Ask a Question related to ASP.NET Security, Design and Development.
-
Adam Lawson #1
Re: an indirect ASP security problem
Hi Boban,
My initial question would be why do you have to "wake up" the windows
service? You could let that run on the machine with the proper crendentials
and then send it jobs through the website that it can pick up on
predetermined time intervals. The windows service could also run your dlls
and it can have an app.config file associated to it to contain data that is
needed like database connection strings.
hope this helps
Adam
"Boban Dragojlovic" <news@_N_O_S_P_AM_dragojlovic.org> wrote in message
news:heN5b.10996$TD1.6428@newssvr25.news.prodigy.c om...is>
> I have an dot net website which calls a class (which is in a project thatfile,> referenced by the website project). I will call the class "WakeUp"
>
> In other words, somepage.aspx.vb instantiates "wakeup" and calls a method
> wakeup.now().
>
> This method ... wakeup.now() ... uses the appropriate mechanism to start a
> Windows Service.
>
>
> When I try to run this on my web server, it fails because of lack of
> permission.
>
> If I add an <identity impersonate="true" ...> section to my web.configwebsite.> I can give it credentials so that the whole thing works.
>
> The downside, of course, is that then the entire site runs under these
> administrative credentials.
>
>
> Is there a way that I can assign such administrative credentials (e.g.
> impersonation) to only the "wakeup" class, instead of to the entire> Since wakeup.dll is in the website\bin folder, it doesn't have its own
> .config file.
>
>
> Thanks,
>
> b
>
>
Adam Lawson Guest
-
#40625 [NEW]: Indirect modification of overloaded property
From: noreply@php.net Operating system: XP SP2 PHP version: 5.2.1 PHP Bug Type: Class/Object related Bug description: ... -
Indirect file upload undocumented feature?
I stumbled across what seems to be an undocumented behavior in ColdFusion MX that can simplify file uploads if it is reliable. Example: ****... -
Indirect recordcount
I have a variable that contains the name of a query. How can I get the RecordCount for that query? I've tried using Evaluate() in several... -
Indirect Selection tool doesn't always work
I have a problem with some ai files that I've been trying to open (I'm in CS, working on illustrator 10 converted files). I have a shape in the file,... -
indirect file access
Hi I want to open a file (testmesg.txt) for reading and writing. Ok, normally that is no problem ;) But my script runs by "www-data" and the...



Reply With Quote

