all groups > dotnet security > february 2007
Filter by week: 1 2 3 4
ADAM / AD Proxy Bind
Posted by Rod Clingaman at 2/28/2007 11:13:21 AM
I am working with ADAM and have successfully setup a user using the Proxy Bind Redirection with AD, based on the MSFT step-by-step guide. Is anyone aware of how to setup up the Proxy Bind for users in ADAM programmatically? I have written VBS scripts to set up non-binding users, OUs, set attribute... more >>
CAPICOM problem with .NET 2.0
Posted by efrolov NO[at]SPAM gmail.com at 2/28/2007 7:04:05 AM
RSACryptoProvider creation problem:
I used some code for RSACryptoProvider creation with smart card and
CAPICOM COM object
The code worked well in Framework 1.1
but when I tried the same code in Framework 2.0
I got an following Cryptographic exception:
"Unable to open the access token of the c... more >>
Program crashes when running accross network, but fine when on pc
Posted by Camper Joe at 2/26/2007 7:25:03 AM
Hi
Our application crashes when running it from a remote pc
(\\server\app\app.exe),
but when I run it from my pc (c:\app\app.exe) it is fine.
It seem to happen when we use ADO.Net
Any ideas?
Thanks... more >>
A cryptography solution for a client/server winforms app
Posted by DXRick at 2/22/2007 2:35:46 PM
Hi, I am learning C#, .NET 2.0, and Winforms to learn the things that are
covered by the MCTS exam 70-536. I am writing a client server Quicken like
application where the user's account files are saved on the server. I am now
looking at encryption for the sending of the user data between the... more >>
Fail to access to networked folders
Posted by Speech Lover at 2/21/2007 3:46:08 PM
I am using ASP.NET 1.1.
I am trying to manipulate remote shared folders and files through UNC
format.
For example: //server/dir1/abc.txt
When I ran my c# code, I got an error: Unknown user name or bad password
When I searched the Internet and it appears I can use Impersonate to change... more >>
Determing security demand for ServiceDescriptionImporter()
Posted by Keith Patrick at 2/21/2007 3:34:38 PM
I'm trying to create an instance of
System.Web.Services.Description.ServiceDescriptionImporter (in .Net 1.1) in
an assembly that refuses all permissions and then requests the individual
ones it needs. Problem is, when I do this, I get a security demand as soon
as I call the method that conta... more >>
web app - strong named assemblies
Posted by Dav at 2/20/2007 9:12:00 PM
I have several business layer assemblies that I would like to share in
several different web applications. I plan to strong name them and install
them in the GAC. My understanding is the web applications run with Full
Trust and will be able to call methods in the business layer assemblies. ... more >>
Impersonation in non domain member server
Posted by Johann Granados at 2/19/2007 4:08:49 PM
Hi everybody,
I'm developing an ASP.NET application which calls business components in a
remote server located at the DMZ (this is, a non domain member server). The
problem I'm facing is that because the server is not a domain member, it is
not able to access the active directory in order ... more >>
Don't see what you're looking for? Search DevelopmentNow.com.
Remove Downloaded updates before install?
Posted by Disconnected at 2/16/2007 6:36:02 PM
I have been experiencing conflict between Flash 9 and .NET2 programing
parameters! I believe that the critical security updates that Microsoft is
downloading
into my P.C. are the problem! (and not the cure they are touting them as!) I
have always trusted msn security and have my P.C. set to r... more >>
A twist to "Logon User at Domain"
Posted by Radek.Jedrasiak NO[at]SPAM gmail.com at 2/16/2007 4:33:05 AM
Hi all,
just scanned the postings and i'm alittle suprised. There seams to
be no way,
to make a user logon/authenticate at a domain WITHOUT the user making
his username
AND PASSWORD available to the application initiating the logon/
authentication process....
Is that right?
I'm referi... more >>
Validate certificate
Posted by Cris at 2/15/2007 9:35:05 AM
Hi,
First of all, i must tell you I'm so newbie in this fields. I've some
knowledge, but it's not so much.
I have a SOA architecture in .net 2.0, i have a frontend made in PHP. The
users access to frontend using a smartcard that has a certificate x509v3. The
frontend read this and send to ... more >>
Unable to run external program exe's
Posted by Taps at 2/15/2007 8:50:34 AM
Hi,
Wanted to deploy a console application and give it the least amount of
privileges to run successfully.
It calls some other 3rd party programs like gpg.exe, wsftppro.exe.
These programs are all installed on the machine. The console app
calls these programs fine if I use my credentials (Ad... more >>
Request.UrlReferrer + IE7 + "Invalid Certificate" = bad news
Posted by CynicalIrony NO[at]SPAM gmail.com at 2/15/2007 8:10:57 AM
Currently we are working on a secure application (SSL, Client Certs
all that good jazz) when we discovered IE7 has an issue reporting the
referring url when an Invalid SSL certificate is encountered. The
solution we have come up with will pass a hashed value as a
querystring to the validation ap... more >>
How to generate validationKey ??
Posted by Bragadiru at 2/15/2007 12:00:00 AM
Hi all,
I want to protect my web.config - connectionStrings section like in
http://msdn2.microsoft.com/en-us/library/dtkwfdky(VS.80).aspx - with
RSAProtectedConfigurationProvider.
But i don't want to use the decryptKey+validationKey from that example. How
can I generate my own keys ? An ... more >>
RsaCryptoServiceProvider doubt
Posted by Victor Pereira at 2/14/2007 4:48:26 PM
Hi,
I have a certificate and it's private key.
I'm accessing my certificate and my private key using the X509Certificate2.
My problem is: I can't pass to the RsaCryptoServiceProvider class my Private
and Public key. How can i do it ?
Thanks in advance,
Victor
... more >>
How to bypass Forms Authentication on selected pages programmatica
Posted by ajmehra at 2/13/2007 10:52:00 AM
Hi
I am trying to bypass Forms Authentication on certain pages
programmatically. Any thoughts will be appreciated.
Thanks,
AJ... more >>
Do any microsoft buildtime dependancies C#/C/c++/VB/etc. need to be updated for the 2007 policy on daylight savings time?
Posted by Daniel at 2/12/2007 7:49:56 PM
Do any microsoft buildtime dependancies C#/C/c++/VB/etc. need to be updated
for the 2007 policy on daylight savings time?
I know the OS needs to be updated but I care now about C libraries, .net
binaries, etc. that microsoft maintains which have coded in them logic
around datetime. e.g. the C... more >>
Client Certificate Selection
Posted by CynicalIrony NO[at]SPAM gmail.com at 2/12/2007 2:00:01 PM
I have what I hope to be a simple question. I'm currently working on a
project that uses IIS to request a Client Cert (X509) from a CAC/
Smartcard. However, we want to get away from IIS mandating this
requirement and have ASP.NET (C#) request this cert from the client.
Is there anyway in .NET to... more >>
Books on .net security
Posted by Bill Gower at 2/9/2007 10:05:56 AM
What is the best book out there right now on .Net Security? I am looking
for something that covers more from the developer angle and is current.
Bill
... more >>
Client certificates do not show up installing the last Root Update
Posted by claudio at 2/9/2007 3:24:00 AM
After having installed the Jan 31st 2007 Root Update on Windows 2003 Server
I've lost the possibility to use almost all my client certificates when
accessing https pages of web sites on my machine.
Only certs from a given CA are displayed. Not those from my local CA for
instance. The CA ce... more >>
Could not establish secure channel for SSL/TLS.
Posted by mikem at 2/8/2007 6:56:20 AM
I am trying to make web service calls via HttpWebRequest to a secure
server that requires a client certificate. The server appears to be a
Sun-ONE-Web-Server/6.1 and I am told that they are using a Nortel SSL
accelerator. The client is an ASP.NET application running on IIS6 /
windows 2003. I ... more >>
Display of encrypted data
Posted by ASchuetze at 2/7/2007 10:29:19 PM
Hi, id like to know why sometimes encrypted data looks like the 'normal'
encrypted stuff (e.g.
Z€Õ1Ù0}“Oy1Çø¡D+[‹Uö¶’XNb¹CnÊ€h}°ì˜_Å“ ÃŒÂÆ’=]Å“{qÃ…) and sometimes the
are nearly only squares if I use the default-windows-editor to view
within the file. And thi... more >>
Impersonation in .NET 2.0
Posted by Markus Eßmayr at 2/5/2007 2:23:44 PM
Hello!
In my application I need to impersonate a user whose credentials (username,
domain, password) are stored somewhere in an encrypted form.
My research in MSDN and other internet resources always showed the need of
importing the "LogonUser" function via P/Invoke for creating the handle t... more >>
Retrieving the private key associated with a certificate
Posted by cRCaT at 2/5/2007 12:47:03 PM
Hi,
I have a problem getting the private key associated with a certificate I
get using IEnroll interface.
After retrieving the certificate I want to use an
RSACryptoServiceProvider to digitally sign content. I need either the
private key data or the PrivateKey property of the X509Certificate... more >>
windows defender
Posted by steveg114 at 2/3/2007 2:45:00 AM
try to remove unwanted items but error 0x8050800f shows ... more >>
Defender has to be turned on every time computer is turned on
Posted by lucky613 at 2/2/2007 2:55:02 PM
Last week Live One Care said my subscrition was expired. Live's site shows
it is not. Now it shows status as good, however, when I open Live One Care,
Defender is no longer there, and every time I boot up my pc, I get a message
that Defender is not turned on. I click on the option to turn o... more >>
Any chance to differ local group or domain group from windowsIdentity groups?
Posted by DAXU NO[at]SPAM HOTMAIL.COM at 2/2/2007 7:00:42 AM
Hi,
When a user belongs to local admin, but not domain admin group, can I
still use windowsidentity.groups or windowsprincipal.isinrole?
The thing is that I need to make sure that the user belongs to domain
admin group(the builtin administrators group in a domain). If I use
windowsIdentity ... more >>
|