Re: ASP.NET Forms Authentication with Oracle Integrated Security



Thanks for your reply, it indeed worked

Dominick wrote:
with forms, your process identity will be used to access oracle, e.g. NETWORK
SERVICE,

is this account authorized to access oracle??

---------------------------------------
Dominick Baier - DevelopMentor
http://www.leastprivilege.com

Hi all,

I am trying to develop a ASP.NET web application. I want to use Forms
Authentication for authenticating the users. But, instead of using
Oracle user id and password, can I use Integrated Security?

I tried the same with Windows Authentication, and it did work. But for
Forms Authentication, I am unable to connect to the Oracle DB. Kindly
help.

I had tried enabling/disabling the "integrated windows Authentication"
in IIS. My web.config entries are:

<configuration>
<appSettings>
<add key="ConString" value="Data Source=dev1;Integrated
Security=true;" />
</appSettings>
<system.web>
<compilation
defaultLanguage="c#"
debug="true"
/>
<customErrors
mode="RemoteOnly"
/>
<authentication mode="Forms">
<forms loginUrl="Logon.aspx" protection="All"
slidingExpiration="true"
timeout="90" />
</authentication>
<authorization>
<deny users="?" />
</authorization>
<identity impersonate="false"/>
<trace
enabled="false"
requestLimit="10"
pageOutput="false"
traceMode="SortByTime"
localOnly="true"
/>
<sessionState
mode="InProc"
stateConnectionString="tcpip=127.0.0.1:42424"
sqlConnectionString="data
source=127.0.0.1;Trusted_Connection=yes"
cookieless="false"
timeout="20"
/>
<globalization
requestEncoding="utf-8"
responseEncoding="utf-8"
/>
</system.web>

</configuration>

Thanks and Regards,
Jeevan

.



Relevant Pages

  • Re: ASP.NET Forms Authentication with Oracle Integrated Security
    ... with forms, your process identity will be used to access oracle, e.g. NETWORK SERVICE, ... I tried the same with Windows Authentication, ... I had tried enabling/disabling the "integrated windows Authentication" ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Required permissions cannot be acquired?
    ... Changing the file permissions was one of the things I tried. ... >¤ I have forms authentication in SQL RS working like a charm. ... I am now trying to do some authentication against an Oracle ... >Any application that is using the Authenticated User privilege will not work. ...
    (microsoft.public.dotnet.security)
  • Re: Forms Based Authentication Issue (VIEWSTATE) Login Form On Non Protected Page
    ... Dominick Baier ... them both to work on simple forms posting data to a 2nd page... ... they just wont work under a "forms authentication scenario" ... I have it all working fine and pages I want to protect show a ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • [Full-disclosure] Oracle Application Server 10G ORA_DAV Basic Authentication Bypass Vulnerabilit
    ... Affected Software/Device: Oracle Application Server Portal ... Vulnerability: Authentication Bypass ... Oracle Application Server Portal is a Web-based ...
    (Full-Disclosure)
  • Re: NT authentication with Oracle 9i
    ... I am using Oracle 9i as a backend for ASP.net web application. ... When browser settings on A for logon for intranet are set as "automatic ... I want to know the role of NT logon credentials in initializing the ... Authentication adapter. ...
    (comp.databases.oracle.server)