and I see it created in "C:Documents and SettingsAll UsersApplication DataMicrosoftCryptoRSAMachineKeys".
Now I am trying to add access privileges with the second one:
"c:WINDOWSMicrosoft.NETFrameworkv2.0.50727aspnet_regiis.exe" -pa NetFrameworkConfigurationKey "XXX" Adding ACL for access to the RSA Key container... The RSA key container was not found. Failed!
My web.comfig file in the webserver is encrypted . I want to do a change to the config file. While I'm trying to decrypt from the command prompt on the server using following command. "aspnet_regiis -pd "appSettings" -app "/AppName" I endup with the following error message. Failed to decrypt using provider 'CustomProvider'. Error message from the provider: The RSA key container could not be opened. The RSA key container could not be opened. Failed! The same command has been working in other environments except in my servers. Also I'm using web forms and I tried the same in both the servers. I have gone through all websites but no use.
Adding ACL for access to the RSA Key container. The RSA key container was not found. Failed! I am getting this when I run the debug:
Server Error in '/' Application. Configuration Error
Description: An error occurred during the processing of a configuration file required to service this request. Please review the specific error details below and modify your configuration file appropriately.
Parser Error Message: Failed to decrypt using provider 'CompanyDirectoryRsaProvider'. Error message from the provider: The RSA key container could not be opened.
Source Error:
[Code]....
Source File: C:ProjectsSystemInformationSystemInformationweb.config Line: 21 Version Information: Microsoft .NET Framework Version:2.0.50727.3607; ASP.NET Version:2.0.50727.3082
And, last but not least, I did copy all the MachineKeys over into my MachineKey directory as well, with one explicitly saying CompanyDirectoryKeyProvider in it. What I am doing wrong and what do I need to do to correct this?
1) I want to create a rsa key in c# and export the container. I am having difficulty. I create container like this:
[Code]....
The msdn example says I can export the container with this syntax: aspnet_regiis -pa "XML_ENC_RSA_KEY" "NT AUTHORITYNETWORK SERVICE". This does not work on my XP Host PC. I belive this is applicable for Windows 2003 Server. So what is the correct syntax for exporting rsa key container from XP host?
2) To get aspnet_regiis.exe path I did something like this:
[Code]....
But this path may be different for each host, based on the .NET verison installation. Is there a way to get the aspnet_regiis.exe path from registry or a environment varaible?
3) Once I get the path to aspnet_regiis.exe I want to invokve it from c# like this.Is this code correct?
i created a user control that has a template container.
[code]....
This is control is placed in a repeater which lists some customers. The customer is than bound to the user control. When the name template is instantiated in the container, the customer object is not yet available, but I need to access its name because it needs to get parsed before.
[code]....
Question: How can I access properties set for the user control BEFORE the template container is instantiated?
When trying to open a page I am getting this error: Failed to decrypt using provider 'RsaProtectedConfigurationProvider'. Error message from the provider: The RSA key container could not be opened. I did some reading and it seems that this command woudl fix it:
from here [URL] aspnet_regiis -pa "NetFrameworkConfigurationKey" "ASPNET"
Adding ACL for access to the RSA Key container. The RSA key container was not found. failed . Now, I don't really understand all of this stuff (my boss just said: Heres the problem, fix it).
I trying dotnetzip on localhost everything works fine.but on a real dotnet hosting it raises error :
Access to the path 'C:inetpubvhostslahblah.comsubdomains aporhttpdocsDotNetZip-luqevaxu.tmp' is denied. using (ZipFile zip = new ZipFile(Server.MapPath("~")+"/a.zip")) { zip.AddFile(Server.MapPath("~")+"/deneme.txt"); zip.Save(); }
I'm writing a simple Intranet application using windows authentication. I want to restrict access to Safe/UCantSeeMe.aspx. I am aware of the AuthorizeAttribute, but this only works on methods. I also found a good post on doing this with the MVC pattern, but I'm not using MVC. This can be done with roles in forms based security. I read on MSDN that using windows based security means roles are based on groups, but it doesn't go into any detail. how can I restrict access to Safe/UCantSeeMe.aspx?
I have implemented role based security in my asp.net 2.0 vb.net application using windows authentication and the windowstokenroleprovider and limiting access to certain pages using the location tag to specific active directory groups.
The issue is that when a user tries to access a page they are not authorized to view it brings up a login prompt and when it does not pass it takes them to the default page that tells them they are not authorized to view the page. I am wondering if there is a way to throw up a custom page that tells them they are not athorized to view the page that I can incorporate into the site itself with the header and so forth? if this page could come up in lieu of the sign in box popping up as well.
I need to implement Code Access Security, and URL based security using the roles & types...
For instance, the (Subscriber/Basic) would need to view a different set of pages, and have different access to things then a (Subscriber/Business).
I think I can handle the Code Access security with a custom attribute, but I am unsure to how enforce a User be apart of 2 roles in the URL Authorization.
I am currently using the web.config to deny/allow access to the directories/pages.
e.g.
/Areas/Admin/web.config
[Code]....
Is it possible to force the user to be apart of 2 roles with this technique?
i developed an asp.net(2.0) applicaions which contains the attachments of the clients . these attachments are saved in the shared folder and retrive the file when the user requests.if i maintain the application and the shared folders in the same system it will work properly.if i maintain the application in one server and the file folder in the other server i face a lot of security issus like1.Access Denied2.Couldnot find the part of the path......for this i made an common account for the application server and the file server and also set impersonation to true.Even the i got the couldnot find the part of the path error.i already gave the everyone with full control to the shared folder and i added the common account and gave it to full controlIs there is any alternate for the save and retrive the files to and from the shared folder.
i am working in asp.net and csharp, we have 10 user, but certain user only need to put dataentry. how to enable and disable based on the user to access certain form ,like add, modify view options.
I have a shared folder with directories on a remote server that I am trying to access with the method System.IO.Directory.GetDirectories(). This folder is based off of the credentials gotten from windows authentication. My problem is that everything works fun when I debug the Web Application in the built in IIS in VS, but when I set it up in IIS V5.1, it tells me that I have an invalid username and password. I am using Visual Studio 2005 on a Microsoft XP SP2 machine.
I have built an online CMS that is forms authenticated. The CMS allows administrators to upload files to the website. These files are stored outside of the Forms Authenticated section of the site so that they can be accessed from another site I have built. This other site is also forms authenticated, so users must log in and then they can access the files on the CMS site. site1.com: CMS for administrators only. Site stores all the files. site2.com: Access site.
My second website (The access site), is basically an empty shell that is filled with all of its content through the CMS using an SQL database and then displayed on the page. This works fine as only authenticated users have access to the interface used to view and download the files. My problem was, even though there is no public interface to find the files, someone could surely type [URL] and the video would be available to them. I dont really know what to do here, is there any way that people could be blocked from retrieving the files like this?
i have an image (say abc.gif) that i would like to allow the user to "view" only if he is logged in to my system. Currently i am checking whether he is logged on to my system using session variables.
I have an application where in the User Authentication is from the AD useing Directory services.
If i type in the address of a valid page from the application into the Address Bar, it throws me to the Login Page.
However if i am logged in and i type in the address of a valid webpage, the application takes me to the page. Is there any way that this can be restricted.
If i type in the URL into the address bar the application should throw me to the Home page of the application.
I need to put windows authentication on a site (so when a user access the site they are prompted with a username/password box) but I need certain IP addresses to bypass this authentication.
I am trying to access a shared folder which is located on a different server rather than on the asp.net server.
I configured windows authentication and set impersonation to true. Also try with enable/disable basic authentication.
I have tried the following:
with a mapped driveshared folder access (\sharedfolder)virtual directory pointing to shared folder with pass through configuration. However none of the above works. I am getting "Access Denied" error when trying with shared folder and virtual directory. In the case of mapped drive getting "Not Found" error.
I need to restrict access to pages based on permission given to roles based user .Roles created dynamically so that i can't restrict thru the WEB config file .i am using the custom sitemap so menu is showns correctly based on roles , but if we enter direct url in address bar we can access that page although its not permitted for the user .is there any other way to redirect to common access restrict page .
