FW: Hosting multiple sites/ASP.NET security

From: Alberto Mujica (amujica@trymyweb.com)
Date: 09/23/02 

From: "Alberto Mujica" <amujica@trymyweb.com>
To: <focus-ms@securityfocus.com>
Date: Mon, 23 Sep 2002 12:47:47 -0400

The process will always run, and it will always run under this user.
The only situation is that it will "Impersonate" the other user once it
runs.
If you kill this process, you kill .NET.

There is an excellent site on .NET at learnasp.com and great lists
dedicated only to ASP.NET at aspfriends.com.

Check those out, I'm sure you'll get all your answers there.

Hope this helps.

Alberto Mujica

-----Original Message-----
From: Rado Stoyanov [mailto:rado@rccit.com]
Sent: Sunday, September 22, 2002 7:51 AM
To: focus-ms@securityfocus.com
Subject: RE: Hosting multiple sites/ASP.NET security

Hi,

Thanks to everybody for the prompt replies. I hope we'll have better
options in .NET Framework 1.1 or something... and I hope I won't have to
install .NET Server to accomplish that :)

Well I have heard about impersonation and have tried it. I added the key
in web.config -- but I still have the site running under ASPNET?!? Still
aspnet_wp.exe under ASPNET. I have ended the process using the Task
Manager but it has come back, under ASPNET again. What is the problem?

Thanks,
Rado

Relevant Pages

  • IUSR_machinename vs ASPNET
    ... privileges, between the Internet Guest User Account (IUSR_machinename, ... where machinename is the name of your computer) vs. the ASPNET user ... (ASP.NET machine account). ... One of the things you can do is set the impersonate ...
    (microsoft.public.dotnet.general)
  • Re: <identity impersonate="true"> question
    ... The default setup used to be to run the ASPNET worker ... Does your app actually need to create categories? ... Windows authentication, and impersonate the authenticating user? ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: impersonation in a sub thread
    ... A COM+ server runs outside the ASPNET context and can assume any identity ... > security context of the parent process. ... > E.g. when a webapplication that is set to impersonate ... > After giving that privilege to ASPNET, ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: IUSR_machinename vs ASPNET
    ... "Andrew J Fortune" ... > where machinename is the name of your computer) vs. the ASPNET user ... > visiting user can impersonate that specific account. ...
    (microsoft.public.dotnet.general)
  • Re: Impersonation in threads in web application
    ... Perhaps you could try to change the user that aspnet uses to SYSTEM. ... guessing you are running under the MACHINE user. ... > thread - it is created under ASPNET user and when I try to impersonate it ...
    (microsoft.public.dotnet.security)
Quantcast