all groups > asp.net security > january 2008
Test asp is working?
Posted by Mike at 1/30/2008 8:35:58 PM
I have placed the following web.config file into a folder:
<authorization>
<allow roles="ROLE NAME"/>
<deny users="*"/>
<deny users="?"/>
</authorization>
My browser can still access files in that folder without any problem.
What is the easiest way to find out the problem and if ... more >>
error when creating profile with modified provider
Posted by Mich at 1/30/2008 8:17:07 PM
Hi,
I changed the default provider for usernames like this in web.config:
</connectionStrings>
<clear/>
<add name="myprovider" connectionString="Data Source=.\sqlexpress;Initial
Catalog=mydb;Integrated Security=True"
providerName="System.Data.SqlClient"/>
</connectionStrings>
<members... more >>
Roles.GetRolesForUser(UserName) returning zero-dimension array
Posted by JaiPrakash Sharma at 1/30/2008 1:16:00 PM
Hi,
i am facing problem with Roles.GetRolesForUser(UserName).
When i run application on my machine the Method returning zero-dimension
array, Insted of When i run the same application on my friend's machine. it
returns value in array.
For the application we are using the SQL 2005 databas... more >>
Authentication, Singal Sign On and AD
Posted by Koutilya at 1/29/2008 4:17:00 AM
Hi all,
I am new to Windows Authentication altough I have been reading about windows
authentication for a few days now. Here is my problem.....I have windows
client applications that users would login to. All client instances will be
running on windows machines and will be connected to a se... more >>
Retrieving the COM class...
Posted by zion at 1/27/2008 8:56:56 PM
Hello all,
In my Asp.net application I use Dcom object to retrieve some data.
To configure it I checked : "Enable COM Internet Services on this computer
and" and add the user ASP.NET to COM security.
At one of the test computers I get the error : "Retrieving the COM class
factory for compone... more >>
web.config section encryption and IIS7
Posted by Olivier MATROT at 1/23/2008 2:19:01 AM
I'm using ASP.NET 2.0 on IIS7.
I would like to encrypt some configuration section in the web.config file.
However, after doing this, I only have blank pages when accessing the site.
There is no error at all.
Going back to an unencrypted web.config solve the problem.
Any help appreciated.
TI... more >>
Strings vs. byte[]
Posted by Alexey Smirnov at 1/22/2008 7:03:25 AM
Using .NET I did check some of the properties in AD and I see that for
some reasons there is a difference in the type of the result value.
For example, SearchResult.Properties["operatingsystem"][0] returns a
value of type string on my development box under WinXP. The same query
on a server under... more >>
AD Search: More data is available, or time limit was exceeded
Posted by Alexey Smirnov at 1/17/2008 8:23:18 AM
I'm searching in AD for computers (objectClass=computer) in a few
domains. The search works just fine in "small" domains with less than
1,000 of computer entries, and failed on domain with more than 4,000
entries. I do receive only first 560 objects and either get a timeout,
or app is never stop... more >>
Don't see what you're looking for? Search DevelopmentNow.com.
AD queries. Please, prove me being wrong...
Posted by JKruza at 1/17/2008 12:41:00 AM
Hello!
I have intranet web app in ASP.NET 2.0. IIS is set to require "Windows
Integrated" or "Digest against AD" authentication. ASP.NET auth mode is
"Windows", impersonation is set to true.
Up to this moment everything works just fine.
The problem is, that i can't query AD in any way w... more >>
Error Consuming Web Service from WIndows application when WebService is using Custom Service Account ( Create an Application Pool with a Custom Ident
Posted by DNB at 1/16/2008 4:25:17 PM
I have a web service in .net 1.5 that I am consuming using windows
application.
I am running this windows application on Windows XP Pro.
Now if we use SQL server Authentication in WebService to connect to database
I am able to Invoke this web service from Windows Application(running on XP)
... more >>
Membership.ValidateUser() from Login.OnAuthenticate()?
Posted by asnowfall@gmail.com at 1/15/2008 12:19:03 PM
I am using 'System.Web.Security.Membership' &
'System.Web.UI.WebControls.Login' control to implement Forms based
authentication.
Can I call Membership.ValidateUser() from Login.OnAuthenticate()? I
want to do this because I want to control cookie creation.
I have not been able to find a samp... more >>
Secure user name and Password in Web Config
Posted by maa at 1/13/2008 12:44:01 PM
I want to be able to securely encrypt a user name and password for a web app.
The user name/password is to be used in for authorization to a web service
not a db. For security reasons the company wants to encrypt what is in the
web config file and be able to move the web app to different mach... more >>
Membership provider in hosted ASP.Net environment.
Posted by David at 1/11/2008 11:29:00 PM
I recently set up a new ASP.NET web page, the first one I've ever done in a
real, honest to goodness server that wasn't my local machine. I've got a web
hosting service (from oneandone, in case anyone knows it.)
I would very much like to use the membership services. On my local machine
I ... more >>
web.config section encryption fails
Posted by Olivier MATROT at 1/11/2008 2:38:01 AM
Hello,
Im using ASP.NET 2.0.
I'm trying to encrypt the connectionStrings section of the web.config file
with the following command :
C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_regiis.exe -pef
"connectionStrings" "C:\inetpub\wwwroot\NAWEB3"
Usually this is working fine but today o... more >>
Using WindowsTokenRoleProvider with Forms Authentication ...
Posted by Naraendirakumar R.R. at 1/10/2008 12:36:14 AM
Hi:
Has anybody managed to do this? We have setup forms authentication to
validate against AD. We'd like to use AD for roles based authorization.
The documentation on ASP.NET leads me to believe WindowsTokenRoleProvider is
possible only if I use Integrated Windows Authentication?
Thank... more >>
Error using System.DirectoryServices
Posted by Nam at 1/9/2008 10:24:06 AM
On my ASP.NET 2.0 website project on VS 2005, I am getting the following
error when building the solution:
“The type or namespace name 'ADSI' does not exist in the namespace
'myNameSpace' (are you missing an assembly reference?)â€
I do have the following added to my web.config file:
... more >>
LOGOFF the client browser from Windows authentication
Posted by Joel at 1/9/2008 7:58:06 AM
Bonjour!
I have an application that use the integrated windows authentication from
IIS to login against our AD, but some of our users are using station or
compurter open to public. When they submit their request I want them to able
to logoff so the next person can create their own request.... more >>
Password expiration good practice.
Posted by Mathieu_Pagé at 1/8/2008 10:05:06 AM
Hi,
In my ASP.NET application I want the password to expires after some
time. When a user sign in and his password is expired I automatically
send him to the change password page with a message explaining why he is
required to change his password.
What I want to do is prevent him to bro... more >>
How easy is it to store DB connection strings in ActiveDirectory instead of web.config
Posted by Naraendirakumar R.R. at 1/5/2008 12:41:20 PM
I have a client in the healthcare industry who would prefer to store the
connection string in a centralized location in their Active Directory
repository.
Has anybody done this? What has your experience been?
Are there any stock components in ASP.NET or 3rd party that would make this
ea... more >>
Problem establishing SSL connection in code-behind
Posted by gnewsgroup at 1/2/2008 1:50:28 PM
In my web application, I need to establish an SSL connection to a
remote web site and authenticate a user using Integrated Windows
Authentication.
The remote website only allows this authentication method, and it has
only one web page: index.html, which simply says: hola, amigo.
Please note... more >>
M-I 5-Pe rsecution - bugging a nd counter-surv eillance
Posted by efevmem@yahoo.com at 1/1/2008 9:11:58 AM
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
-= MI5: bugging and. counter-surveillance -=
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
PO: >Did you ever look for the bugs in your house ? If not, why not ? I. mean if
PO: >I thought that was happening to me, I'd search the place from. top to botto... more >>
|