all groups > dotnet security > march 2007
Filter by week: 1 2 3 4 5
SslSteam causes spurious http connection attempts
Posted by davidkclark at 3/27/2007 12:57:25 PM
Hello,
Problem:
SslStream seems to try to open http connections to various machines on
the internet unrelated to the address of the SSL server requested.
This fails for machines not connected to the internet and causes
delays.
Details:
I am using the SslStream class to create an SSL conne... more >>
Setting the permissions on certificates
Posted by markus.shure NO[at]SPAM gmail.com at 3/25/2007 5:35:15 PM
Hey, is there are way to set the permissions on the certificate when
it's been added to the Windows certificate repository? I'm currently
using the 'X509Store' class to add certificates to the repository
using the flag options to persist the private key but I'd like to be
able to add them to the... more >>
Office 2007 signature line
Posted by mstrcontrol NO[at]SPAM gmail.com at 3/22/2007 9:36:10 AM
Greetings All,
I'm not sure if this is the place to post, if not, please indicate me
where to post it.
I just got my hands on my new Office 2007 instalation disc, and
everything was smoothly during the instalation. But I am a curious guy
and was looking over each folder of the CD and I came... more >>
Xmldsig Countersignature DigestValue
Posted by Iguana at 3/22/2007 5:32:25 AM
Hi!
How can i calculate DigestValue for Reference to signature ( ...
uri="#signatureId" ...)?
I try this code:
xmlElement - signature from xml file;
SignedXml signature = new SignedXml();
signature.LoadXml((XmlElement)xmlElement);
Transform t = new
System.Security.Cryptography.Xml.XmlDsigC... more >>
Authorization Manager redistribution/use on XP?
Posted by Markus Leder at 3/21/2007 6:38:43 AM
My question in summary (read further down for details):
==> Is it possible to install, use and redistribute AuthorizationManager
(DLL and MMC) within a custom product also on XP?
---
In a previous project we successfully used Windows 2003
AuthenticationManager (AzMan) for fine-grained ... more >>
Digital Signature on E-mails with .NET 1.1
Posted by Diego Marcet at 3/20/2007 1:54:18 PM
Hi!
I've been looking for a way to digitally sign an e-mail with .NET
1.1 and I haven't been able to find any way of doing this except by buying a
third party product or using CDO/OOM/ExtMAPI.
I read somewhere that an e-mail can be signed by attaching a pk* file, is
this true? is ... more >>
Creating a PKCS#7 from a PKCS#1
Posted by gherme at 3/17/2007 10:59:39 AM
Hi,
Could anyone tell me if it's possible to create a PKCS#7 from a
previously generated PKCS#1, using a keypair ( the PrivateKey) and
the CryptoAPI? Or is this a bad aproach to the rigth way to get a
PKCS#7 using just the KeyPair (without certificate) and CryptoAPI?
I'm in the way to begin ... more >>
is there some location (c.f. [CommonAppData]) where even limited users can modify/write files?
Posted by Bob Eaton at 3/16/2007 12:00:00 AM
I'm having trouble porting something to Vista because my C# assembly (in the
global assembly cache) needs to have a location where it can
read/write/modify a file.
With Administrator accounts, it works fine, but with a limited account it
can't write to the location where the file is stored ... more >>
Don't see what you're looking for? Search DevelopmentNow.com.
Removing the "Inherit permissions from parent" from an NTFS folder using System.Security.AccessControl
Posted by Rahul at 3/15/2007 1:02:11 AM
Hello,
I am trying to remove all the ACEs present on a local NTFS folder
using C# -> System.Security.AccessControl.
What I want is just to remove any permission (inherited or explicit)
present on that particular folder and replace those permissions with
access permissions of my own.
I am t... more >>
limited account permission and writing to system areas?
Posted by Bob Eaton at 3/15/2007 12:00:00 AM
I'm dealing with a security problem in a global assembly that I've created
and need some guidance.
The assembly is used by many different client programs, so the installer of
each one installs it in the Global Assembly Cache (which may end up with
multiple versions in a side-by-side fashion... more >>
what encoding does system.xml.xmldocument.save(string path) use to save the xml document if there is no <?xml... in the front of the xml document?
Posted by Daniel at 3/14/2007 9:13:29 PM
what encoding does system.xml.xmldocument.save(string path) use to save the
xml document if there is no <?xml... in the front of the xml document?
... more >>
WindowsIdentity - Invalid token; it cannot be duplicated
Posted by Kamal at 3/14/2007 6:39:13 AM
I am having invalid token, it cannot be duplicated error 70% of the time on
one machine. We are creating and validating the current user. The following
line of code raise exception.
System.Security.Principal.WindowsIdentity winIden=new
System.Security.Principal.WindowsIdentity(iToken);
... more >>
AzMan AccessCheck problem with Active Directory Groups
Posted by hocky.johansson NO[at]SPAM gmail.com at 3/12/2007 5:58:38 AM
I have trouble using AD groups assigned to Roles in AzMan.
The AccessCheck function works great when I assign AD Users direct to
AzMan Roles.
If I put an AD User into an AD Group then assign the AD Group to my
Role in AzMan the AccessCheck always return false?!?
AD is running on one 2003 server... more >>
How to authenticate the client of my assembly
Posted by adriano.labate NO[at]SPAM romandie.com at 3/12/2007 1:46:17 AM
Hi,
I am really new to .NET security. I hope that someone could help me or
give hints to resolve this quite simple problem :
I have to develop a .NET application that will connect to a database.
The assembly has to be called by a .NET Windows service issued by a
partner.
I want to be sur... more >>
Encrypted XML in framework 1.1
Posted by Kim H at 3/12/2007 12:00:00 AM
I have been working with signed XML in .NET framework 1.1 using the
SignedXml class.
Now I also have to handle signed and encrypted XML, but does framework 1.1
support encrypted XML at all?
I can see .NET 2.0 does, but I have my doubts about 1.1.
Thanks,
Kim
... more >>
Windows authendicate
Posted by Johnny E. Jensen at 3/9/2007 7:34:42 PM
Hey
I'am writing a Windows application using C#. I would like to do this:
Application Start:
Is User Authendicated (windows)
does user exists in Administrators or in MyAppGroup ( MyAppGroup = the
AD group for users running the application)
If IsUser Authendicated = False or not... more >>
RSACryptoServiceProvider minimum key-length
Posted by wip NO[at]SPAM pdi.at at 3/9/2007 3:51:07 AM
hi,
i have to use RSA within .net 2.0 and i have to use a 256 bit key-
length.
RSACryptoServiceProvider requires a min. length of 384 bit.
my current solution-ideas are:
s1.) use the RSACryptoServiceProvider and bypass the min. length with
reflections are some similar hack.
s2.) use a thi... more >>
.NET CAS vs OS security
Posted by DXRick at 3/8/2007 4:39:08 PM
I decided to test an encryption program I wrote to see what the different
types of permission tests actually do when running the application from a
restricted user account. I found that if the user attempts to write to a
file at "C:\" I end up getting an application exception only at the poin... more >>
Exception applying Digital Signature in VS.NET
Posted by alexpicchio NO[at]SPAM tiscali.it at 3/8/2007 3:01:51 AM
Hi!
I'm trying to apply a digital signature using a SYSGILLO CSP Provider
in the Visual Studio .NET environment (framework 1.1/2.0).
When I run the following code, the program prompts me for PIN and then
I receive the following
exception at the last line of the code below (rsa.SignData).
A... more >>
File / Folder security
Posted by Waleed Zahran at 3/7/2007 6:20:39 PM
Dears,
We used to use permchecker.hassaccess (DLL Component) to check if the user
has access to a specified file in ASP, is there anyone who knows how to
check if the logged user has access to open a specific file/folder using
ASP.NET or C#.NET?
Thank you in advanced.
yours
waleed za... more >>
Can't get basic encryption to work
Posted by DXRick at 3/5/2007 11:05:27 PM
I am just trying to encrypt some data and am pretty much copying the code
that the MSDN docs have for the RijndaelManaged class:
RijndaelManaged cryptAlg = null;
MemoryStream mStream = null;
CryptoStream cStream = null;
StreamWriter sWriter = null;
try
{
cryptAlg = new RijndaelManage... more >>
Permission issue: Accessing AzMan store in ADAM from ASP.NET worker process
Posted by chen at 3/2/2007 1:09:59 PM
Running into a problem that fails in the
AzAuthorizationStoreClass.Initialize call with "The system cannot find
the file specified. (Exception from HRESULT: 0x80070002)".
I've followed the "How To: Use ADAM for Roles in ASP.NET 2.0" to setup
ADAM & AzMan store [http://msdn2.microsoft.com/en-us... more >>
SQL Server AD Authentication
Posted by RichieRich at 3/2/2007 4:18:26 AM
I need to use the Enterprise Library to access SQL Server 2000 database
however the SQL user has to be an AD user because the DB server is setup for
Windows authentication only. This is a ASP.NET web app using the 1.1
Framework.
Am I in the right place to ask for ideas on how to configure ... more >>
AD-authentication with custom roles in SQL-db ?
Posted by Reinhard at 3/1/2007 11:29:29 PM
I am writing an asp 2.0 website where existing AD users can log in.
I am using ActiveDirectoryMembershipProvider for this task and it
works.
Now I need to define roles for these users (admin, author, user...)
These roles are not defined as groups in AD (in fact there could be
other web-applic... more >>
Prevent plugin assemblies from running naughty code
Posted by Ben Daniel at 3/1/2007 9:46:01 PM
Hi folks,
I'm a newbie to .net and am working on my first major c# project which
has a requirement of plugins. I was thinking of implementing this by
loading all assemblies in a certain directory and instantiating any
types derived from my base plugin type.
It's a big concern that the plugi... more >>
|