/2007 8:18:30 PM
I am using Visual Studio 2002. Suddenly, one of my web projects does not stops on breakpoints on debug. I noticed that when going to project properties under debugging, the "Debugging asp.net" check box is grayed. How can I solve that ? Thanks ra294 ...more >>

Login works in Firefox, not in IE7
Posted by Jeppe Jespersen at 7/12/2007 12:00:00 AM
I have built and deployed a site that uses Membership and Role providers. The site has a SiteMap and a Menu control thats security trimmed. a) When I'm on the webserver, and attempt to log on (to localhost) using IE7, my user logs in w/o problems, and the proper menus are shown. b) When I'...more >>

PasswordRecovery Control
Posted by Jon Gonzales at 7/11/2007 3:42:00 PM
I do have setup all the needed configurations inside the config file and somehow I still can't make the PasswordRecovery Control successful. It do can retrieve the Question for the specific user name but when it comes for the verification of the answer, I never see the successful information ...more >>

Error 515 when executing aspnet_regsql
Posted by Juan Carlos Ferrer at 7/10/2007 9:20:02 AM
We are having problems when executing aspnet_regsql in our client's envitorment. We are using SQL Server 2000 with an account with full privileges, but the wizard thorws the following exception: Setup failed. Exception: An error occurred during the execution of the SQL file 'InstallCommon...more >>

User.IsInRole with * wildcard, web.sitemap etc.
Posted by Tim Mackey at 7/9/2007 6:20:23 PM
hi, User.IsInRole method appears not to work with the web.sitemap * 'all roles' wildcard. is this by design? do i have to handle wildcards manually? ideally User.IsInRole("*") would return true if the user is in any role. an example is below to illustrate. i have a sitemap node like so:...more >>

SqlMembershipProvider not working on production server
Posted by chambersdon NO[at]SPAM hotmail.com at 7/9/2007 1:14:53 PM
I have an application that uses the SqlMembershipProvider and SqlRoleProvider for security. I have setup my SQL Server database using aspnet_regsql.exe and configured my application to hit the correct database. Everything works as expected when running on my development machine, and on our tes...more >>

Setting up ASP.NET Configuration in Visual Studio 2005
Posted by Jibey Jacob at 7/8/2007 6:34:00 PM
Hi: I'm having trouble setting this up. I placed the following information in web.config: <membership userIsOnlineTimeWindow="20"> <providers> <add connectionStringName="SqlServices" enablePasswordRetrieval="false" enablePasswordReset="true" requiresQ...more >>

Role based security with forms authentication
Posted by Prashant at 7/7/2007 11:46:01 AM
Can anybody explain these step by step in detail and with code sample Thanks in advance....more >>

ASP.NET SQL Server logon permission denied
Posted by JT at 7/5/2007 1:56:11 PM
I have created a simple ASP.NET application on the intranet, accessible only to 2 users who will log in as Administrator; the server runs Windows 2000 Advanced Server. Page language is C#. The application accesses a database that runs on SQL Server 2005 Express Edition, on the same machine w...more >>

ActiveDirectoryMembershipProvider ( password expiration?)
Posted by J at 7/5/2007 8:12:02 AM
Hi, I'm thinking about using the ActiveDirectoryMembershipProvider for the login control and I'm wondering if the provider can handle the situation where the user's password has expired (after 90 days for example) and they need to change it. So far after reading documentation I haven't been ...more >>

aspnet local user account rights to c:\windows\temp automatically removed
Posted by jpgentz NO[at]SPAM cox.net at 7/5/2007 8:01:33 AM
I have a client that uses a dot net web app on a windows 2003 server. Every day they get a dotnet message from the users browser that tells us that the aspnet user does not have security rigths to c:\windows \temp I look at the security tab and see that the local user aspnet is gone, re-add it ...more >>

Cookies expiring when user logs out?
Posted by Steve at 7/5/2007 6:18:02 AM
I'm using forms authentication with my .net 2.0 site. I'm setting some cookies after the user logs in, and as long as they stay logged in I can "see" the cookies on subsequent posts. The problem is that as soon as the user logs out, the cookies are gone. I know ASP will expire the Ticket cooki...more >>

Trying to retreive data from AD
Posted by Magnus at 7/4/2007 4:56:19 PM
Hello, I'm trying to get data from the AD via our intranet. It works on my = local IIS server, but when running on a client I get the following = message: Source Error:=20 Line 21: ds.DirectoryEntry entry =3D new = ds.DirectoryEntry("LDAP://CN=3Dusers,DC=3Dskanska,DC=3Dorg"); ...more >>

How do delete registered users?
Posted by ascll at 7/4/2007 12:00:00 AM
Greetings, If the database already uploaded, anyway to delete certain users? As far as I known, deleting users will affected at least 4 tables, which is: - - aspnet_Membership - aspnet_Profile - aspnet_Users - aspnet_UsersInRoles Any table I miss out? Question How do totall...more >>

Impersonation and double hop
Posted by Glenn Thimmes at 7/3/2007 7:58:41 AM
Hello, I need a little advice in figuring out the right solution for a problem that I am facing. I have a 3 tier application. Client, Web Service middle layer, and SQL Server. I have been using a trusted account to get from the WS to SQL, but now I have new requirements for getting user...more >>


DevelopmentNow Blog