asp.net-membership

xbap and asp net membership

I have hosted my xbap application inside a folder that can be accessed only by some roles(asp net membership). i login in the webpage and try to access the xbap application, then a message display saying that "application files cannot be found". btw this thing works with a silverlight appliation. ...

ASP.NET Membership - Is authenticated user lost when you call a WebService in the same WebApp

I am using the ASP.NET Login Control for authentication. I have some users and they are able to login successfully. When authenticated I redirect to a page helloworld.aspx. In the Page_Load method I first make a call to Membership.GetUser(). This returns the authenticated user properly. I then make a call to a simple WCF web service...

Different hash algorithm for ASP.NET Membership provider?

Does anyone know if it is possible to configure the ASP.NET membership API to use SHA-256 or SHA-512? I don't really want to have to go down the line of writing my own and our employer has an encryption policy that does not allow MD5 or SHA-1. All i can find from Microsoft is the the HashAlgorythmType enum ...but this only contains MD5...

what is the minimum access level on a sql server the asp.net membership need?

for security reason, what is the minimum access level the asp.net membership user could have? ...

PasswordRecovery using email instead of UserName

Hello, Rather than forcing users to remember a UserName, I would rather have them enter their email address and have the password reset and sent to them. I am using ASP .Net PasswordRecovery control under the membership provider. Right now the system works fine, it resets the password and sends to the user. However, I find that many ...

Mocking Membership

I'm writing a custom Profile provider, but I still intend to use the default AspNetSqlMembershipProvider as my Membership provider. My GetAllProfiles() method in my Profile provider looks like this: 1 public override ProfileInfoCollection GetAllProfiles(ProfileAuthenticationOption authenticationOption, int pageIndex, int pageSize, o...

Can an ASP.NET application access the standard ASP.NET UserId guid without access to the parent applications provider?

I have written a application which resides in a subdirectory of the parent, or root application. The root application uses a custom membership provider, but all the code for it is in the App_Code directory, and it's compiled deep into the Temp files for ASP.NET. Therefore, it complains that it's missing a reference to the provider when...

How do I persist which database a user is associated with it using LINQ and ASP.NET MVC?

I have an app I must write that will utilize a database for each company we are able to get as a client. Unfortunately, the schemas for all the companies databases's are not identical, even though for this app they all have the basic information I need (even if their column names are different/in a different table). My solution to ha...

Forms authentication against multiple providers (SQl and AD)

We have an application that is for both internal users and external customers. We would like to authenticate against AD for the internal users and against sql membership for the external customers. Has anyone taken a similar approach? Also what is the best way to authenicate against AD when in a DMZ? I would rather have a proxy of some s...

ASP.net user management and GoDaddy shared hosting

I'm trying to use the asp.net (3.5) built in user management framework but I'm not 100% sure how to do this on godaddy. Google didn't help much, anyone have experience with this? ...

What happens behind the scenes when running aspnet_regsql?

I didn't get any responses from the asp.net forum, so I thought I'd try here. I had an issue with a client where they were having trouble logging into our application that they are hosting. It was working fine for the first day or so after they initially installed our app, but then authentication broke on the following day (5/29/2009)....

Accessing ASP.NET membership stored procedures from classic ASP page

I have a classic asp site that requires login functionality. There is an ASP.NET administrative site where logins will get set up. I'm thinking about using ASP.NET Membership to manage/store the login information, and on my ASP site access the data through the Stored Procedures. Am I asking for trouble here? Has anybody successfully ...

Use currently logged-in user in query

I am using VisualWebDeveloperExpress2008 with Access as the membership provider. I have some cases where I want users to edit their own data. This would involve a query where the UserId should equal the UserID of the user who is using the site. I am expecting to use WHERE UserId = ?, but I have not found out where to direct "?". The ...

ASP.Net logout code block

I need a good logout code block for asp.net. Currently after you logout you can hit the back button and continue using the site. ...

Asp.Net Membership with ActiveDirectoryMembership Provider.

We're having speed problems still with the login control and the Ad membership provider. We've tracked it down to a specific issue, when initally trying to connect for the first time, it sends this SAM LOGON message: 117 10.717526 10.140.4.84 10.140.4.223 SMB_NETLOGON SAM LOGON request from client It Gets sent 4 seperate time on udp p...

i18n - Internationalization Password Complexity Rules

I'm currently working on the internationalization of a product and an issue has come up. The issue revolves around password complexity requirements for countries with non-Latin languages and complex character sets. The application uses aspnet membership for user and password management, although this might be a whole other issue. Curre...

What is risk if I use aspnet_membership.

I have some doubt about aspnet_membership. My database team of my company dosen't let me use aspnet_membership. Because this feature use some storeprocedure to install some thing that break the policy of my company. they said this feature could make some risk but i don't know what risk that i'll get if i used it . Is Anyone have any ...

Get current ApplicationId in ASP.NET MembershipProvider

I am using the MembershipProvider and due to the way I have set it up with in conjunction with some custom security I need to get the ApplicationId (Guid) of the current application. It is easy to get the application name using Membership.ApplicationName, but I have found no easy way to get the Id. ...

How to set asp.net authenticated properties

Hi, I have the following settings in my web.config file. It basically restricts access to a page if the user is not logged in. If I don't want to use the asp login controls or implement a membership provider, how can I 'tell' asp that the loginregister.aspx page has authorized the request if I want to implement my own login system? Tha...

Best practice to join nhibernate and ASP.NET membership/role/profile services

Hi! I've got a generic ASP.NET (MVC) application, that uses NHibernate as the model persistence layer, and ASP.NET Membership/role/profile services as the user management layer. The question is what can be considered as the best practice to create linkings between the domain data and the users. (For example is I want to create a forum ...