security problems

From: Chan (cachanthodi@atex.com)
Date: 07/25/02 

From: "Chan" <cachanthodi@atex.com>
Date: Thu, 25 Jul 2002 13:02:08 -0400

Hi,

I have created a few C# MTS object that work well in a windows .NET
Application. But its seems to give me all kind of security error when I try
to instantiate the same components in ASPNET.

First of all it fails to register in COM+

"Access to the registry key HKEY_CLASES_ROOT\Application.ClassName is
denied."

I could fix the above error by using REGSVCS.EXE. then it throws a different
error

"No error Information available: XACT_E_TMNOTAVAILABLE(0x8004D01b)."

The component i was trying to instantiate has the Transaction attriburte set
to "Required". Have I ignored some basic security settings in ASPNET?

Please Help!

Thanks
Chan.

Relevant Pages

  • Re: COM Component and Security
    ... Hi Lior, ... | Subject: Re: COM Component and Security ... | ASPNET user and not my NT user. ... |> information on the thread before impersonation began. ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: COM Component and Security
    ... it will affect the way ASPNET functions. ... Implementing Impersonation in an ASP.NET Application ... | Subject: Re: COM Component and Security ... Assuming you're reverting at the right time, ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Web Service Security problem
    ... the server. ... the failed logon attempt was ASPNET. ... >Allowin that account access to lan resources would be a large security risk. ... >> Another possible issue is the ASPNET account on the server. ...
    (microsoft.public.dotnet.framework.aspnet.webservices)
  • Re: ASP.NET security issue
    ... There's a MS article on the security needed by aspnet on a web server. ... have an admin use the system the first time, or create a key using ... > administrator has to run the app first in order to let the 'regular user' ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • [NT] TOCTOU with NT System Service Hooking
    ... Get your security news from a reliable source. ... restriction to registry, files, processes, etc. ... So attacker calls system service with object name for which access ... specified registry key by usual means. ...
    (Securiteam)