file.move to unc causes error

[Michael McLaughlin]

Hello I also posted this message under dotnet.security.

What I have is a web application that shows the user their files in a
protected location. The user can then select a file and move it to another
server over unc. The user is logged in via windows basic authentication with
their domain credentials and the site is ssl encrypted. When the file.move
command executes it generates an error which I am sure is based on ntfs
access denied. When I take a look at the request.ServerVariables("AUTH_USER")
it shows my user. I am sure this is an impersonation issue, can anyone point
me in the right direction?

foldername = "c:\path\folder"
mpf = "\\server\share\path"
file.Move(foldername & "\" & CStr(DropDownList1.SelectedItem.Text), Mpf &
"\" & CStr(DropDownList1.SelectedItem.Text))

[Daniel Fisher\(lennybacon\)]

do you have something like this in your web.config ?

<identity
impersonate="true"
/>

--
Daniel Fisher(lennybacon)
MCP ASP.NET C#
Blog: [url]http://www.lennybacon.com/[/url]


"Michael McLaughlin" <MichaelMcLaughlin@discussions.microsoft.com> wrote in
message news:226E5AA9-A9EA-4BF1-949A-FFB55C2A5EB7@microsoft.com...

> Hello I also posted this message under dotnet.security.
>
> What I have is a web application that shows the user their files in a
> protected location. The user can then select a file and move it to another
> server over unc. The user is logged in via windows basic authentication
> with
> their domain credentials and the site is ssl encrypted. When the file.move
> command executes it generates an error which I am sure is based on ntfs
> access denied. When I take a look at the
> request.ServerVariables("AUTH_USER")
> it shows my user. I am sure this is an impersonation issue, can anyone
> point
> me in the right direction?
>
> foldername = "c:\path\folder"
> mpf = "\\server\share\path"
> file.Move(foldername & "\" & CStr(DropDownList1.SelectedItem.Text), Mpf &
> "\" & CStr(DropDownList1.SelectedItem.Text))
>

[Michael McLaughlin]

NO I do not.

"Daniel Fisher(lennybacon)" wrote:

> do you have something like this in your web.config ?
>
> <identity
> impersonate="true"
> />
>
> --
> Daniel Fisher(lennybacon)
> MCP ASP.NET C#
> Blog: [url]http://www.lennybacon.com/[/url]
>
>
> "Michael McLaughlin" <MichaelMcLaughlin@discussions.microsoft.com> wrote in
> message news:226E5AA9-A9EA-4BF1-949A-FFB55C2A5EB7@microsoft.com...

> > Hello I also posted this message under dotnet.security.
> >
> > What I have is a web application that shows the user their files in a
> > protected location. The user can then select a file and move it to another
> > server over unc. The user is logged in via windows basic authentication
> > with
> > their domain credentials and the site is ssl encrypted. When the file.move
> > command executes it generates an error which I am sure is based on ntfs
> > access denied. When I take a look at the
> > request.ServerVariables("AUTH_USER")
> > it shows my user. I am sure this is an impersonation issue, can anyone
> > point
> > me in the right direction?
> >
> > foldername = "c:\path\folder"
> > mpf = "\\server\share\path"
> > file.Move(foldername & "\" & CStr(DropDownList1.SelectedItem.Text), Mpf &
> > "\" & CStr(DropDownList1.SelectedItem.Text))
> >

>
>
>

[Patrick Olurotimi Ige]

Michael,
Try putting :- <identity impersonate="true/> in your
web.config..and see..
If still gives an error POST IT.
Patrick




*** Sent via Developersdex [url]http://www.developersdex.com[/url] ***
Don't just participate in USENET...get rewarded for it!

[Michael McLaughlin]

Oh heck it worked. Is there a practical guide on Impersonation that you would
recommend?

Michael McLaughlin

"Patrick Olurotimi Ige" wrote:

> Michael,
> Try putting :- <identity impersonate="true/> in your
> web.config..and see..
> If still gives an error POST IT.
> Patrick
>
>
>
>
> *** Sent via Developersdex [url]http://www.developersdex.com[/url] ***
> Don't just participate in USENET...get rewarded for it!
>

[Patrick Olurotimi Ige]

Hi Michael..Nice to hear it did the TRICK.
Try reading through :-
[url]http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnnetse[/url]
c/html/secnetlpMSDN.asp

or

[url]http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnnetse[/url]
c/html/SecNetAP05.asp

Hope it helps..
Patrick


*** Sent via Developersdex [url]http://www.developersdex.com[/url] ***
Don't just participate in USENET...get rewarded for it!