Hide Passwords For Impersonation?
May 26, 2012
The following webpage talks about using impersonation in code (ASP.NET)[url]... I am thinking about creating a class for the code, then the application can call impersonateValidUser and undoimpersonation.
I am concerned about putting usernames and passwords in my code as surely anyone will be able to see them using a tool like ILDASM. What is the best way to hide these passwords?
The article has a section titled: Impersonate the IIS Authenticated Account or User. I thought about creating an impersonated user in the Web.Config, but this would mean that the entire application is run as the inpersonated user. I only want a very small part of the application to run as the impersonated user - when it is necesary to access and update active directory.
View 1 Replies
ADVERTISEMENT
May 25, 2012
I have to sync information between a users table in SQL and a user group in active directory. For example, if a user is entered into SQL table A then they need to be entered into group A and if a user is removed from SQL table A, then remove them from group A.The application is written in ASP.NET (VB)
I see two solutions:
1) A scheduled task that runs every night syncing the two (written in VB.NET).
2) Use inpersonation so that Active Directory can be updated by the ASP.NET application. The Web.Config file will have to be encrypted in this solution.
I have read articles online that say it is bad practice to update AD in ASP.NET. This would suggest that option 1 is the better solution. Which is the better solution?
View 1 Replies
Jan 27, 2009
What is the best way to GAC dll on remote computer with Impersonation to an admin account?
View 1 Replies
Dec 1, 2011
delete file by impersonation in .net
View 7 Replies
Feb 25, 2011
I'm using Visual Basic 2008 and I've written a very handy little app that takes care of serveraladmistrative tasks when our company gets a new project. I won't get into all the features but one of the tasks that it performs is setting up a new projectolder structureon our file server with a predefined set of subfolders and it also sets userpermisions on the subfolders.nder Windows XP it worked great and saved me tons of time. It made me giggle everytime I used it in the past becuase it would save me so much time doing these simple but time consuming tasks.
Now my computer is a Windows 7 Pro machine and the only way I can get the exe to run is to right-click the .exe and choose RUNAS administrator. I'm already a domain administrator so why I would need to do this is silly and annoying. In my code I already included a RunAs_Impersonator class so that anyone could use the app which worked great until windows 7.The RunAs_Impersonator class that I use can be found hereI recently needed to make some additions to the program'sbut when I try to debug itwhen it gets to the portion of trying to create the folders on the server,the program breaks and makes claims that I don't have the rights to do so.
View 5 Replies
May 31, 2010
If someone has any knowledge on how the following works, please advise as to why I can sucessfully Load a user token, Set token privileges to load the profile, impersonate the logged on user, create the environment block, obtain the roaming profile path, and load the profile perfectly fine as long as the application calling the functions is running as an admin. The application runs as a service on the local machine. As soon as I try to run the exact same code under the SYSTEM account, LoadUserProfile returns error 5. What must I have to change in order to allow the SYSTEM account on the local machine to perform the same tasks?
View 5 Replies
Aug 30, 2011
I am trying to use impersonation when running an exe on a server. It appears to log in correctly but windows still doesn't recognize the Username.
View 2 Replies
Jul 15, 2010
I have a strange issue when using WindowsImpersonationContext.
Whenever I use Impersonation in a Windows Forms and the Main Form loses focus, all of the controls freeze up and their events are either not triggered or take too long to trigger. This only happens when I use LogonUserA with a user that is not the current[code]....
View 11 Replies
Sep 15, 2010
I have a VB.Net windows application which needs to modify a MS Access database availabe in server. The login user does not have permission to the folder where the database is available. So I am using windows impersonation with another user's credentials to access to that folder.This works fine and I am able to create a new text file in that folder. But when I try to access the database try to get a dataset from the database, it gives "unspecified error". When I check in the internet some people say that there could be problem with temporary files that OleDB tries to create.
View 2 Replies
Sep 27, 2011
So I am using a user to run the following code that is a member of the "User" group on a Windows 7, x64 machine. I am trying to use impersonation (by logging in as a user that is part of the Administrator group) to allow the current user to read from the registry. For some reason the login happens successfully but even though WindowsIdentity.GetCurrent() is returning the user that is part of the Administrator group I am still getting an error message saying "Requested registry access is not allowed". What am I doing wrong? This is the main code:
[Code]...
View 1 Replies
Mar 19, 2009
I need to impersonate with an account that is local on the remote server not the server where the application is running.
View 1 Replies
Sep 13, 2011
I am developing a small tool to allow our Windows admins to do stuff like create/delete users, mailboxes and other useful stuff.The current version has to be launched with RunAs as it requires domain admin privileges to do a lot of the stuff. Now, to overcome this I'm trying to incorporate a dialog box that prompts for credentials when the application starts and then uses said credentials throughout the application. I have it working for the AD interaction but one of the tasks the tool needs to do is create folders on a remote server and share them.Is there any way to create folders using alternate credentials? Maybe, once I have the credentials, quit the application and re-launch it with the specified credentials?
View 2 Replies
May 5, 2012
I'm curious if it is possible to hide a group of text boxes from view in a form until a particular condition is met, and to have a custom set of text boxes for that condition. To give an example; I want radio buttons offering choices for a manner of searching records, the user selects one and then a specific set of text boxes are displayed for the user to utilize, if a different option is chosen a different set of text boxes will be shown. Is this something that can be done?
View 7 Replies
Oct 20, 2009
I know its a very basic problem but what is the best way to store passwords and usernames in visual basic 2008? I need to be able to add them whist in runtime and I also need to be able to obviosly get the program to check wether inputted username and passwords are correct.I am VERY new to programming so please explain your answeres in dummy language
View 8 Replies
Jun 12, 2012
I'm trying to write a program right now for my computer science class for a program where you insert text into a text box, (the text being a password), and then click a submit button. The goal of the assignment is to have a program that looks at the user given password and see if it matches the const password (or one of the three const passwords in my case). If it doesn't, it is supposed to loop back so you can re-input the password. Also, If you enter the correct password, the loop ends and you are to get a msgbox (or, in my case three different ones), and then the application closes. We are to write the code so that if the password is wrong "x" (insert 3 as the number I have chosen), a MsgBox will pop up with a message saying
something along the lines of "you have gotten the password wrong to many times.", and then the application is supposed to close. I don't think I could rant on much more, I've done a good (or in my eyes terrible) job of summarizing the assignment.
[Code]...
My problem (aside from, I don't know, a problem with my code itself) is that when It reaches the loop, it goes through all the code again, but I'm unable to change the user given password, and so it just pops up the three failed password entry MsgBoxes (the code for which is temporarily removed), then the failed to many times MsgBox, OR one of the successful message boxes. What I'm wondering is if anyone can help me fix my code so that it functions as desired.
View 7 Replies
May 13, 2011
I am using VB.NET 2010. I have a Windows 2008 Web Server, where about 80 user accounts are activated. It is NO Active Directory Environment!!! This is a server, where Windows SharePoint Services are hosted. So, once a year, I have to give all users a new password. (I have to give it, because of some security thinkings of the owner of this Page). So, changing the password for each person is a very long activity. How can I do this by a VB.NET Program? - When I am logged on as an Administrator to this server?
View 15 Replies
Apr 5, 2009
How to do this: I have a webbrowser on a normal form with a listbox undernieth it. I would like the program to get the passwords from IE or FIREFOX so then I could import them into my webbrowser.
View 5 Replies
Jun 26, 2010
I recently made a small app for a friend and then made it a public app, in doing so I forgot that it connects to my MS SQL DB and checks for values. Someone used Red Gate .Net Reflector to get my password and destroy it all. I've contacted their ISP and they are looking into it, apparently this person has a static ip with them.So this is a lesson learned at a heavy price for me. How can I prevent this from happening again? How can I get away from the unsafe connection string they were able to use?
View 5 Replies
Mar 16, 2009
Yesterday night a friend did ask me what encrypting i normally use for my login passwords on the programs i make.Wel my answer = NO Encryption cause most of programs i write with a login on it as protection is only for local use.But still lately iam starting to get more intrested to make programs that are using external databases like MySql.So my Question is how to put sh1 encryption on a password.i need this in 2 ways 1. how to use it when i register a password to a database.2. how to use it when i read the password out of the database.( i dont need to know how to make a connection to mysql or etc. just the info to encrypt.)
View 1 Replies
Mar 5, 2012
how to hide exe into task-manager in windows 7 using vb.net windows application?I want exe is hide into task-manager in windows 7 & windows vista machine using vb.net(windows application)
View 3 Replies
Aug 3, 2011
Is there any possibility of clearing saved passwords using vb.net code from the browser (could be IE, Chrome or Mozzila).
View 1 Replies
Apr 21, 2011
Can someone tell me how Active Directory stores it's passwords for users? Is it like this answer : storing passwords in SQL Server Is it a hash and a salt or multiple hashes?
EDIT I ask because I want to mimic the way they store them for a custom authorization application I want to build. Or if someone can offer a existing framework or class that handles user authorization for a web application. If I can use asp.net membership for multiple applications using web service that would be even better.
View 2 Replies
Mar 7, 2012
I have a scenario that has been troubling me for years. If you have to connect to a database or other service (like a web service) using a username and password, where would be the safest place to store this information if you are connecting through a .NET assembly? I understand that you would have to encrypt the password, but then you run into a kind of chicken-egg problem -- fine -- you can encrypt it, but then where do you put the key?In .NET, you can't hardcode the password because you can decompile .NET code.
I looked at using assembly based rights with Isolated Storage, but MS recommends against storing unencrypted secret items there because priveledged users can gain access, so again, we are moving the problem from point A to point B. So for examplem, a domain admin with no need to know about the information in a database would be able to get access because of the ability to be an admin on any workstation on the domain.You can encrypt App.Config and Web.Config, but I believe priveledges users can access the keys. I think you run into the same problem with DPAPI.
I had considered storing the passwords, encrypted in a remoted database and getting them through OS authentication, but our department prohibits the storage of passwords on database servers. I am pretty sure I am stuck and wanted confirmation.
View 3 Replies
Feb 7, 2010
i'm oding a project which involves using a log in form, from which the username and passwords are compared to. However, at the moment, my code works, but not case sensitively!
Private Sub btnLogin_Click(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles btnLogin.Click
Dim sql = "SELECT Username,Password FROM login WHERE Username = '" &
[Code].....
View 2 Replies
Aug 3, 2011
Clearing saved passwords in browser
View 1 Replies
Dec 11, 2009
I am building a small office application that requires users to log in dont need encryption or other sophisticated aproaches. all i need is an array of passwords that users can log in.
So If passtext.text= "test" or "test1" or test2" then
else
msgbox("Fix password")
View 9 Replies
Jun 29, 2009
I looked everywhere for some source codes to get all saved passwords .. so can someone post here source code or give me some tut to read it ?
View 6 Replies
Sep 27, 2009
I am trying to get use to this....I need to know how to type in a database for my usernames and passwords??? I am using visual basic 2008, which I think is visual.net? anyway...heres my code:
Code:
Public Class login
Private Sub login_Load(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles MyBase.Load
Hello.Hide()
[code]....
View 2 Replies
Mar 29, 2011
What's the simplest way to upgrade a VB.NET site to using encrypted passwords? Are there easy to use encryption algorithms built in to System.UI?My site is using plain text password storage, and it will soon be going to a public server at godaddy from a private one on the local network. I'm going to have to start adding in encryption algorithms to all the password parsing functions, and it would be nice if I could just set a SALT key in the web.config file and Encrypt(password) or something like that.
View 2 Replies
Oct 26, 2011
I need to write a program allowing the user to enter up to five passwords at one time. I have the textboxes set the way I need. When the user presses the button, the code should check every password they ve entered, and flag any passwords that are invalid. A valid password includes the following:
At least 6 and not more than 15 characters
At least one uppercase alpha character
At least one lowercase alpha character
At least one numeric character
I'm a little confused about how to check each character of the entered passwords for these conditions.Because it must include alpha characters, I believe I have to do something with ASC and CHAR variables. This is my first post and I need to have this done within a few hours, haha. Help would be awesome.
View 3 Replies
