Ask a Question related to ASP.NET Security, Design and Development.

  1. #1

    Default WindowsIdentity ?

    Is there a way to modify WindowsIdentity.Name for System.Security.Principal
    class at runtime after your app. successfully logs the user on the system
    programmatically.

    Thanks

    John


    WJ Guest

  2. Similar Questions and Discussions

    1. Access Denied on WindowsIdentity.GetCurrent()
      Hi, I am developing an ASP.NET Application in C#. I need to find out the user under which the process is running on runtime. So I use...
    2. Impersonation using WindowsIdentity( upn ) ctor
      I'm trying to impersonate a user using the WindowsIdentity ctor. This is what I'm doing WindowsIdentity id = new WindowsIdentity(...
    3. Access is denied in WindowsIdentity.GetCurrent
      I am suddenly getting this on a couple of Windows XP (.NET 1.1) machines in my environment. The machines haven't change, and my code hasn't...
    4. Extract NetworkCredential from WindowsIdentity
      I'm using the Windows Integrated Authentication scheme for my web apps and web services. When my web applications make calls to the web services I...
    5. get WindowsIdentity with forms authentication
      Hi, I am trying to figure out a way to authenticate against Active Directory and retrieve system.security.principal.WindowsIdentity object,...
  3. #2

    Default Re: WindowsIdentity ?

    Most ASP.NET applications (with the default policy) are not allowed to
    modify the Principal. You can change this behaviour by going to the .Net
    Framework 1.1 configuration (Administrative Tools), and selecting the
    'Security' permission set for the internet zone. Within this, (by default),
    the 'Allow Pincipal Control' is set to 'No'. Changing this to yes means your
    ASP.NET app has the ability to now change the security principal, but
    obviously this increases the 'surface area' of attack for any potential
    malicous users to hack into your system.

    --
    - Paul Glavich
    Microsoft MVP - ASP.NET


    "WJ" <JWebb@Msn2.Com> wrote in message
    news:e7xy3fBIEHA.2924@TK2MSFTNGP09.phx.gbl...
    > Is there a way to modify WindowsIdentity.Name for
    System.Security.Principal
    > class at runtime after your app. successfully logs the user on the system
    > programmatically.
    >
    > Thanks
    >
    > John
    >
    >

    Paul Glavich [MVP - ASP.NET] Guest

  4. #3

    Default Re: WindowsIdentity ?


    Thanks Paul.

    John


    WJ Guest

  5. #4

    Default Re: WindowsIdentity ?

    But it is read-only.
    How can i change 'Allow Pincipal Control' to yes

    thanks
    Paul Wang Guest

Posting Permissions

  • You may not post new threads
  • You may post replies
  • You may not post attachments
  • You may not edit your posts

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139