Configuration :: Encrypting The Connection String In Web.config On Windows Server 2008
Mar 30, 2010
When I try to encrypt the "connectionStrings" section in the web.config file of my asp.net web application on Windows Server 2008, I'm getting the following error:
Administration utility (2.0.50727) to install and uninstall ASP.NET on the local machine. Copyright (c) Microsoft Corporation. All rights reserved. Note: This utility has limited capabilities on the Windows Vista operating system. It is recommended that you use the "Turn on or off Windows features" option of the "Programs" component of Control Panel to install or remove ASP.NET. It is also recommended that you use the IIS Manager component or the Appcmd.exe tool to configure ASP.NET applications.
The above information is followed by the list of valid options to aspnet_regiis.exe.
The command that I've used is:
aspnet_regiis.exe -pef "connectionStrings" "C:Usersuser1DocumentsMywebsite" -prov "DataProtectionConfigurationProvider"
But, the same command is working fine when used on a Windows Server 2003 machine. The problem is occurring only on Windows Server 2008 with IIS7.
View 1 Replies
Similar Messages:
Sep 23, 2010
Is aspnet_regiis.exe secure? If i encrypt using aspnet_regiis.exe, will it automatically decrypt the string and wont give any error? Need an insight into this stuff.... Is Rsa the best option or wat? Wat's the best way to encrypt/decrypt programmatically?
View 10 Replies
May 27, 2010
My problem is that I'm going to have a SQL Server database and website that accesses that database via a hosting provider, most likely GoDaddy.com, using ASP.Net. I need to make sure the connection string in the web.config file is as secure as possible, because the database will actually be storing trivia questions for a game I'm developing, and the clients will be accessing these questions, saving specific state related details, and other details, to the database, so every player that plays the game will have their details stored in this database. I need to ensure hacking is very difficult to accomplish.
From my research it appears as though the only viable solution for your web.config when you've got a hosting account with something like GoDaddy.com is to use SQL Server security to connect to your SQL Server database and place those details in the web.config file. Is this correct? It seems that this is the most likely scenario for most users, because we don't have access to our hosting providers IIS servers in order to use Windows authentication with SQL Server access and then use DPAPI encryption from there.
View 2 Replies
Mar 8, 2010
I've installed IIS for Windows Server 2008 SP2 and Windows 7. In both instances, I can't get even the simplest of ASP.net scripts to work (note: I'm ftping the published files from Visual Web Dev 2008 Express on XP):
------------------------------------LOCAL MESSAGE---------------------------------------------
Configuration Error
Description: An error occurred during the processing of a configuration file required to service this request. Please review the specific error details below and modify your configuration file appropriately.
Parser Error Message: It is an error to use a section registered as allowDefinition='MachineToApplication' beyond application level. This error can be caused by a virtual directory not being configured as an application in IIS.
Source Error
[Code]....
Line 36: ASP.NET to identify an incoming user.Line 37: -->Line 38:
<authentication mode="Windows"/>Line 39: <!--Line 40: The <customErrors> section enables configuration
Source File: C:inetpubwwwroot estweb.config Line: 38
------------------------------------REMOTE MESSAGE-------------------------------------------
Runtime Error
Description: An application error occurred on the server. The current custom error settings for this application prevent the details of the application error from being viewed remotely (for security reasons). It could, however, be viewed by browsers running on the local server machine.
Details: To enable the details of this specific error message to be viewable on remote machines, please create a
<customErrors> tag within a "web.config" configuration file
located in the root directory of the current web application. This
<customErrors> tag should then have its "mode" attribute set to
"Off".
[Code]....
<!-- Web.Config Configuration File --><configuration> <system.web> <customErrors mode="Off"/> </system.web></configuration>
Notes: The current error page you are seeing can be replaced by a custom error page by modifying the "defaultRedirect" attribute of the application's <customErrors> configuration tag to point to a custom error page URL.
[Code]....
<!-- Web.Config Configuration File --><configuration> <system.web> <customErrors mode="RemoteOnly" defaultRedirect="mycustompage.htm"/> </system.web></configuration>
Can anyone tell me what I'm doing wrong here in the web.config file? This is killing me.
View 5 Replies
Mar 8, 2011
I have a new server that I am attempting to deply my very first asp.net website on. I have installed SQL 2008 r2 and loaded my DB on it. I am able to access the server/DB through Visual Stuidio. At least I know i can call it from the webserver to my local PC.
For some reason I just cant get my we.config's connection strong right. It might even be the <provider> info that I have wrong. I am just too inexperienced to know for sure. My Web.Config is very short so I will post all of it here.
-- Code is posted at the end --
How do I modify my local project to use my webservers DB instead of the standard SQL Express DB? The only connection string
Machine.Config that points to the sqlexpress database. Again I lack the experience to know how to do this. I am using Visual Studio 2010 and SQL Server 2008 r2 on my local pc.
[Code]....
View 3 Replies
May 3, 2010
I have deploy my web site, it contains a project!
in MyWeb there are all the aspx page and some entites datamodel, in MyApp there are the class with function like "getter data from DB" and there is a entity data model.
afeter the deploy, I have only the web.config and the connection string for the entity datamodel....itīs run ok, read/write the data on the DB.
The problem is with MyApp.....after the deploy it is a dll file and I donīt have the app.config and the entity inside it donīt run, not read/write nothing on the DB.
There arenīt error or messager but not read/write the data in the MyApp project.
all run on the iis 7
now...the question is:
I lose the connection string (in app.config) after the deploy?
Can I put a entity in the MyWeb and read it in another project (myApp)?
ps: for connect to DB I use not the c# code:
var db=from x in AccessDB.Example select x;
View 1 Replies
Aug 14, 2010
How to put an OleDB Connection String in Web.Config I wrote the following code but getting error
Code:
<appSettings>
<add key="ConnectionString"
value="Provider=Microsoft.Jet.OLEDB.4.0;Data Source=" & Server.MapPath("~/App_Data/AMS.MDB")" />
</appSettings>
Getting error while concatenating a string Data Source=" & Server.MapPath
View 4 Replies
Jun 16, 2010
Can you use a session variable in a web config connection string? So instead of:
Code:
<add name="ConnectionString2" connectionString="Data Source=ora;Persist Security Info=True;User ID=SA;Password=PASS;Unicode=True"
something like this:
Code:
<add name="ConnectionString2" connectionString="Data Source=" & Session(DB) & ";Persist Security Info=True;User ID=SPAR;Password=;Unicode=True"
View 6 Replies
Oct 19, 2010
I have been preparing for a conversion of an old application to an ASP.NET webapplication at beginning of the year. Generally, the development version of the webapp will also be the webapp that goes into production. We here make "clones" of the database server, assign new name, etc, which is then used for development, training, and so on without any threat of changing data on the real db (sql server 2005). I know it is possible to have more then one connection string in the web.config. My question centers around if there is a simple method for allow multiple connection strings and pick the one that is to be used for dev, production, training, and so on? I originally thought about constructing some type of admin form that the connection string can be selected from.
View 2 Replies
Dec 15, 2010
I have an app that is a bit old and will eventiall be rewritten but until I get the time it needs to continue to be patched. THe app is desgined broken into three layers (Web, DAL, BLL) The web site uses the DAL.DLL and BLL.DLL and the Website has some dataaccess and the sonnection string is saved in the web.config. For the DAL it is stored in the app.settings. Is there a way for the DAL to use the connection string that is stored in the Web.config even thought it is in DLL for the production site?
View 2 Replies
Feb 3, 2011
I have this in the web config file <connectionstrings> section. Why is there an add and then remove and then again an add...what is it trying to accomplish here? and in the second code section, I use that string in a sqldatasource control. Second question: Can I just use the name attribute value "localsqlserver" form web config file, in place of the connection string in the data source? is it why that attribute is for?
[Code]....
View 2 Replies
Jan 21, 2011
I would like to use both of the connection strings in the same web.config file how can I do this I tried this yesterday it worked I called it a night, then this morning I got this. The error being on line: 10 Parser Error Message: The entry 'ApplicationServices' has already been added.
Line 8: <add name="ApplicationServices"
Line 9: connectionString="Data Source=Mysource;Initial Catalog=travelatlantic;User ID=MyID; Password=MyPassword;" />
Line 10: <add name="ApplicationServices"
Line 11: connectionString="Data Source=MySource;Initial Catalog=travelatlantic2;User ID=Myid; Password=MyPassword;" />
Line 12: </connectionStrings>
View 8 Replies
Jun 19, 2010
My requirement is to save the connection string of database that will be provided to be me by user on form, which can be modified lator.
i need to know how and where i should store the connection string permanently which will be used lator to connect to database.
View 1 Replies
Jul 30, 2010
I have written the web.config for same server without username and server and its working.
but not been able to provide the username and password in web.config file.
Following is my web.config for Server:
[Code]....
I have to write another web.config for client application with username and passoword. how could i use it.
server name is "BM", User is "Sa" and Password is "abc"
View 11 Replies
Jul 15, 2010
I have three connection strings in my web config file one for developement db, test db, and production db.
Currently I have all three defined and using the same name and I comment out the connection out the
inappropriate strings.
So in my code I use the connection string like so:
WebConfigurationManager.ConnectionStrings(
"A_DevConnectionString").ConnectionString
and in my Web.config I have three conn strings :
a_devConnectinoString
a_testConnectionString
a_prodConnectionString.
Can the connectionstring be selected dynamically through the web.config ?
View 1 Replies
Nov 14, 2010
I have a Windows Service I have developed in Visual Studio 2005 (C#).
It accesses a database using a connection string in machine.config.
On my Windows XP Pro 32bit (SP3) machine, it works correctly.
On my new Windows 7 Pro 64bit machine, it throws "object not set to an instance of an object" when it gets to the line where it's trying use the connection string.
This is the 'object' which is not set in Windows 7:
ConfigurationManager.ConnectionStrings["MyDatabase"].ConnectionString
The machine.config has the same connection string set up on both machines.
A .Net 2 website transferred to the Windows 7 machine has no problem accessing the same connection string.
I have tried a bunch of different permissions on the machine.config and its containing folders, and setting the service to log in as Admin, but I don't know exactly what permissions are required.
View 1 Replies
Mar 28, 2010
I have a database on Go Daddy and my VS2008 app can not access it via web.config connection string. Of course runs great locally in development. I copy/pasted the connection string information from Go Daddy exactly into my web.config file. Web site runs fine on the web but when I try to Login at my login page, i get :The SSE Provider did not find the database file specified in the connection string. At the configured trust level (below High trust level), the SSE provider can not automatically create the database file.
I used VS2008 to create the .sql script files and uploaded them to Go Daddy and the Go Daddy people say everything works as they and I can both Login to the database from within GoDaddy.The database i am trying to access consists of the a ASPNETDB.mdf and another Database.mdf together as one in the Go Daddy database.
here is what i used: <connectionStrings><add
name="superskin"
connectionString="Data
[code]...
View 3 Replies
Mar 12, 2010
I want to encrypt web.config connection string. But Getting Error
System.Security.Cryptography.CryptographicException: Object already exists.
why is this happening. How to tackle with this problem.
View 1 Replies
Sep 1, 2010
give me an example of the proper connection string for getting VS 2010 to use the aspnet database on my SQL 2008 server? The db is there, I just can't seem to get connected. Server name GUNSITESQL, mixed security. I want to logon with a SQL user logon id, the db name is the default aspnet.
Currently, the web.config file is the default.
View 2 Replies
Apr 2, 2010
I've ran into a weird issue when ever I deploy to my winhost account and try to login using membership provider it works fine locally but once it's on the intarnets it breaks. Configuration Error Description: An error occurred during the processing of a configuration file require to service this request. Please review the specific error details below and modify your configuration file appropriately. Parser Error Message: The connection name 'LocalSqlServer' was not found in the applications configuration or the connection string is empty.
Source Error:
Source File: machine.config Line: 148
<membership defaultProvider="SqlProvider">
<providers>
<clear/>
<add name="SqlProvider"
connectionStringName="winhost"
enablePasswordRetrieval="false"
enablePasswordReset="true"
requiresQuestionAndAnswer="false"
passwordFormat="Hashed"
applicationName="TestAdmin"
minRequiredNonalphanumericCharacters="0"
minRequiredPasswordLength="2"
type="System.Web.Security.SqlMembershipProvider" />
</providers>
</membership>
<authentication mode="Forms"/>
<roleManager enabled="true">
<providers>
<clear/>
<add name="AspNetSqlRoleProvider"
type="System.Web.Security.SqlRoleProvider, System.Web, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a"
connectionStringName="winhost"
applicationName="TestAdmin"/>
</providers>
</roleManager>
It is as if I have referenced 'LocalSqlServer' somewhere in my app.config but I haven't here is my providers:
View 1 Replies
Aug 26, 2010
I am getting the error "An error occurred loading a configuration file: Access to the path is denied."
When I am in VS 2010, I can Encrypt as long as I run as administrator. Code as follows:
[Code]....
My problem is I need to run this in IIS. What is stopping me? It's a permission problem, but what permission. I am running IIS 7.5 on Windows 7. This is happening on my production server as well. Same error.
View 1 Replies
Feb 2, 2011
I have a db connection string 'ApplicationServices' defined in the connectionString section of web.config and 3 Entity Framework connection strings which have the provider connection string attribute with the same connection string as the one in 'ApplicationServices'. Is there a way to reference connectionString in 'ApplicationServices' for the provider connection string attribute of the EF connection string in the web.config, rather than providing the connection string all over again?
View 1 Replies
Nov 3, 2010
I ahve a solution with a few dll projects, a winforms testbed and a WCF webservice project. In the data project, I have a base class that does the following:
public class BaseDAO
{
private const string CONNECTION_NAME = "OracleConnectionString";
protected static string GetConnectionString()
{
ConnectionStringSettingsCollection settings =
ConfigurationManager.ConnectionStrings;
string conStr = "";
if (settings != null)
{
foreach(ConnectionStringSettings setting in settings)
{
if (setting.Name == CONNECTION_NAME)
{
conStr = setting.ConnectionString;
}
}
return conStr;
}
else
{
throw new NotImplementedException("The connction string can't be found");
}
}
You might ask, why do I need to loop and check the name against a constant? Well, I have defined the connection string in the service project's web.config, but this above code always find two connection strings, one is a sqlexpress which I guess is a default database of some sort. So, to separate that one against the one I really use, I have to loop through all entries and pick out the one I plan to use. How do I prevent this? Is there a better way to fetch the connection string from the data project?
View 3 Replies
Aug 6, 2010
I am having trouble connecting to a ms sql database on the server. The hosting company said that the .sql file was imported successfully, but when I try to use the 'login' or 'create account' features im getting an error page saying:
Failed to generate a user instance of SQL Server due to failure in retrieving the user's local application data path. make sure the user has a local user profile on the computer. The connection will be closed.
I am sure all the connection info is correct so it is really frustrating trying to work the problem. I have listed the connection string in my web.config file to see if anyone can see anything wrong with it.
View 4 Replies
Sep 23, 2010
If I encrypt something in my config file using aspnet_regiis.exe -pef "appsettings" "path" which i think will use my logged in id's credentials. If i deploy this application on some other machine where some other user id is used to login. Will there be any issues or .......?
View 1 Replies
