I face this problem when my client setting the LAN like this: the database server is in server A, the web application is in server B, and the windows login server control (is it what we call "windows domain"?) is in server C.
When I use windows authentication in the web application I built, it checked only the windows account in server B. How to authenticate with server C's windows account?
I have a requirement I should connect to MS SQL server under IIS Application pool account from ASP.NET application where Windows Authentication is enabled. I cannot use user name and password in connection string.
ASP.NET application should use Entity Framework 4.0 to work with data.
I want to get username and machine name of local computer logon to domain. So, how can I get it?My site has annonymous access checked in IIS. cause this application is for the Internet not our company's Intranet.for example, I logon to domain (test.com) in the local computer name is PC1, with the account and pass is: client1 and 1234567.I visit my website, now I want to get user and computer name to show up on asp.net.
View 1 RepliesIf I enable Anonymous in IIS under windows 2003, the ASP.NET will execute code under IUSR_XXX or account of application pool?
View 3 Repliesi have a problem with the users authentication on my site. I made <authentication mode="Windows"> in my web.config. The LoginView shows "mycomputermyusername" if i request the page. So far as well. Now i want to login with a different username. Users are stored in an Active Directory. My questions: wich setting i have to do, that user's account and password checked by Active Directory? how can i force the system to make a new login? Logout doesn't work, i always see my on account.
View 1 RepliesI just begin creating a website for an organization. First page to be displayed in the login page. I dont have any knowledge in ASP.NET Security. On Login page, i want to display UserName field as disabled with the useralias of the user who currently logged into Windows. Password user has to provide and it should be that user's windows password.
How do i validate that password that user has entered is his windows password?
I'm using ASP.NET MVC and I want to authenticate users with their Google or Facebook account
View 4 RepliesWe are coding an intranet site using .net DirectoryServices and AccountManagement to create a computer account in Active Directory with access rules allowing a specific user to add the computer to the domain. Has anyone had any success using the AccessRuleFactory method to set access rules? I'm stumped with a few aspects. So far, this is what we have...Using AccountManagement, we can easily add the computer:
[Code]....
Next we get the DirectoryEntry and ObjectSecurity for the computer. Also dim the ACE object:
[Code]....
Set the userAccountControl:
[Code]....
Here's where we're having problems:
[Code]....
The IdentityReference needs to be the trustee for the computer - how can we get this using AccountManagement and/or DirectoryServices?And I'm not sure what to use for the Inherited Object guid?
Here's the complete vbscript we're trying to convert:
[Code]....
Let me explain briefly how the app is being setup (by the previous architect).. I have the following app:
1) Server1
2) Server2
3) WPF app which installed on the client desktop
4) WCF app which hosted on IIS in Server1
5) SQL server instance which installed on Server2 (with internal IP addr 10.111.3.10)
WPF on client side calls the WCF service on Server1 and WCF on server1 accesses the database on Server2. The connection string on WCF web config (server1) looks like this:
<add name="App.ConnectionString" connectionString="Persist Security Info=False;Initial Catalog=customerDB;Data Source=10.111.3.10;Integrated Security=SSPI"/>.
There is a windows account (say winAcc1) on the Server2 which is currently dedicated as DBowner of customerDB.
Now the question is "How does the WCF on Server1 know to access the database with "winAcc1" windows account?" I have checked on web config or anywhere app and i could not find any impersonation or programmatically set the network credential to be "winAcc1".
I am able to get a token with Windows Live Delegate Authentication samples provided by Microsoft.
Now I want to access emails (New, Read, Unread etc) from live account. How can I achieve it with the help of Windows Live Delegate Authentication? Are there any examples for the same?
The Samples given by Microsoft are not related to emails.
I have a ASP.NET website which uses the standard ASP.NET Login Control for authenticating users. The user information is stored in a SQL Server database which is not accessible from client side. I want to write a standalone desktop windows form application which requires user to login with the same credential (username and password) used on the website. For the web-based form authentication, it's simple just to use the login control. Howerver, I have no idea for how to deal with the login for windows form application. My naive idea is to create a login web service which windows form application can utilize.
View 4 Replieshow to access remote computer windows service using asp.net
View 2 RepliesI have a fairly complex business application written in ASP.NET that is deployed on a hosted server. The site uses Forms Authentication, and there are about a dozen different roles defined. Employees and customers are both users of the application.
Now I have the requirement to develop a Windows Mobile client for the application that allows a very specialized set of tasks to be performed from a device, as opposed to a browser on a laptop. The client wants to increase productivity with this measure. Only employees will use this application.
I feel that it would make sense to re-use the security infrastructure that is already in place. The client does not need offline capability.
My thought is to deploy a set of web services to a folder of the existing site that only the new role "web service" has access to, and to use Forms Authentication (from a Windows Mobile 5/.Net 3.5 client).
I did see this question and I am aware of the limitations that Forms Authentication poses. Since security is not my primary motivator (I use SSL and can restrict access by IP address), but rather using existing user accounts and roles, my decision tree is somewhat different as well.
I wrote an asp.net application with default.aspx. When I hit this page It is asking me windows login popup window. My application should me windows authentication required but it should "Integrated Windows authentication". If I enter login password I am able to see my page. How can I automatically integrate this windows authentication? I added below code in web.config. still doesn't work.
<authentication mode="Windows"/>
<identity impersonate="false"/>
<authorization>
<deny users="?"/>
</authorization>
In my ASP.NET application, I need to be able to authenticate/authorise against local Windows users/groups (ie. not Active Directory) on a different machine, as well as be able to change the passwords of said remote local Windows accounts.
Yes, I know Active Directory is built for this sort of thing, but unfortunately the higher ups have decreed it needs to be done this way (so authentication against users in a database is out as well).
I've tried using DirectoryEntry and WinNT like so:
DirectoryEntry user = new DirectoryEntry(String.Format("WinNT://{0}/{1},User",
serverName, username), username, password, AuthenticationTypes.Secure)
but this results in an exception when you try to log in more than one user:
Multiple connections to a server or shared resource by the same user, using more than one user name, are not allowed. Disconnect all previous connections to the server or shared resource and try again.
I've tried making sure my DirectoryEntries are used inside a using block, so they're disposed properly, but this doesn't seem to fix the issue. Plus, even if that did work it is possible that two users could hit that line of code concurrently and therefore try to create multiple connections, so it would be fragile anyway.
Is there a better way to authenticate against local Windows accounts on a remote machine, authorise against their groups, and change their passwords?
I'm using IIS Express to host my website, and I would like to do something similar to Directory Security in IIS 6. In IIS 6, I was able to go to the Directory Security tab and allow the anonymous user to be a local windows account.
Is there something equivalent in IIS Express for that? What changes do I need to make in applicationhost.config?
I was trying to block an IP for all the web applications on our Win Server 2003 R2 and during the changes I enabled "Secure Server (Require Security)" in "IP Security Policies on A Local Computer". I was doing that through Remote Desktop and my session was locked immediately (although I have an administrator rights). Now I cannot connect to Remote Desktop again (it doesn't even reach the login prompt) and my web applications doesn't work for any IP. Any ideas how I can get out of this weird situation?
View 2 Repliesi want to create application that register host and domain in pleskany guya have sample? or source code? or documentation
View 1 RepliesI have seen this error many times in past and what all I used to do was to add aspnet account to the directory and provide it with read and write access. But this time I am trying to run an application in Windows 7(64 bits) - I had to manually enable the IIS from windows feature in Control Panel.
But I dont see any aspnet account in 'security' tab of any of the directories (in its properties). I even ran aspnet_regiis -i in v2.0.50727 and v4.030319 directories. How do I get aspnet user account to show up in any folder?
I wand to download the files in Windows server 2003. For that the ASP.Net application needs access control to the directory. I searched the ASP.NET Account. But I cannot find. How Can i find or add?IF I try to add the ASPNET account using User Accounts panel. I cannot open the localusers It says an error "the computer is a domain controller. This snap-in cannot be used on a domail controller. Domain accounts are managed with active directory users and computers snap-in"
View 2 RepliesI have an ASP.Net app, that runs using windows authentication. The connection to the SQL Server is usually done by creating a sql server account and using that in the connection string.
However, in this specific very restrictive hosting environment, we have been asked to use a specific WINDOWS/active directory account to connect to the SQL Server.
note it is not the windows credentials of the user of the website, we need to connect to the SQL server with - it is one specific windows/AD account.
How do I configure that in my connection-string?
If WebApp is configured as Windows Authentication, how to get the user credential in code?How to create NetworkCredential using this exsiting user credential?
View 1 RepliesI'm trying to migrate a php forum on a new WS2008rc2 from WS2003.I have an internet guest account set on securities on a forum folder and i need to do the same on the new 2008.
I can't seem to find it so i added iis_iusrs .I show a super long post on adding the internet guest account and i need to know if i must do that or iis_iusrs is what i want.
Post here: [URL]
"My application (ASP.NET) writes certain files in folders on my servers. In IIS 6.0 I used to give write access to IUSR account so that IIS can write to the folder. Now what I see is my application pool runs under App Pool Identity account. That is good but users are able to create files in the folders without App Pool Identity user being given specific permission to do so.
View 2 Replieshow to login with Microsoft Account in ASP.Net Website using C#
View 1 Replies