Security :: A Number Of Events Being Logged On Windows Server?
Apr 30, 2010
I've noticed a number of events being logged on our Windows server, coming from an Asp.net application. I wouldn't know where to begin troubleshooting this problem, but the basics are this:
- Windows Server 2003 Standard Edition (NLB)
- Asp.net 3.5 App
- Oracle 10g DB
Event ID: 1309
Event code: 3005
Event message: An unhandled exception has occurred.
Exception information:
Exception type: CryptographicException
Exception message: Padding is invalid and cannot be removed.
The second last line here is why I posted in the security forum. The page that it's coming from is webresource.axd
i have a website which has 3 modules admin part,employee part and customer part . so when the admin login he has to see the number of customers logged in and the duration etc excluding employee and admin
i made an upgrade to an existing application (still developed by me), while testing on my development machine, everything worked fine. After migrating to a Test Server(windows 2003 server), users can not test the application, it periodically crashes their session and redirected them to the login page (Forms Authentication). No error is generated and no entry is logged in the windows event veiwer on the server. I also noticed this also happens when they try to access a particular page in the application.
The page contains 50 instance of a user-control. Each of the user-control contains 8 textboxes, 2 labels,1 hidden field and 12 asp.net validation controls. I tried saving a copy of this page from Internet explorer (IE8) on my development machine,its about 2.2MB in size.What may be wrong and what tracing tools can i use on my development machine (since it generates no errors). How can i also reduce the size of the page (noting that the asp.net validation controls generated alot of HTML codes)
I'm building a web application: some pages will be accessible by non logged-in users (demo and sign-up pages) and others will only be accessible by logged-in users (actual application). In the global.asax file, I'm currently handling the session start event by loading some variable from a query that's based on the UserID. What will happen when a non-logged in user looks at a page? I guess my question is really about how to handle the session start event when it's a logged-in user, when it's not and when a user logs in. I want a certain number of queries to run only once per session, after the user logged in.
I want to know what the members who are online at my site and I can identify them.Do you have an article that identifies registered online users like your site.
Hi, I want to show the sequence number for the exception (from sequence number column in ELMAH_Error table) , not the GUID to the user whenever an error occurs. is this possible? I found this post Problem passing ELMAH log id to Custom Error page in ASP.NET, but it gives the GUID, I would like to know how I can access the sequence number in Logged event of ELMAH component?
In our application, we store the most number of users online. We do this by tracking what page each user is on currently and upon login, delete users who have been inactive for X minutes and then take a count of the users online, overwriting the most number online if this is higher.
How can we change this to track the number of users online over a time period, so we can look at a line graph of the number of users online. I guess we'll need a cron to run every 1/2/5/10/20/30/60 minutes to track the number online? Then how would be store this data, the table would get very large. I would think the likes of Statcounter/Analytics would have a better way of storing this data.
I added a Input (Text) control in my web form and turned it into an HTML server control so its an instance of HtmlInputText class.
If I double click on the control It only adds a OnClick event handler method inside the script tags in the HTML doc of the web form but how to I get to handle its Serverchange event exactly? does VS.net 2008 has no ability to auto wire up the event to the control, do I have to manually wire up the event handler?
i published an application on windows server 2008 and IIS 7 i am facing a problem when user are trying to access the server or the web application in address they put ip address of the server /application a pop up screen asking for username and password problem IIS on windows server 2008 ..the server is configured it s making me crazy it s asking users for username and password
We are using membership provider for LDAP authentication. It is working as it should.
But what all configuration settings I have to do so that all the future requests to this application run under the security context of the Logged in user account not through the some default user set in IIS.
We need to have this working because all the permissions on the database are based on the logged in user.
We are using form authentication for LDAP authentication. And having impersonation = true in web.config.
i used security in login page which restricts all users who have not logged in to all pages. I need to restrict specific users to specific pages. I'm not using AspSqlService provider. So i cannot create roles and restrict automatically. And the pictures i use in login page are not visible @ runtime.
When writing up a codebehind in Visual Studio for ASP.NET web forms applications, I often use the dropdowns at the top of the window to autogenerate page event handlers (e.g. Page_Load, Page_PreRender). I've noticed that sometimes Visual Studio likes to add numbers to these function names like "Page_Load1" or "Page_PreRender2".
An asp panel contains only 6 events. if they provide a visibilechanged event it may very useful for me. if it is in windows application ,how easy it is.I dont know why thy are not providing all these.This is same as in the case of gridView, button ,etc. just think , I have an Iframe in an asp panel and two buttons. In first time it is invisible .Buttons named first and second respectively. Two another pages One.aspx,two.aspx. These two pages contains each text box. When you click on the First button . I want to set the Iframe src="One.aspx" and display "first" in the textbox on One.aspx. as same in the case , when user clicks Second button. How to do this ?
we are migrating existing windows form application to asp.net(3.5) intranet portal, there is a requirement whereby database connection should be made by the logged in windows user. Is it possible to achieve this functionality?
I have a web app, can upload images when running it on the local development machine, but when runnign it on WebServer 2008, it gives me an error saying "access is denied". I konw it is something to do with security, but how do I make it such that an internet user can have acces to it. The folder is located in: c:inetpubsiteimages494
I have a requirement I should connect to MS SQL server under IIS Application pool account from ASP.NET application where Windows Authentication is enabled. I cannot use user name and password in connection string.
ASP.NET application should use Entity Framework 4.0 to work with data.
I have an ASP.NET application that was working fine on my server up until last night when I installed a bunch of windows updates, now it's throwing this exception : System.Security.SecurityException: Requested registry access is not allowed.Unfortunately there is some things that makes this hard to debug. I added the debug="true" attribute to the web.config file to get the line where the exception is lauched. The line identified in my code is an End If and the code just before seems benign :
