| How to use form authentication in Load balanced servers (3 replies) |
| ASPFriends.com 'aspngsec' list |
| Hi all, I have a question regarding form based authentication in Load balanced servers. I am currently using 2 servers which are load balanced. We are using windows load balancing. Scenario. 1. When I open a page which is coming from Ist Server. and I enter some data into it. 2. Then before i submit the page the I server goes down. But as the IInd server is still running NLBS(Network load balancin... |
|
| Security and impersonation w/ machine.config file (6 replies) |
| ASPFriends.com 'aspngsec' list |
| I've posted this in a couple microsoft newsgroups, but no one has replied. I am on a mission. A mission to harden an IIS webserver running asp.net, with multiple clients. The goal is the make it impossible for one client's ASP.NET application to 'slide over' to another client's website and read sensitive source code. What I am doing is this asp.net runs under the "aspnet" user account, which has t... |
|
| access denied screen? (2 replies) |
| ASPFriends.com 'aspngsec' list |
| I have successfully coded a forms auth application with role based security. I have defined my roles and have tested the setup to make sure that it was working well. It does. The only issue I have left is when the user tries to get to a page that they don't have access to, the forms auth mechanism redirects them back to the logon page. Is there anyway to redirect them to a "sorry, but access denie... |
|
| ASPNET User Hath No Privileges... (3 replies) |
| ASPFriends.com 'aspngsec' list |
| Moved from [aspngwebservices] to [aspngsec] by Michiel van Otegem mvo@mail.aspnl.com I just got here, and checked the archives for the list, but couldn't find anything matching my problem. I'm sure it has occurred to someone before, however! I am learning webservices, and using VS7 have built one that accesses a Sql Server database. Just doing a select on it, but I get the following... System.Data... |
|
| passing username and pwd into web proxy object (2 replies) |
| ASPFriends.com 'aspngsec' list |
| How do I supply the user name and password into the code below? David Code Dim url As String "http://www.msn.co.za" Dim result As String Dim objRequest As WebRequest Dim objproxy As New WebProxy() 'get user and pdw objproxy WebProxy.GetDefaultProxy() 'objRequest.Credentials ????? Dim objresponse As WebResponse objRequest System.Net.HttpWebRequest.Create(url) objresponse objRequest.GetResponse Dim ... |
|
| Forms Authentication and non-ASP.NET files? (13 replies) |
| ASPFriends.com 'aspngsec' list |
| Hi there. I received a response on this question some time back, but I lost of number of emails I had saved such as this one so I need to re ask it. The response I got was very thorough, so thanks again for the efforts.. The questions are: 1) I'm using Forms Authentication to allow access to my web application. I will be storing a number of PDF files that I need to secure access on. I was told tha... |
|
| User.Identity.Authenticated (2 replies) |
| ASPFriends.com 'aspngsec' list |
| I am getting the following while trying to reference the isAuthenticated property within Forms Authentication. I've done an Import for System.Web.Security, do I need to DIM the User as an object first? Compiler Error Message: BC30451: Name 'User' is not declared. Source Error: Line 8: Sub Page Load(Sender As Object, E As EventArgs) Line 9: Line 10: If User.Identity.IsAuthenticated False Then Line ... |
|
| FormsAuthentication Cookie value is not staying set (2 replies) |
| ASPFriends.com 'aspngsec' list |
| I am trying to write a SOAP envelope ( around 2KB) to the user portion of a FormsAuthentication ticket. The string version of the ticket (after calling the ticket.encrypt method) is around 8K which is what I am storing in the cookie Once I do this, the next request doesn't have the cookie that I set the first time through. If I hard code a short string into the user data portion of the ticket like... |
|
| RegistryAccess denied (2 replies) |
| ASPFriends.com 'aspngsec' list |
| Hi all, I m trying to write to the event log like this : '' Create the source, if it does not already exist. If Not EventLog.SourceExists("EVENT LOG SOURCE") Then EventLog.CreateEventSource("EVENT LOG SOURCE", "Application") End If Dim m eventLog As New EventLog() m eventLog.Source EVENT LOG SOURCE m eventLog.WriteEntry(Me.Message, System.Diagnostics.EventLogEntryType.Error) I get following error ... |
|
| ldap authentication (2 replies) |
| ASPFriends.com 'aspngsec' list |
| The below method works well, but peforms very slowly against our ldap server. Can anyone help me finetune it or suggest a different way to do it? All I'm trying to do is validate a user login. public String ValidateUser(String EmpID, String Password) { if (Password ! ""){ DirectoryEntry de new DirectoryEntry(); de.Path "LDAP://www.myldap.com:389" //this ldap server is not valid...i can't give anyo... |
|
| unanswered question:Access Denied error (14 replies) |
| ASPFriends.com 'aspngsec' list |
| Moved from [aspngstart] to [aspngsec] by Marcie Jones marciejones@yahoo.com hi all i am trying to use excel object from my .aspx.vb...i am getting following error.if i did samething from windows application it is working fine..why...please help me.. i declared like below... Dim excel As New Excel.Application() i am getting following error.... Access is denied. Description: An unhandled exception o... |
|
| Forms Authentication over SSL (3 replies) |
| ASPFriends.com 'aspngsec' list |
| hi, i'm trying to get forms authentication to work over a secure sockets connection. i've tried to change the LoginUrl "..." to a "https://..." setting, which seems to redirect to the correct login page, but also pops up the "network login" dialog box. has anyone got any ideas on how to get this working?? is it a change in iis to prevent this?? or is it something else?? the couple of tutorials i'v... |
|
| Running a Web App as Administrator (7 replies) |
| ASPFriends.com 'aspngsec' list |
| Hi, I'm trying to write a web application that can retrieve the status of a particular windows service running on a remote machine. It works great on my machine, but I get an error when I try to access the page (on my machine) from another machine. I have authentication set to "windows" in my web.config and I also have impersonate set to true. I've tried using impersonate and setting it to a speci... |
|
| Setting ASPNET Access Rights Programatically? (5 replies) |
| ASPFriends.com 'aspngsec' list |
| Moved from [aspngfreeforall] to [aspngsec] by devin rader devinr@drone interactive.com Is there a way to set access rights programmatically? I'm doing a simple File.Move and as expected, I get an UnauthorizedAccessException since the ASPNET account doesn't have modify rights to the directory. |
|
| Form Authinication problem (4 replies) |
| ASPFriends.com 'aspngsec' list |
| Moved from [aspngvs] to [aspngsec] by Ken Schaefer ken@adopenstatic.com Does anyone know how i can set up the web.config file to allow diferent pages in diferent folders use a diferent login page? john |
|
| Resolving DNS names with DNS.GetHostByAddress (2 replies) |
| ASPFriends.com 'aspngsec' list |
| I'm having quite a bit of trouble getting the System.Net.Dns class working in my asp.net application. Below is the simple line of code causing me grey hairs: Response.Write("host name:" Dns.GetHostByAddress(Dns.GetHostByAddress(Request.UserHostAddress ).HostName); Hitting this page from the internal network resolves the machine name, but hitting this page from the internet, outside of the local ne... |
|
| Network Dir (2 replies) |
| ASPFriends.com 'aspngsec' list |
| Network DirHi all, I have tried ALMOST everything I can think of I have spent the whole of yesterday and today reading about the system.io class and all it can do but I hit a hard and frustrating wall when trying to use the directory.create(\\myremoteserver\share\newfolder) I keep receiving can not find path \\myremoteserver\share . When i try a file.delete(\\myremoteserver\share\myfile.txt) then ... |
|
| Forms Authentication and non .net pages (2 replies) |
| ASPFriends.com 'aspngsec' list |
| We have an old ASP site that is made up of .asp pages and .pdf, .ppt and .zip files for download. We now want to add to it and are planning on using .Net. Currently each ASP page checks for a session variable to ensure the user is logged in and each file has an asp extension to ensure this works even though there isn't any other scripting in the pages. If we re wrote the login page and moved over ... |
|
