Form Authentication Choice?
Hello Community,I was exploring ASP.NET Web Security features. Scenrio : Suppose, I develop eCommerce website. I only use FormAuthentication which is standard choice for online solution.I decide to use...
View ArticleGetting Error Trying to Enable Roles on ASP.net Web Site Administration Tool
I am attempting to add another application to the Web Site Administration database and in the process I need to enable Roles. However; when I attempt to do so I get the following error:Access to the...
View ArticleNested applications and authorization
Hello!I have two applications that are nested. Let's call one Momma and the other Baby. Baby is nested inside Momma. Access to Momma is controlled with forms auth. The authorization section of the...
View Articlehashing password
i'm developing custom membership provider. intend to use hashed password.set the settings in web.config<membership defaultProvider="test" hashAlgorithmType="SHA1"><providers><clear...
View ArticleOpenAuth.HasLocalPassword(User.Identity.Name) raises CREATE DATABASE...
Hi all,I was trying to update a webform asp.net site with OpenAuth logins new in asp.net 4.5. The source code on the server and my development machine is identical - including connection string. When...
View ArticleGet Employee under a Manager -- Using Active Directory C#
Hello People,I need some help under active directory programming using C#.I want to get list of all employees under a pirticular person(manager). I think that I have to do some loopting to get the list...
View Articleusing roles to limit gridviews
I am part way through this website (asp.net)'s series on roles, and here is one thing I want to do with roles. Suppose on my website I have a gridview listing movies. Different roles have access to...
View ArticleMembership GUID in aspnet_ tables
We had to extend our membership database with tables that use the UserID key from aspnet_Users. Except now, these tables have gotten out of sync. I have gone in and fixed manually before, but now it...
View ArticleInternet - Access to the path is denied.
The site is served by Windows Server 2012 IIS 8.Worker process uses ApplicationPoolIdentity of IIS APPPOOL\AppPoolName.Server\UserName has necessary permissions to \\Server\SharedFolder.This code...
View ArticleHow to make Windows Authentication to work for only for specific members in...
I am creating an Intranet Website which uses Windows Authentication.I want to use it for only certain specific members of my organization. I have a line of code in my _LogOnPartial.cshtml page...
View Articlewhere is the encryption key for membership/roles stored?
I have my website on a shared server. I plan to use the membership/roles classes offered by asp.net but until now I've been using my own code to do the same thing. My question is this. Currently,...
View ArticleCreate User using MultiView
Hi,Can someone help me. I am trying to create a new user using the Multi View control. I have 4 steps. Steps 2 and 3 are gathering extra data. At the end of Step 3, I am calling the...
View ArticleASP Windows authentication - Authorziation not working for Active Directory...
HiI have a site using Windows authentication, and I am wanting to limit access to the site by Active Directory user groups. My problem is that my user groups don't appear to work on our live server,...
View ArticleSecurity best-practice question - Security audit
I'd been lucky for a while, but yesterday one of the web sites I support was hacked. I use a hosting service for that web, and I thought I had all security bases covered but somehow a hacker placed a...
View ArticleRedirect users to home page after logout
Hi guys, I want users to be redirected to default.aspx after they log out. For certain reasons I did not use the ASP.NET login controls and did not use the FormsAuthentication.RedirectFromLoginPage to...
View ArticleError - copying file from one server domain to another server domain
i am getting problem in file copying from one server to another server domain in ASP.NET.server name 1 : testserver1Domain name : testserver name 2 : testserver2domain name : testnet.see my code...
View ArticleHttpContext.Current.User.Identity.IsAutheticated always returns false
Hi guys. I have ab bit of a problem here. I'm authenticating my users by creating cookies and that seems to be working perfectly (users are logged in properly), but in my code, all...
View ArticleUsers are validated but not authenticated
Guys, I just can't understand this. Users are validated and logged in but they are not authenticated. Membership.ValidateUser() passes but when I check User.Identity.IsAuthenticated, it always returns...
View ArticleCustom Role Provider
Hi Team,I am working on an intranet where I implemented a custom role provider to handle all security management for our applications. An example would be I have 5 different web applications that...
View ArticleWierd URL
I'm not sure if this is the right place to post this but maybe someone can point me in the write direction?I have a membership site using the asp.net membership provider SQL server backend. It's been...
View Article