all groups > asp.net security > february 2008
Forms Authentication Problem?
Posted by Aaron at 2/29/2008 11:36:06 AM
We are implementing forms authentication on our site. We noticed that when
we try to lock down a folder whose name as dashes in it (e.g. Secure-Folder)
it is ignored. Is this a known issue?
Thanks... more >>
Membership Access Rules?
Posted by Keith G Hicks at 2/28/2008 11:35:46 PM
asp.net 2.0.
Where are the Access Rules stored? I know where the memberships, users,
roles and such are in the sql membership tables. But I created some folder
access rules and opened up all the membership tables to see where that info
was located and it's not in any of them. Can someone tell ... more >>
Cannot open database "aspnetdb" requested by the login. The login
Posted by Jess at 2/28/2008 2:38:00 PM
When I go into VS2005 - website administration tool / Security I get the
error listed above. Can someone help me resolve this problem? I've been
reading for days and it's not corrected.
SQL Express 2005 is installed - I generated the aspnet database from
aspnet_regsql.exe. The aspnet dat... more >>
SSL in IIS of windows xp
Posted by ad at 2/27/2008 5:50:03 AM
Can you use SSL with the IIS of windows xp professonal?
... more >>
anonymous access for one page
Posted by ad at 2/26/2008 4:55:06 AM
The content of my Web.config is below
<authentication mode="Form">
<forms name="HealthCookie" loginUrl="Login.aspx" defaultUrl="Home.aspx"
rotection="Validation">
</forms>
</authentication>
<authorization>
<deny users="?"/>
</authorization>
But I need more one page tha... more >>
Role management using cookies
Posted by Balagopal N. Nair at 2/25/2008 5:55:00 AM
Implementing forms authentication in an ASP.NET is quite easy using cookies.
A few entries in the web.config and a few lines of code and you're done.
The problem hits you when you need to handle roles using the same mechanism.
The SetAuthCookie and RedirectFromLoginPage methods provided by th... more >>
Forms Authentication and Cookies
Posted by fcs at 2/20/2008 11:59:38 AM
Hi,
we have an ASP application under C# talking to MS SQL 2000, it has no
problem with windows authentication for almost 200 users who are registered
in Active Directory. Application has several different folders though.
Now we are going to use a copy wide open in the internet, for more users,... more >>
Membership and Roles not working when application is deployed
Posted by @ndyB at 2/19/2008 4:58:28 PM
Hi there all, I hope someone can help me out because I'm still a little new
to all this.
I'm trying to create a very simple membership/roles based application, but
when I deploy it onto a remote server the application doesn't seem to
pick-up the user roles.
I've created the user database o... more >>
Don't see what you're looking for? Search DevelopmentNow.com.
Password reset configuration with ActiveDirectoryMembershipProvide
Posted by Charlotte at 2/19/2008 9:27:01 AM
Hi,
I have an ASP.NET 2.0 web application, which is configured to use
Forms-based authentication and the ActiveDirectoryMembershipProvider for the
membership.
The users are stored in ADAM.
Everything was working properly until I wanted to add the password reset
functionality.
I extended ... more >>
Exchange webDav Configuration
Posted by Glenn Thimmes at 2/14/2008 2:44:12 PM
I am needing to find some documentation for configuring webDav for Exchange.
Is there a KB article or whitepaper somewhere? I am not able to find
anything. If this is the wrong place to look, please guide me.
Thanks,
Glenn
... more >>
Allow certain users for an intranet app
Posted by maa at 2/12/2008 5:37:00 AM
My web app reads/writes to the db and the company will only authorize some
users to access and run the app. It will be used as an intranet behind
Company's firewall. Should I add the users in the web.config file as in the
following:
<authentication mode="Windows"/>
<identity impersonate=... more >>
Adding Roles and Membership to 2003
Posted by Sam Samson at 2/11/2008 6:51:45 AM
Greetings,
I have created a test Web site using membership and roles on my XP sandbox.
All worked well
Deployed my website to 2003 did some magic moving aspnet_db into sql server
existing DB .. all works as desired.
However I do not know how to add users and roles on the 2003 server.
In ... more >>
Security for a worker thread
Posted by maa at 2/9/2008 5:00:03 PM
How do I adjust the security for a worker thread in asp.net?
Thanks,
maa... more >>
how to update context.user without postback ...ing
Posted by Softlion at 2/9/2008 1:04:08 PM
Hi,
I'm using form authentication in a user control with fires an onSignedOn
event to registered page controls,
so there is no need to postback a second time to reflect changes.
It seems the Context.User.Identity stays a GenericIdentity object even after
calling FormsAuthentication.SetAuthC... more >>
Impersonate
Posted by zino at 2/8/2008 1:41:00 PM
on Windows Xp and in ASP net 2.0 application,
I followed the example under the following link:
http://msdn2.microsoft.com/en-us/library/system.security.principal.windowsidentity.impersonate(VS.71).aspx
to save an Excel file, but I keep getting Access denied error.
(I have administartor privile... more >>
SAML 2.0 and .NET integration
Posted by wardy at 2/8/2008 10:48:56 AM
hi all,
I have a requirement to investigate the possibility of having a .NET
application integrate with SAML 2.0 in a federated authentication
environment to allow for single sign-on behaviour. However, I am
having a lot of difficulty finding any examples/samples/articles on
integrating .NET... more >>
Establishing SSL connection in Visual Basic 6.0
Posted by Garg at 2/6/2008 5:36:12 AM
Hi,
I have a desktop application, written in VB 6.0. It transfers data to
a web-application through HTTP protocol.
The code is something like this:
Public Sub SendServerCommandUsingHTTPPost(strMessage As String,
lTimeout As Long)
Dim hInternetOpen As Long
Dim hInternetConnect As... more >>
S4U Kerberos for calling WCF services
Posted by Alhambra Eidos Kiquenet at 2/6/2008 2:21:01 AM
Hi all, misters
I have an ASP .NET 2.0 application , that uses WCF services.
I want use S4U Kerberos for calling WCF services using delegate account.
The application runs under Windows integrated authentication and anonymous
access is turned off.
My code is similar like this:
//de... more >>
Get info for impersonate
Posted by Alhambra Eidos Kiquenet at 2/6/2008 2:11:02 AM
Hi all misters,
I have ASP.NET application, and in my web.config appears the following lines:
<!--The <authentication> section enables configuration of the security
authentication mode used by ASP.NET to identify an incoming user. -->
<authentication mode="Windows"></authentication>
<ident... more >>
Pass credentials from Win app to Web app
Posted by Eric at 2/5/2008 6:31:00 AM
I'm using ASP.net Authentication and Authorization (Sql provider against
standard aspnetdb) in my VB.net Windows App to handle users, roles, etc.
This works great.
Within my win app, using the .net web browser control, I want to launch a
url (in our intranet, ASP.Net hosted in IIS6, Win ... more >>
Form Authentication, Login&Password are clear text?
Posted by frank at 2/3/2008 10:29:00 AM
Hi,
I have some issues with protecting UserName&Password.
When UserName&Password transit through the Network from Browser to IIS, they
are in clear text, Web.config can not cover that at the very beginning?
So how to protect that when the user click login Button at the login page?
As... more >>
|