asp.net-membership

Resetting ASP.NET password - security issues?

Hi, I've seen various questions regarding this issue, but there are a couple of questions that haven't been asked. If the user forgets their password, I would like them to be able to reset it with only their email address (i.e. there's no security question/answer). The password is stored as a salted hash, so there's no recovery possib...

Alternative approach to user management in asp.net web application

Hi all. I am using asp.net 2.0. I have been using asp.net membership provider for user management. But I think this would be more efficient if I could do this without using role and membership provider provided in asp.net. In fact I see bulky markups generated when I add login control, createuser control etc. in an asp.net web page. B...

Set connectionstring for Membership Service via code

Hi, I have an ASP.NET web project and a membership provider configured via my web.config. Its fully working so no problem there. We have an older system with a lot of users and I would therefor like to create a class library that can create users in this ASP.NET project but since its a class library it cannot have its own app.config-fi...

ASP.net C#. Membership.CreateUser method - missing refrence or assembly. stacked...

i am getting error : Error 1 The type or namespace name'CreateUser' does not exist in the namespace'LocalGarageFinder.Membership' (are you missing an assembly reference?) I have checked the namespaces. all in. Security.Web.Security; what is missing? help please using System; using System.Collections; using System.Configuration; u...

Differences between Page.User.Identity vs Request.LogonUserIdentity

What are the differences (behind the scenes) between Page.User.Identity and Request.LogonUserIdentity? Not the differences in type, name, etc but the differences in how they're implemented behind the scenes (i.e. one calls windows xxx api and the other calls asp.net xxx api...). ...

ASP.Net membership and Roles Managment

looking for some feedback on the built in membership and roles management for ASP.Net 2.0. Do many people use it? What is good and/or bad about it? Can I assign multiple roles to a single user? What is the alternative norm for .Net apps? I personally like the idea of having defined permissions or actions to a role. Seems like if I c...

Using a profile property of type List in .NET Membership

Hi, I'm working on a C# Webservice that needs to provide authentication as well as roles and profile management. I need each profile to have a property of type List. The profile section in the web.config looks like this: <profile defaultProvider="MyProfileProvider" enabled="true"> <providers> <remove name="MyProfileProvider"/> ...

Admin pages to manage asp.net membership provider & Role management

Are there any open source projects that provide a front end to asp.net membership provider? Something like the one visual studio exposes through it configuration, but one that can be deployed on production. Examples of some of the functionality I would like to see in the front end is Add users Delete users Reset password Change ro...

Storing profile information for asp.net users in separate columns instead of 1 long column?

When you create profile information for an asp.net user, it creates all the property values in 1 field. This is not the easiest thing to query. Is there a way to tell it to store the values in separate columns like Address, City, State, Zipcode instead of a column called PropertyStringValues where the value might be something like City...

Is there a way to hide a schema or at least the aspnet procedures from Sql Server Management Studio's proc list?

I think the question speaks for itself, but I'm sick of scrolling through my procedure list filled with 50 aspnet procedures. Is there a way to hide the dbo schema, or these procedures from the list? Is there a different/equivalent tool that would let me do this? With TOAD, I could open each schema independently - that'd be wonderfu...

Forms Authentication works on dev server but not production server (same SQL db)

I've never had this problem before, I'm at a total loss. I have a SQL Server 2008 database with ASP.NET Forms Authentication, profiles and roles created and is functional on the development workstation. I can login using the created users without problem. I back up the database on the development computer and restore it on the product...

Integrating Rhino Security with Asp.net membership providers

How does Rhino security gel with the asp.net membership providers? The reason why I am asking is because AFAIK if I need to use attributes [Authorize] then I should be implementing or extending the asp.net membership providers. In my case as I need more than what asp.net membership provider gives me. Rhino Security is a good fit in t...

.NET custom MembershipProvider decrypt password

Hello, I'm using a custom MemberShipProvider in a c# project based on the code from: http://www.asp.net/learn/videos/video-189.aspx and for some reason I can't figure out, the method that decrypts the user password to validate the login gives an extra 8 characters in front of the password value (for example: 䝉慣嘗㳪畕锬password). I use "e...

Why can't I use a LinkButton in the ASP.NET login control for the Login button?

I lost a week of time on this. I wanted to use a LinkButton instead of the standard asp button so I could attached a SkinID to it that I use for link buttons. When using the linkbutton: <asp:LinkButton ID="LinkButton1" runat="server" CommandName="Login" SkinID="loginButton" ValidationGroup="rgtLogin...

ASP.NET Membership; someting is calling dbo.aspnet_CheckSchemaVersion

Hi I'm using ASP.NET Membership. I'm runnig it on a shared hosting site where I have an db schema I run things off. In the scripts to generate the DB on the server I changed the schema from 'dbo' to this other schema; on the tables, views and SP's. Thing work fine, with everything except the Membership; I'm able to contact the DB and pul...

How do I redirect http to https

Hi, I want to redirect http to https. I tried this one,but I have one problem, I have to redirect to another page. The request.url gives the current page, whereas I need to redirect to another page. How do I do that. if(!Request.IsSecureConnection) { string redirectUrl = Request.Url.ToString().Replace("http:", "https:"); Respo...

ASP.Net Membership Services

In our application, we have a need for a user to "impersonate" a different user. Think of it as a hierarchy -- Bob is above Frank in a hierarchy. Bob is logged in, and he needs to do things in the system for a short time as Frank. So, we have given Bob a list of users that report to him, and an impersonate link. He clicks on this lin...

ASP.NET Membership Provider - Single Login

I'm considering utilizing the ASP.NET Membership Provider for a few different web apps/tools with a single login approach. REQUIREMENTS User logs in to my.domain.com and sees a list of apps/tools that they have permission to use. The user selects the tool they'd like to use and clicks the link. When the tool opens, it is able to i...

[RESOLVED] ASP.NET Membership PasswordLength and other properties

I am going crazy, when I go into the Web Site Administration Tool to create some new users, it always tells me that my password is not 7 characters long. Error msg: Password length minimum: 7. Non-alphanumeric characters required: 1. Here is my web.config, seems like it is not even looked at. <membership userIsOnlineTimeWindow="20"...

Using MySql MySQLMembershipProvider - autogenerateschema="true" not working?

I'm trying to use the MySQLRoleProvider(MySql.Web, Version=6.2.2.0) with Visual Web Developer 2008. When trying to add a role I get an exception "Table 'test.my_aspnet_applications' doesn't exist" if (!Roles.RoleExists("TestRole")) { Roles.CreateRole("TestRole"); } Can someone tell me where I went wrong. Or tell me how to generate ...