| Using Windows Authentication over Internet (3 replies, VIP) |
| ASPFriends.com 'aspngsec' list |
| Hi, Our client wants to use Windows authentiocation for their web application. Is it possible to log in from the internet? This may be necessary if the user is at another location. Best regards Sissel |
|
| Windows Authentication (3 replies, VIP) |
| ASPFriends.com 'aspngsec' list |
| Hi, I also sent a similar message to aspngfreeforall, but haven't received a complete answer yet. I was reading about how to setup windows authentication in Wrox's Professional ASP.NET. According to the book, it says that the only thing that you need to do to enable windows authentication is to add the following to your web.config: system.web authentication mode "Windows" / identity impersonate "t... |
|
| First .NET Created Virus that infects .NET files! (2 replies, VIP) |
| ASPFriends.com 'aspngsec' list |
| http://www.neowin.net/comments.php?id 3D2347&category 3Dmain Hth, Plip. Phil Winstanley. Creations Group Limited Web : http://www.creations group.com Mail : mailto:phil.winstanley@creations group.net Definition: XP eXperience Phil. 20 |
|
| .NET Security Hole Perhaps? (2 replies) |
| ASPFriends.com 'aspngsec' list |
| Hello everybody, I want users to be able to download files which are protected with a web.config file. I present them with a list of files but it is vital that they download rather than having the files display in an associated application. I cannot expect them to use the right click save option so I use buttons with code behind that adds a content disposition and attachment header to the response... |
|
| Cookie and Form Authentication (2 replies) |
| ASPFriends.com 'aspngsec' list |
| Hi, I have a question about the cookie generated with Form Authentication. In the IBuySpy portal we have this code in the global.asax: Dim ticket As New FormsAuthenticationTicket(1, Context.User.Identity.Name, DateTime.Now, DateTime.Now.AddHours(1), False, roleStr) ' Encrypt the ticket Dim cookieStr As String FormsAuthentication.Encrypt(ticket) ' Send the cookie to the client Response.Cookies("por... |
|
| Trying to access the indentity associated with request... (12 replies) |
| ASPFriends.com 'aspngsec' list |
| Moved from [aspngcontrolscs] to [aspngsec] by Charles M. Carroll darthcarroll@asplists.com Hi, I am trying to access the indentity associated with the request and nothing is turning up. Any ideas? Stefan The code: % @Page Language "VB"% html head title Welcome to the authentication section of the site. /title /head script laguage "VB" Runat "server" Sub Page Load(Src As Object, e As EventArgs) Aut... |
|
| Role Based Authentication (3 replies) |
| ASPFriends.com 'aspngsec' list |
| Using the following code as an example for my code, I have been able to successfully retrieve the DOMAIN\username of the currently logged in user to a Win2K machine. The problem is that my code and the following code always return SYSTEM when run on a Win98 machine. Does anyone know how to get DOMAIN\username on Win98. using System; using System.Threading; using System.Security.Principal; public c... |
|
| how to make some aspx pages accessible even though forms authentication is on (4 replies) |
| ASPFriends.com 'aspngsec' list |
| Hey guys, I have a asp.net web application that is using forms authentication, so in web.config I have: authentication mode "Forms" forms name "whatever" lognUrl "Default.aspx?AuthorizationFailed true" protection "All" timeout "30" path "/" ! protection "[All|None|Encryption|Validation]" /forms /authentication authorization deny users "?" / /authorization when I log someone in I call: FormsAuthent... |
|
| Authorization Section (3 replies) |
| ASPFriends.com 'aspngsec' list |
| Moved from [aspngconfig] to [aspngsec] by Charles M. Carroll darthcarroll@asplists.com This is a multi part message in MIME format. NextPart 001 01C19D57.8405E09E Content Type: text/plain; charset "us ascii" Content Transfer Encoding: quoted printable Hi All, I am not sure how or the best way to do this. I want to secure my web application using Forms based authentication But now I wish to unsecur... |
|
| problems with Forms authentication and Sessions... (2 replies, VIP) |
| ASPFriends.com 'aspngsec' list |
| i think i've been wrongly expecting sessions to end when i call FormsAuthentication.SignOut. should there be any tie in between authentication and session state? seems a little weird that a new user can login on the same browser instance and get the last user's Session variables. not good! isn't there anyway to force Session End to get fired when the user signs out? thx for any insight, Kirk Kirk ... |
|
| Roles Based Authorization (From ASP.NET UNLEASHED) (7 replies, VIP) |
| ASPFriends.com 'aspngsec' list |
| Moved from [aspngfreeforall] to [aspngsec] by Charles M. Carroll darthcarroll@asplists.com In Stephen Walther's ASP.NET UNLEASHED, he talks about authenticating users from a database in Chapter 19. Then he talks about also using roles based authentication but uses an XML file to store users. Is there a way to store Role information in the SQL database and still use Role Based Authentication throug... |
|
| VERY URGENT - Final release problem - Authentication (3 replies) |
| ASPFriends.com 'aspngsec' list |
| Copied from [aspngfreeforall] to [aspngsec] by Charles M. Carroll darthcarroll@asplists.com I have the code below for doing NT authentication that used to work in Beta 2 that doesn't in the final release. Basically it calls the LogonUser function of advapi32.dll and returns 0 if it succeeds or an error number if not. Now it returns 0 every time. I have no idea where to begin looking. I'm hoping so... |
|
| 1.0 issue with access rights (13 replies, VIP) |
| ASPFriends.com 'aspngsec' list |
| Two files: test.asp and test.aspx, both have Administrator (local) full control, no other ACE's. Naturally (and intentionally), I am asked for username and password. However, I only get access to the ASP file, not the ASP.NET (401.3 access denied, check acl). I tried: * setting processModel / userName to "SYSTEM" nothing. * changing the ASPNET account to "act as part of the operating system * add ... |
|
| aspnet_wp account (2 replies) |
| ASPFriends.com 'aspngsec' list |
| Hi, Is there a way to find out the password of the aspnet wp account? Or what is the default password when it is installed? Thanks, Philip Quinn |
|
