Posts in microsoft.public.dotnet.framework.aspnet.security

Password expiration good practice.  Replies (1) 8 January 2008
Hi, In my ASP.NET application I want the password to expires after some time. When a user sign in and his password is expired I automatically send him to the change password page with a messag...

M'I`5,Perse cution , t heir method s and tac tics  Replies (1) 2 January 2008
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= -= MI5:. methods and tactics -= -=-=-=-=-=-=-=-=-=-=-=-=-=-=-= They deliberately set out to harass. in a way that would resemble the symptoms of schizophrenia,. so...

M I`5 Persec ution , why the secur ity ser vices ...  Replies (1) 2 January 2008
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= -=. why the security services? -= -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= You may ask, why. do I think the "they" referred to are the security services?. Is there any e...

M I`5,Persecu tion , harassm ent at wo rk  Replies (1) 2 January 2008
-=-=-=-=-=-=-=-=-=-=-=-= -= harassment at. work -= -=-=-=-=-=-=-=-=-=-=-=-= Once I stopped watching television and listening to the radio. at the end of 1990, "they" had to find other ways of co...

Problem establishing SSL connection in code-behind  Replies (1) 2 January 2008
In my web application, I need to establish an SSL connection to a remote web site and authenticate a user using Integrated Windows Authentication. The remote website only allows this authenticati...

ViewStateMac Errors  Replies (1) 2 January 2008
We have an application that is persisting ViewState to a SQL database and thus all of our pages only have a GUID for the view state hidden field. We are also getting ViewStateMac errors under cert...

M`I'5`Perse cution ` MI 5 ar e Afra id to A dmit T ...  Replies (1) 31 December 2007
MI5 are Afraid to Admit They're. Behind the Persecution MI5 have issued a formal. denial of any involvement in my life to the Security Service Tribunal, as you might. expect them to; but, more im...

searching what groups a user belong from AD but er ...  Replies (1) 27 December 2007
I want users to be able to type a user name in a textox and when they hit submit displays groups the user belongs to from the Acive Directory. the getGroupforUser uses the WindowsIdentity and i h...

Cookiecontainer problem with HTTPS  Replies (1) 26 December 2007
The code below works fine in HTTP but does not work with HTTPS. I get no cookies in VS Studio 2005 when changing to HTTPS, but I get them in Fiddler. WHY? Imports System.Web Imports System.net ...

Problem with CreateUserWizard  Replies (1) 20 December 2007
Hi, I have a problem with CreateUserWizard Control. I created a webpage CreateUser.aspx, which contains a CreateUserWizard Control, I add a wizard step (step 2)for choice roles. I put the pag...

Digest auth in .net 1.1 and Active Directory  Replies (5) 18 December 2007
Hi, I've a problem with the AD digest auth. in .net 1.1. In fact I don't have information about AD and windows authentication. I'm developing a project which will use digest auth. and user info...

michael lalonde  Replies (1) 16 December 2007
3 3 3Michael Lalonde fought his enemy: a wild dog on an ironing board and went around killing rats with a jackhammer because his leg hurt and a heated argument arose which started a party, he made...

MI5-Persecution: Why do you think MI5 are responsi ...  Replies (1) 16 December 2007
Why do you think MI5 are responsible? The question of who is ultimately responsible for this eight-year harassment is one which is very difficult to answer, as the persecutors have never clearly ...

MI5-Persecution: MI5 are Afraid to Admit Theyre Be ...  Replies (1) 16 December 2007
MI5 are Afraid to Admit They're Behind the Persecution MI5 have issued a formal denial of any involvement in my life to the Security Service Tribunal, as you might expect them to; but, more impor...

Is this configuration element in web.config need i ...  Replies (1) 14 December 2007
I have a web.config file for an ASP.NET 2.0 project pages that resided in Windows Server 2003 IIS 6.0. There's a configuration element which look like: If the IIS server is blocked from the In...

Using ASP.NET 2.0 Roleprovider against AzManStore ...  Replies (1) 14 December 2007
I've been able to setup an AzMan store within ADAM and authorize a user against it. Here's a code snippet: IAuthorizationProvider azManProvider = AuthorizationFactory.GetAuthorizati...

Can Web.Config file be change made in IIS???  Replies (1) 13 December 2007
One of our web application suddenly stopped working. After doing some investigation I did find that following section has been added to web.config file. After removing this section it was w...

aspnet_regiis permissions needed  Replies (1) 12 December 2007
following scenario: I am using aspnet_regiis to encrypt parts of my web.config. this works fine on the development machine. Now I move to the integration machine which is based on a hardened se...

¤â¾÷²M³f¦U´Ú¦U«¬¸¹  Replies (1) 11 December 2007
¹q62893103°Ý»ù©ÎµoªÅ¥Õ¹q¶l¥h 3d@humaneyes.com »ù³æ....

How to monitor a website?  Replies (1) 11 December 2007
Hello, friends, We just launched a website programmed using asp.net. Now, we want to monitor who is online, when the user logs in/out, etc. What are the good approaches to do this? Should we w...

Windows Groups not working in AzMan  Replies (2) 10 December 2007
I'm trying to get the AzMan work with windows groups but for some reason it doesn't work. When I'm assigning individual windows users to azman roles then authorization works as expected but when I...

Issue using ASP.NET forms authenticationwith frame ...  Replies (3) 9 December 2007
I am facing an issue using ASP.NET forms authentication. Scenario: Machine 1: http://subd1.provider1.com (1) Frame redirect to http://subd.provider2.com Machine 2: http://subd2.provide...

Creating a user profile  Replies (1) 7 December 2007
Hi there, I have authentication setup on a web application that I have created using the standard asp.net login controls. I would like to extend the profile of users so that I can store...

Getting windows user-name without domain name  Replies (2) 7 December 2007
With .Net 2 SmartClient published/deployed over ClickOnce over IIS, is there a property like System.Security.Principal.WindowIdentity.GetCurrent().Name which would get me the logged on userID (wi...

Cannot sign/validat anymore...  Replies (1) 5 December 2007
I developed a little tool to sign a part of an XML file. The signature is varified in the application. I now work on another computer and upgraded the c#2003 app to C#2005. I have placed my key...

window.open security...  Replies (1) 4 December 2007
I open a popup explorer form with the following code. Although everything is fine in development computer, when I upload project to server statusbar of windows ALWAYS shows up and no error or warn...

Getting a AD user name ...  Replies (2) 3 December 2007
Howdy, I have an ASP.Net 2.0 web application for which all i need to do is grab the user's login name. Currently, IIS is configured for anonymous access, which i need to keep. I tried request.s...

Logout with windows authentication  Replies (1) 3 December 2007
Hello, I was trying to reproduce sharepoints "Sign on as another user" feature using windows authentication in asp.net 2.0. But this did not work for me. The browsers seems to keep the informati...

ADSI  Replies (6) 29 November 2007
Hi All, I have question about Active Directory. We have developed a site it has 75K users on SQL server 2005 associated with roles, now we are thinking to change it to Active directory is it go...

Allow an external web site to automatically login ...  Replies (1) 28 November 2007
Hi I have a requirement for an external web site to be able to automatically log in to my ASP.Net web site that is managed using Forms Authentication To do this I have created a simple HTML Fo...

Best practice for outputing XML Data from server  Replies (1) 27 November 2007
Hey there, I have a web service that returns a load of XML data which I wish to layout on a web page. I am not 100% certain of the best practice for doing this. One way I presumed that I could...

Membership & Roles ApplicationName  Replies (1) 27 November 2007
Asp.Net v2.0 I have created a web application and I am using it from a single website and database. The web application has different ‘portals’ – each independent and I am using the Member...

Encrypt connection string - Access denied  Replies (2) 26 November 2007
Using the tutorial: Protecting Connection Strings and Other Configuration Information http://www.asp.net/learn/data-access/tutorial-73-cs.aspx The sample code works fine, but it does not work...

Login control and restricted member pages  Replies (4) 21 November 2007
Hi there, I have setup a website to use the login control and have been following this tutorial, http://msdn2.microsoft.com/en-us/library/879kf95c(VS.80).aspx All of my member-o...

How to check users against security groups in Acti ...  Replies (4) 14 November 2007
My sceanrio is this on an asp.net 2.0 freamework. I want to use any of the data controls e.g Gridview,DetailView etc.. But i want some buttons e.g update,edit save etc to be enable or disabled bas...

Out Of Process COM server unable to access resourc ...  Replies (1) 14 November 2007
I have an ASP.NET application that accesses an out-of-process COM server that is single-threaded (STA). All of the resources that are available on the machine, such as network shares, are accessib...

Does AzMan support threaded concurrent read/write ...  Replies (1) 13 November 2007
Does AzMan support threading? Are there limitations against concurrent reading and writing AzMan stores from multiple threads? Does the underlying store (e.g. LDAP) make a difference in thread s...

Securing URL in File Download in ASP.net  Replies (2) 13 November 2007
Hello, There is a website in ASP.Net in which there is a File download option with URL English/Scripts/download.aspx?file=.... . Here the code substitutes the URL of the file to dow...

Downloading DevPartner Security Checker  Replies (1) 12 November 2007
Hi I have a problem getting the Compuware's Product - DevPartner Security Checker. I went through the demo of this particular product but I couldn't find any link to download the product or...

Creating User Accounts  Replies (1) 12 November 2007
Hello, I am having difficulties figuring out the following. I am developing an Intranet site in which I would like to use the Membership and security setup in ASP .Net. Obviously I don't want j...

active directory authentication using ldap  Replies (1) 9 November 2007
Hello All, I am trying to add forms authentication to an asp.net website. I am developing locally, than publishing the site to the web server. Everthing works fine on my local machine in debug ...

Anonymous and Windows Authentication  Replies (2) 8 November 2007
I need to have a site that supports both of the above schemes. I have created the site and published it to a folder and have set up two virtual directories on the folder, one with Anonymous enabl...

Can groups be entered in the authorization tab?  Replies (1) 7 November 2007
Hello, I put some users in a group in Active Directory who can access an ASP.NET intra net site internally. When I go to the authorization tab on the ASP.Net configuration settings, and add th...

Caspol question  Replies (1) 7 November 2007
Has anyone wrote or is it possible to write a little batch file that will set the permissions for each .Net Framework version usine the caspol.exe -options file? Do you/would you need to includ...

XmlSerializer XmlAttributeOverrides Security Excep ...  Replies (1) 7 November 2007
I'm serializing data from a SQL table to a XML file: on the line: XmlSerializer x = new XmlSerializer(typeof(List),o); where o is a XmlAttributesOverrides object I get The action that f...

role/group authorization not recognizing user grou ...  Replies (4) 6 November 2007
I've seen other posts that seem to have a similar problem but none with a posted solution, so here goes again.. My application does not allow anonymous access, and integrated windows authenticati...

Cannot set specific authorization to a folder  Replies (2) 5 November 2007
Hi, I have a web application with the following web.config (I removed area not regarded to security). I have a local group called ITCoordinators that I want to give access to the existing fold...

delegation and multiple host name  Replies (2) 5 November 2007
I'am running asp.net 2.0 on a 2003 serveur using a a domain service account for my application pool. I'm trying to connect to a serveur that have my webservices. My chalenge is that server have 3 ...

Accessing a network share  Replies (1) 2 November 2007
Is there a security guidance for accessing a network share from an Asp.net application? On my network share I have an ISAM file that I need to read. I create PDF files on the fly and send back to...

Encrypt connectionstring in web.config  Replies (1) 2 November 2007
If I encrypt the connection string in web.config, would I be able to copy the web.config file from one server to another. Would the encrypted web.config decrypt the same on another computer? -- ...