ASP.NET security question

From: John O'Connell (ltj__bukem@nospaaaam.hotmail.com)
Date: 03/14/03 

From: "John O'Connell" <ltj__bukem@nospaaaam.hotmail.com>
Date: Fri, 14 Mar 2003 03:29:37 -0800

I'm building an ASP.NET app that will access a SQL2000
database via a single trusted login. The way I planned to
do this was to set up the app to impersonate the trusted
account via Web.config <identity> section. I've tried it
but it fails with a "required privilege is not held by the
client" error.

As per various bits of documentation, I've set full
control permissions on the "Temporary ASP.NET files" path
on the web server box for the trusted account but I still
get the above error. Any ideas why or what else do I need
to do?

Also, the trusted account username and password appear in
clear text in the <identity> section of Web.config; now I
know that passwords used in forms authentication can be
encryptd using sha1 or md5 but can I encrypt passwords for
the <identity> section?

TIA

John O'Connell

Relevant Pages

  • Re: SQL Access security from Window Application
    ... you could have your app handle authentication by emulating the ... Currently my application access the SQL using ... >System.Data.SqlClient and all forms use stored procedures. ... >passwords in a protected file but this creates a problem on remote systems ...
    (microsoft.public.dotnet.general)
  • Re: app to send and receive file over a network?
    ... to run the app and wait that the file is sent. ... scp and setup ssh keys so a password is not required ... ncftpput to automate ftp with passwords in the command line or config file. ...
    (comp.os.linux.networking)
  • Re: ASP.NET 2.0 forms auth: default user
    ... passwords are not encrypted but hashed - you can call the CreateUser SPROC as part of your DB setup. ... Dominick Baier - DevelopMentor ... I would like to deploy a web app which uses forms authentication. ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: HELP ! Changing password on AS400 automatically
    ... > Does anyone know of a sql statement or something else to do this without ... What do you mean you created a library of 13 different passwords? ... Delphi app running on Windows ...
    (borland.public.delphi.thirdpartytools.general)
Quantcast