Security :: Accessing Reporting Application From External Network?
Dec 7, 2010
We have an issue with an internal application, where accessing it from LAN (private n/w) works fine, while access from external n/w throws up erratic behavior.
The Current System :
an aspx page (asp version 1.0) hosted on the IIS server (6.1). The front end is a vb form that connects to a sql 2000 database.
Users' credentials authorized using NTLM security.
Access from an external n/w - a reverse proxy configured with an ISA server 2006 to authenticate credentials.
Domain Controller - Windows Server 2008 R2 x64
The issue when accessed from external n/w :
everytime an entry from a drop-down is selected from an Ajax enabled control, instead of the fields populating, the page gets refreshed and the content of the box are cleared.
Also, clicking on other items that normally hyperlink to other pages, results in nothing happening.
Upon investigation, we realized that :
Everytime it fails, a string - "&AuthResend" followed by an alpha numeric string is attached, which attempts to authenticate the user's credentials everytime a request is made to the server.
ISA error logs yielded the following error msg :
"12210 Internet Server API ( ISAPI ) has finished handling the request. Contact your system administrator. "
This behavior is inconsistent except when accessed from Google Chrome, where it fails each time.
We have applied all the recommended hot fixes from Microsoft's KB pages.
My ASP.NET MVC 2 application runs under built-in local NETWORK SERVICE account. I want to set up access permissions for the folder which resides in another computer, but in the same domain. I located that folder right-clicked to open its properties form, clicked to Security tab and pressed Add button which displayed Add user form with correct domain name in the location field. I referred to the account with following syntax:
<domain name><server name>$
because I learned that NETWORK SERVICE account uses machine account when connected to other computers in the domain. However, the system couldn't find the account, so refuses to add the account. Without the domain name it adds a user, but that user seems to be local user, not web server's NETWORK SERVICE account. What am I doing wrong?
By the way, the above syntax worked when I created login for the sql server which is different computer from the web server.
A month ago I got everything working but now my code has changed and my server may have been misconfigured.
Basically, I'm running IIS 6.0 and Win2k 2003. The webserver will map a network path UNC share at: //wave/test
Also, I have webconfig set up to do: impersonate = true (no username/password defined)
the path //wave/test is another computer that runs Windows XP. Wave is the computer name, test is the folder name. So C: est is the folder to access. The current permissions under C: est on the file server is: Administrator, IUSR_WEB (read-only) and "Wave_user" (read-only)
Back in WinServer 2003, i've added a virtual directory and mapped to \wave est and applied a local username/password for Wave_user. I am able to see/browse all the files in IIS 6.0 and see the files/folders. I call the virtual directory alias: "Waves". Inside Authentication method for this virtual directory, i applied Wave_user and the local password of the local file-server PC , and checked enable anonymous access w/ integrated windows authentication.
Also, back in virtual directory, I set "Connect As" to wave est as username and password as the local password.
When I access the webapplication, using my current local PC credential, and try to access the network share, which in C# is the command: server.mappath@("wave"... i get a Server Error 401. in the browser.
i developed an asp.net(2.0) applicaions which contains the attachments of the clients . these attachments are saved in the shared folder and retrive the file when the user requests.if i maintain the application and the shared folders in the same system it will work properly.if i maintain the application in one server and the file folder in the other server i face a lot of security issus like1.Access Denied2.Couldnot find the part of the path......for this i made an common account for the application server and the file server and also set impersonation to true.Even the i got the couldnot find the part of the path error.i already gave the everyone with full control to the shared folder and i added the common account and gave it to full controlIs there is any alternate for the save and retrive the files to and from the shared folder.
i would like to be able to do is to, lets say i have 10 users running a web application , how can i get the names of all these users. There names , logon times and any other info availabel.
i would like to get this data into a dataset and just bind to a gridview .
i am building a web application and i want to access a textbox which is on the index page from the login page. basically what i did is this. i programmatically created my registration form for new users and also login for registered users, now i want to display on the index page the name of the logged on user on the index as the page loads.
I have developed An Inventory Management System in ASP.Net . The application is hosted now ... From manager to data entry operator every1 z having seperate login , roles and limitation to access website ... From Our office every1 is accessing the application and working on it. My question is even they can access the apllication from public PC (Browseing Center) ?? coz they knew the password. Am i rite. Now, I need to restrict my application access in public PC (Browseing Center)? Can i limit accessing of my website application only in office not in public PC (Browseing Center)? can i allow certain IP to access my website application?
I've got a webapplication and inside this webapplication I have a webservice. An external program is going to use this webservice in the future, but for now that is not the problem. this webservice is also called from inside the webapplication. this is where the problem starts.
I keep getting this error:
The remote server returned an error: (401) Unauthorized.
I tried with imporsonate= true, but it didn't work
[Code]....
the webservice is called like this:
[Code]....
I hope some one can point me into the right direction.
While running an app from the server where it is deployed the website works fine, however when trying to access it from a different machine(placed in same network), using the same credentials, it shows that I am not an authenticated user.
I want to make use of Word and PDF export feature of SSRS in my .net Application.In my webpage i have a dataset with all the required data, now i want to call report viewer API and pass it to the report and generate the report and get the PDF output.I can query directly in my report, but its a complex query and i already have that data on my page. Now i just want to fill a tablix and generate the report.
I developed an ASP.net 1.1 web application that is written in VS2203 and I am using Reporting Services 2005 to render some reports in PDF Format. My problem was it is working fine in local (XP) and Production environment (Windows 2003 Server).fromo long back the solution was not working for my integration Server which has windows 2003 Server (1.1) and we installed the 2.0,3.5 frameworks. It is throwing an Object refernce error while render the report. Is there any permisions or something missing.
I am having an issue where if I click on the print icon in the report viewer embedded in an application, I get the error "unable to load client print control". However, when running through report manager, this is fine. I am running SQL Server 2005 SP3 and report viewer 9.
I m using SQl server 2005 reporting..I have used two datasets for a report.
In one dataset i m passing a parameter and i want to pass that parameter to another dataset.So that i dnt need two paramerters when i preview the report.
I am maintainign a ASP.NET app. Some of users action are pretty slow; one of my colleagues claim it is caused by network bandwidth as some used dll will connect over to internet to get data.
How could I verify it's really due to network issue? Any tools can peer the network connection during the process?
I need to be able to pull some values from a ReportViewer running an SSRS report. Specifically, I need the name of the report and the parameter(s) fed into it. I have looked at the ReportParameterInfo class as well as its members and methods, but I can not get this to work. Has anyone done this before or have a general idea on where to start?
i m making an web application dat keeps a track of the computers on a network..i.e..who is using wich pc for internet...in dis..for ny person who wants to use internet has to first login into my apllication den he/she can use internet..so i want dat..my should run every time ny browser is opend..so he/she has to first login..and he can't use internet without logging in..and wen its logged in..den the browser is opened with its home page.
i've created my reports and deployed in my system.. i.e
http://localhost:8080/rpt which are working fine.. (" i.e in XP prof SP3")
now i've developed an application in different system which windows server2008
in that i'm using reportviewer now.. what i want is when i run the project in
windows server the reports display from my system.. i.e my url http://myip:8080/rpt
error msg("enable to connect remotely")
i've tried by giving my [URL] in another system .. but it will ask username and password i've tried giving my system and password .. and also the system name and passward where i'm trying to execute.. the error is displayed
("An application error occurred on the server. The current custom error settings for this application prevent the details of the application error from being viewed remotely (for security reasons). It could, however, be viewed by browsers running on the local server machine.")
We've deployed some reports from a server machine which can be accessed without any problems if you are logged onto the server itself by going to the URL of http://servername/ReportServer. However if we try and access the reports from a client machine (even if we use the same administrator Windows account) we get the Windows security window appear asking for a Username and Password to be entered in order to connect to the server. We've tried entering this but we then just get a blank screen after being re prompted a few times to enter the details.
Now I'm not sure whether this will be a Reporting Services or a Windows issue. Could it be a setting within IIS? It can't really be a user thing as the same user works on the server but not on the Client machine so it's more of a machine problem. It's as if there are some authentication settings somewhere that need to be set.
I have installed Reporting service 2008 on windows server 2008 which is in domain.In report manager i have created domain user and given browser role. when the specified user access http://10.20../reportsit authenticated without promting login credentials.the User is also in domian.when the another user which is not added in report manager only getting Home screen.I want authentication propmt to be shown when user access report manager.
We have ported an existing ASP app to ASP.NET and are now having problems printing from the server to network printers, e.g. to\hereprintername.
This used to work with our ASP app, and printing to server-locally installed printers still works.
I suspect that there is some security or Group Policy object that must be changed to allow printing from an ASP.NET web application to a network printer?
Or perhaps, accessing Active Directory from an ASP.NET application is a problem?
I have a few computers (with Vista Business OS) connected in a private network. A C#.NET application running on one computer is currently able to access the network shared folders without problems. However, I am trying to get an ASP.NET application on that computer to access the same folders but I am getting "Access denied" errors. I added NETWORK SERVICE to all the shared folders' security (with full control) but it still gives the same errors.
