Groups | Blog | Home


Archived Months
July 2003
August 2003
September 2003
October 2003
November 2003
December 2003
January 2004
February 2004
March 2004
April 2004
May 2004
June 2004
July 2004
August 2004
September 2004
October 2004
November 2004
December 2004
January 2005
February 2005
March 2005
April 2005
May 2005
June 2005
July 2005
August 2005
September 2005
October 2005
November 2005
December 2005
January 2006
February 2006
March 2006
April 2006
May 2006
June 2006
July 2006
August 2006
September 2006
October 2006
November 2006
December 2006
January 2007
February 2007
March 2007
April 2007
May 2007
June 2007
July 2007
August 2007
September 2007
October 2007
November 2007
December 2007
January 2008
February 2008
March 2008
April 2008
May 2008
June 2008
all groups > asp.net security > february 2008

Forms Authentication Problem?
Posted by Aaron at 2/29/2008 11:36:06 AM
We are implementing forms authentication on our site. We noticed that when we try to lock down a folder whose name as dashes in it (e.g. Secure-Folder) it is ignored. Is this a known issue? Thanks...more >>


Membership Access Rules?
Posted by Keith G Hicks at 2/28/2008 11:35:46 PM
asp.net 2.0. Where are the Access Rules stored? I know where the memberships, users, roles and such are in the sql membership tables. But I created some folder access rules and opened up all the membership tables to see where that info was located and it's not in any of them. Can someone tell ...more >>

Cannot open database "aspnetdb" requested by the login. The login
Posted by Jess at 2/28/2008 2:38:00 PM
When I go into VS2005 - website administration tool / Security I get the error listed above. Can someone help me resolve this problem? I've been reading for days and it's not corrected. SQL Express 2005 is installed - I generated the aspnet database from aspnet_regsql.exe. The aspnet dat...more >>

SSL in IIS of windows xp
Posted by ad at 2/27/2008 5:50:03 AM
Can you use SSL with the IIS of windows xp professonal? ...more >>

anonymous access for one page
Posted by ad at 2/26/2008 4:55:06 AM
The content of my Web.config is below <authentication mode="Form"> <forms name="HealthCookie" loginUrl="Login.aspx" defaultUrl="Home.aspx" rotection="Validation"> </forms> </authentication> <authorization> <deny users="?"/> </authorization> But I need more one page tha...more >>

Role management using cookies
Posted by Balagopal N. Nair at 2/25/2008 5:55:00 AM
Implementing forms authentication in an ASP.NET is quite easy using cookies. A few entries in the web.config and a few lines of code and you're done. The problem hits you when you need to handle roles using the same mechanism. The SetAuthCookie and RedirectFromLoginPage methods provided by th...more >>

Forms Authentication and Cookies
Posted by fcs at 2/20/2008 11:59:38 AM
Hi, we have an ASP application under C# talking to MS SQL 2000, it has no problem with windows authentication for almost 200 users who are registered in Active Directory. Application has several different folders though. Now we are going to use a copy wide open in the internet, for more users,...more >>

Membership and Roles not working when application is deployed
Posted by @ndyB at 2/19/2008 4:58:28 PM
Hi there all, I hope someone can help me out because I'm still a little new to all this. I'm trying to create a very simple membership/roles based application, but when I deploy it onto a remote server the application doesn't seem to pick-up the user roles. I've created the user database o...more >>



Password reset configuration with ActiveDirectoryMembershipProvide
Posted by Charlotte at 2/19/2008 9:27:01 AM
Hi, I have an ASP.NET 2.0 web application, which is configured to use Forms-based authentication and the ActiveDirectoryMembershipProvider for the membership. The users are stored in ADAM. Everything was working properly until I wanted to add the password reset functionality. I extended ...more >>

Exchange webDav Configuration
Posted by Glenn Thimmes at 2/14/2008 2:44:12 PM
I am needing to find some documentation for configuring webDav for Exchange. Is there a KB article or whitepaper somewhere? I am not able to find anything. If this is the wrong place to look, please guide me. Thanks, Glenn ...more >>

Allow certain users for an intranet app
Posted by maa at 2/12/2008 5:37:00 AM
My web app reads/writes to the db and the company will only authorize some users to access and run the app. It will be used as an intranet behind Company's firewall. Should I add the users in the web.config file as in the following: <authentication mode="Windows"/> <identity impersonate=...more >>

Adding Roles and Membership to 2003
Posted by Sam Samson at 2/11/2008 6:51:45 AM
Greetings, I have created a test Web site using membership and roles on my XP sandbox. All worked well Deployed my website to 2003 did some magic moving aspnet_db into sql server existing DB .. all works as desired. However I do not know how to add users and roles on the 2003 server. In ...more >>

Security for a worker thread
Posted by maa at 2/9/2008 5:00:03 PM
How do I adjust the security for a worker thread in asp.net? Thanks, maa...more >>

how to update context.user without postback ...ing
Posted by Softlion at 2/9/2008 1:04:08 PM
Hi, I'm using form authentication in a user control with fires an onSignedOn event to registered page controls, so there is no need to postback a second time to reflect changes. It seems the Context.User.Identity stays a GenericIdentity object even after calling FormsAuthentication.SetAuthC...more >>

Impersonate
Posted by zino at 2/8/2008 1:41:00 PM
on Windows Xp and in ASP net 2.0 application, I followed the example under the following link: http://msdn2.microsoft.com/en-us/library/system.security.principal.windowsidentity.impersonate(VS.71).aspx to save an Excel file, but I keep getting Access denied error. (I have administartor privile...more >>

SAML 2.0 and .NET integration
Posted by wardy at 2/8/2008 10:48:56 AM
hi all, I have a requirement to investigate the possibility of having a .NET application integrate with SAML 2.0 in a federated authentication environment to allow for single sign-on behaviour. However, I am having a lot of difficulty finding any examples/samples/articles on integrating .NET...more >>

Establishing SSL connection in Visual Basic 6.0
Posted by Garg at 2/6/2008 5:36:12 AM
Hi, I have a desktop application, written in VB 6.0. It transfers data to a web-application through HTTP protocol. The code is something like this: Public Sub SendServerCommandUsingHTTPPost(strMessage As String, lTimeout As Long) Dim hInternetOpen As Long Dim hInternetConnect As...more >>

S4U Kerberos for calling WCF services
Posted by Alhambra Eidos Kiquenet at 2/6/2008 2:21:01 AM
Hi all, misters I have an ASP .NET 2.0 application , that uses WCF services. I want use S4U Kerberos for calling WCF services using delegate account. The application runs under Windows integrated authentication and anonymous access is turned off. My code is similar like this: //de...more >>

Get info for impersonate
Posted by Alhambra Eidos Kiquenet at 2/6/2008 2:11:02 AM
Hi all misters, I have ASP.NET application, and in my web.config appears the following lines: <!--The <authentication> section enables configuration of the security authentication mode used by ASP.NET to identify an incoming user. --> <authentication mode="Windows"></authentication> <ident...more >>

Pass credentials from Win app to Web app
Posted by Eric at 2/5/2008 6:31:00 AM
I'm using ASP.net Authentication and Authorization (Sql provider against standard aspnetdb) in my VB.net Windows App to handle users, roles, etc. This works great. Within my win app, using the .net web browser control, I want to launch a url (in our intranet, ASP.Net hosted in IIS6, Win ...more >>

Form Authentication, Login&Password are clear text?
Posted by frank at 2/3/2008 10:29:00 AM
Hi, I have some issues with protecting UserName&Password. When UserName&Password transit through the Network from Browser to IIS, they are in clear text, Web.config can not cover that at the very beginning? So how to protect that when the user click login Button at the login page? As...more >>


DevelopmentNow Blog