ASPNET User Problem in Shared Hosting Environment

Ask a Question related to ASP.NET Security, Design and Development.

  1. #1

    Default ASPNET User Problem in Shared Hosting Environment

    Hello,

    We do provide web hosting service. Every ASP3 process runs under own
    username and password so customers can not access other customer's website.
    How do I do that with .NET? What is the best running ASPNET in Shared
    Hosting Environment? Right now ASP.NET user can access all other customers
    websites files and view them.

    Thanks,

    Telman


    news.microsoft.com Guest

  2. Similar Questions and Discussions

    1. event gateways in a shared hosting environment
      I am trying to work with a host to enable the IM event gateway. The config file and cfc and all that is working fine locally but on the actual host...
    2. ASP.Net in a shared hosting environment
      Hi, Does anyone know of any concise documents that detail securing the .net framework installation in a shared web hosting environment? ...
    3. Issues in locking down aspnet user security in shared environment
      I am trying to lock down file access of some sites in a shared hosting environment so that different users can only access their own site's...
    4. Question about shared hosting.
      if your server win2k, then the same asp.net process is hosting all the web sites, so all sites share the same max memory. also cross site security...
    5. Problem when Hosting Windows User controls in Webform
      I am unable to load the user control from client machine browser if the user controls referes other custom dlls that I have created. Its working...
  3. #2

    Default Re: ASPNET User Problem in Shared Hosting Environment

    Guys,

    I think I have the same issue because I'm trying to setup
    Integrated Security in my connection string for an
    ASP.NET app.

    So does this mean I can create an IUSER_<website> account
    for each website I have running and give that IUSR
    account access to it's respective SQL Database?

    Right now the only way I got Integrated Security to work
    and connect to the sample Northwind database was to add a
    SQL Login as <mymachine>\ASPNET and giving the ASPNET
    account access to Northwind DB.

    In a real scenerio I think I should have a different
    machine account for each website and it's supporting
    databases only.

    Can you confirm? Thanks,Dave
    >-----Original Message-----
    >Hello,
    >
    >| We do provide web hosting service. Every ASP3 process
    runs under own
    >| username and password so customers can not access
    other customer's
    >website.
    >| How do I do that with .NET? What is the best running
    ASPNET in Shared
    >| Hosting Environment? Right now ASP.NET user can
    access all other
    >customers
    >| websites files and view them.
    >
    >In IIS 6 you can specify different users to run ASPNET
    Worker Process.
    >
    >In IIS 5 you must enforce <identity impersonate="true"/>
    from
    >machine.config.
    >
    >--
    >Michal A. Valasek, Altair Communications,
    [url]http://www.altaircom.net[/url]
    >Please do not reply to this e-mail, for contact see
    [url]http://www.rider.cz[/url]
    >
    >
    >.
    >
    Dave Guest

Posting Permissions

  • You may not post new threads
  • You may post replies
  • You may not post attachments
  • You may not edit your posts

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139