What is the best way when using the ASP login to display to the user that they are locked out?I want the user to know that their account has been locked and action needs to be taken.
View 2 Repliesuser phoned me and said he received an error when attempting to login stating that his account had been locked. I had to unlock the user account today manually through the user interface. Several hours later I had to do it again. Afterwards, when I looked at the aspnet_Membership table it showed NO failed login attempts. LastLockout date for that particular user was set to min date. FailedPasswardAttemptCount was zero. FailedPasswordAttemptWindowStart was min date. I then proceeded to fail logging with the users account name.
View 3 RepliesI am using forms authentication (built into ASP.Net) and allow users 5 attempts to login with an invalid password. After that they are locked out. How can I programmatically unlock someone?
[Code]....
I am using framework 4.0 and database is in access. I have saved data in database via admin panel. but when i am updating the existing data, it showing an error as below:
"System.Data.OleDb.OleDbException (0x80004005): Could not save; currently locked by another user."
We're running ASP.Net applicationon the server running Win2k AdvancedServer. Everytime server is rebooted the ASPNET account gets locked, even after unlocking the account, after few mins the account gets into locked mode.
View 7 RepliesI'm using the built-in membership in my ASP.NET Web Forms 4 app.
I'm also using the PasswordRecovery control for handling users who have forgotten their passwords. Before I reinvent the wheel, I've decided to post this question.
As one can imagine, in most cases, people give it a few tries before requesting a password change. Of course in the process, they lock out their accounts. The problem is that password recovery does not work for locked out accounts.
How do I first unlock the account if I'm using PasswordRecovery control?
I web application is in asp.net with Access databasesome times my application giving this error message "Could not read the record; currently locked by another user." or "Could not update; currently locked."I am using IDbConnection and IDbTransaction object.
View 2 RepliesI know this looks similar to other questions here but I don't think my case is the same as theirs.
I have a website that uses the AspNetSqlMembershipProvider to validate users. I would like to use the same database from a console application. According to several articles on the web I can use the System.Web.Security.Membership class from outside ASP.NET by copying the appropriate sections from web.config to app.config. That is what I did.
My console appliction can get the user with the requested name and I can confirm that the user is approved and is not locked out but ValidateUser returns false for a correct username and password pair.
I have found articles where people have had trouble with migrating code which may be due to a machine key mismatch but have also found a reference saying that machine key is only used if the passwordFormat property equals encrypted whereas I am using hashed.
Is the issue that the two pieces of code - the website and the console app - are in different assemblies and the assembly name or other property is being used during password hashing? In both cases the application name property is set to /.
Should I continue with this approach or just access the database directly and hash the password myself?
after i can copy my file to another folder i realised that if this webapplication is used by multiple users at once, then some users are going to get locked out because each one is trying to copy those files.
so how do i tell the user thats trying to use a file to wait untill the file is available.
StreamWriter WriterTotxt = new StreamWriter("date.txt", false);
DateTime LastAccess = File.GetLastWriteTime("path.dbf");
WriterTotxt.Write(LastAccess);
WriterTotxt.Flush();
WriterTotxt.Close();
string ReadTextFile = File.ReadAllText(txtFile);
DateTime test = Convert.ToDateTime(ReadTextFile);
if (File.GetLastWriteTime(LatestUpdatedTime).CompareTo(test) > 0)
{
File.Copy(Path.Combine(sourcefile, fName), Path.Combine(destinationfile, fName), true);
}
We have a web application with feature for logging in with credientials The important requirement is once the user logs in he is not allowed to login from any other system or even another browser on same system We used following solution which is mssql based : We have kept " Is_Loggedin" as a column with data type "bit" in a table. when a user logs in we set the flag as "1" sowhen someone tries to log again ,the system is showing the error "The user is already logged in"When user logsout bit turns to "0"indicating user logged out. However this logic is failing in following scenarios Problem scenario:When user closes the browser the flag is "1"and user is locked in or situations when user gets system problem and unable to log out.
View 5 Repliesi am working in asp.net and csharp, we have 10 user, but certain user only need to put dataentry. how to enable and disable based on the user to access certain form ,like add, modify view options.
View 1 Repliesthe directoryentry object with wrong password locks the user account and not able to log in again.
View 2 RepliesI am facing such problem in my asp.net application since last three weeks.Previously It was working fine. I have never changed the account password which is using in impersonation in asp.net application (in web.config). this account locked why I dont know. Is it possible the run application with impersonation account while this account is locked. This account is domain account. Currently application gives run time error that account has been locked.
View 1 RepliesI have a web service. When called, the web service creates a folder and files on another specified server in our network. When the command executes, I keep getting a crash. Basically, it says the ASPNET account is locked out. I unlock it and try again. Same thing.I tried using impersonate in the web.config, and it still tried to get into the server as ASPNET.The web server hosting the web service has Anonymous access enabled, allows the IIS to control the passworld, and also has intergrated Windows Authentication checked.
View 1 RepliesI have some pdf files that get attached to emails and are emailed out through a web application. Sometimes this causes the PDF files to get locked and I cannot delete them from the server (even after the email has gone out). I get the message "The process cannot access the file 'D:myfile.pdf' because it is being used by another process".
View 6 Replieshow to check with vb in asp.net if a MDB is locked?
View 4 RepliesWe have ASP.Net 2.0 application. It was running corretly and suddenly get loked up, when I kept opened a member edit page for 20 minutes or so. And after 20 minutes when I cliked on save. It is locked. Not it does not let me login. Niether it opens the login page sometimes.
This has happened twice.
In hosting server architecture we have two app servers and two db servers for fail over purposes.
I am facing a problem. I maintain a session after login like session["UserID"] and every page is locked with this session like Problem is that i am saving the data then redirect the page after saving session was automatically clear and the page is redirect to login page.in web config file i write this line <sessionState mode="InProc" timeout="60">how i solved this problem to stay in session state on save data and redirecting the same page.
View 1 RepliesWe have a web application running which having around 100 users logged in, All clients are connected to server using websync. I was having requirement for keeping the session always live, so I am regenerating session when it is about to expire.
But after 3 or 4 days, I found cpu reached to 100% and application locked, then we need to restart the server to make it working.
I'm uploading an excel file and viewing it in a grid. But if I need to upload the file again in a couple of minutes I get an error that the file is being used by another process, so I cannot upload the file again. The file is always the same name.
View 3 RepliesI am using an access database to store my data. I have Add page which inserts data in the database. Also i have created an Edit page to read and then edit the data. In both these pages I am using FCKEditor. So I can take HTML values and insert in the database for a field called Desciption. Now when I am inserting a data having a long value for theDescription field and then editing that data using the Edit page the Description field get locked and the update command doesn't work. This happens for a data having a longDescription value. I have used the datatype Memo for Description field
View 3 RepliesIs this piece of code where I lock a part of the function correct? Or can it have use drawbacks when multiple sessions ask concurrently for the same Exam? Purpose is that client that first asks for the Exam will assemble it, all next clients will get the cached version.
public Exam GetExamByExamDto(ExamDTO examDto, int languageId)
{
Log.Warn("GetExamByExamDto");
lock (LockString)
{
if (!ContainsExam(examDto.id, languageId))
{
Log.Warn("Assembling ExamDto");
var examAssembler = new ExamAssembler();
var exam = examAssembler.createExam(examDto);
if (AddToCache(exam))
{
_examDictionary.Add(examDto.id + "_" + languageId, exam);
}
Log.Warn("Returning non cached ExamDto");
return exam;
}
}
Log.Warn("Returning cached ExamDto");
return _examDictionary[examDto.id + "_" + languageId];
}
I have a feeling that this isn't the way to do it.
We are using membership provider for LDAP authentication. It is working as it should.
But what all configuration settings I have to do so that
all the future requests to this application run under the security context of the Logged in user account not through the some default user set in IIS.
We need to have this working because all the permissions on the database are based on the logged in user.
We are using form authentication for LDAP authentication. And having impersonation = true in web.config.
I have identity impersonate = true in the Web.config file. I have integrated security = true in the DB connection string in the Web.config file.Before identity impersonate was true,users were able to access the DB through the web service account (seemingly).Now I get an error which says " Login failed for ... " because I am aware there is no specific account for that user in the permissions for that DB instance.I needed to set identity impersonate = true because the web service does not have access to the Active Directory,which I need to retrieve certain user information.
My question is,does identity impersonate = true override the integrated security and attempt to user the authenticated user's account to connect to the DB? Is there a simple way to prevent this in the Web.config itself?If not,would programatically impersonating the user within the Active Directory query functions and setting identity impersonate = false do the trick here?
I have created user web control library project and these controls i'm using in my web application. These User controls just works fine in my local machine but when i moved this project(including Library) to our Local server , it is throwing security exception
Error 1 Cannot register assembly "LocalServerLibraryDemoLibraryDemoLibraryinDebugLibrary.dll". Request for the permission of type 'System.Web.AspNetHostingPermission, System, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089' failed. Library
Anybody knows why this error occuring...?