Home All Groups Group Topic Archive Search About
Author
8 Apr 2005 3:17 PM
Sai
Hi All,


I have written a HTTP Module (Auth.dll) to authenticate pages in a
virtual directory. The virtual directory points to a network path (per
se \\net1\web). Now I have to place the compiled HTTP Module Auth.dll
and supporting dll's in \\net1\web\bin folder, and copied the
web.config to \\net1\web. I am getting security error when I try to
access the pages from the virtual folder. If I remove the HTTP module
it works fine. This has been done on windows 2003.


Q) Can I move the Auth.dll to a path in local machine rather than
network path?, if yes how can i do that.


Appreciate for your help.


Thanks
SAI

Author
9 Apr 2005 8:07 AM
Adam Goossens
Hi Sai,

If your virtual directory is a network share, when the runs it will run
with a very limited set of permissions. Auth.dll must be trying to
perform some action that requires more permissions than it's been given.

If you want to install Auth.dll locally, you could give it a strong name
(sign it with a key) and then place it into the Global Assembly Cache.

That way, when it runs Auth.dll *should* be granted the same security
context as the ASP.NET process (since it's not coming from a network
share anymore).

HTH,
-Adam.

Sai wrote:
Show quoteHide quote
> Hi All,
>
>
> I have written a HTTP Module (Auth.dll) to authenticate pages in a
> virtual directory. The virtual directory points to a network path (per
> se \\net1\web). Now I have to place the compiled HTTP Module Auth.dll
> and supporting dll's in \\net1\web\bin folder, and copied the
> web.config to \\net1\web. I am getting security error when I try to
> access the pages from the virtual folder. If I remove the HTTP module
> it works fine. This has been done on windows 2003.
>
>
> Q) Can I move the Auth.dll to a path in local machine rather than
> network path?, if yes how can i do that.
>
>
> Appreciate for your help.
>
>
> Thanks
> SAI
>
Author
11 Apr 2005 5:04 PM
Sai
Thanks for the response, I did try it adding to the global assembly
cache, it didnt work. I got a different error as given below

Parser Error Message: File or assembly name GFRHTTPModule, or one of
its dependencies, was not found.

Source Error:


Line 86:
Line 87:    <httpModules>
Line 88:        <add name="GFRAuth" type="GFRAuth, GFRHTTPModule" />
Line 89:    </httpModules>
Line 90:



Assembly Load Trace: The following information can be helpful to
determine why the assembly 'GFRHTTPModule' could not be loaded.


=== Pre-bind state information ===
LOG: DisplayName = GFRHTTPModule
(Partial)
LOG: Appbase = file://bulls/data/gfrdata
LOG: Initial PrivatePath = bin
Calling assembly : System.Web, Version=1.0.5000.0, Culture=neutral,
PublicKeyToken=b03f5f7f11d50a3a.
===

LOG: Policy not being applied to reference at this time (private,
custom, partial, or location-based assembly bind).
LOG: Post-policy reference: GFRHTTPModule
LOG: Attempting download of new URL
file:///C:/WINDOWS/Microsoft.NET/Framework/v1.1.4322/Temporary ASP.NET
Files/gfr_dev_gfrdata/f475eba2/eeeb5702/GFRHTTPModule.DLL.
LOG: Attempting download of new URL
file:///C:/WINDOWS/Microsoft.NET/Framework/v1.1.4322/Temporary ASP.NET
Files/gfr_dev_gfrdata/f475eba2/eeeb5702/GFRHTTPModule/GFRHTTPModule.DLL.
LOG: Attempting download of new URL
file://bulls/data/gfrdata/bin/GFRHTTPModule.DLL.
LOG: Attempting download of new URL
file://bulls/data/gfrdata/bin/GFRHTTPModule/GFRHTTPModule.DLL.
LOG: Attempting download of new URL
file:///C:/WINDOWS/Microsoft.NET/Framework/v1.1.4322/Temporary ASP.NET
Files/gfr_dev_gfrdata/f475eba2/eeeb5702/GFRHTTPModule.EXE.
LOG: Attempting download of new URL
file:///C:/WINDOWS/Microsoft.NET/Framework/v1.1.4322/Temporary ASP.NET
Files/gfr_dev_gfrdata/f475eba2/eeeb5702/GFRHTTPModule/GFRHTTPModule.EXE.
LOG: Attempting download of new URL
file://bulls/data/gfrdata/bin/GFRHTTPModule.EXE.
LOG: Attempting download of new URL
file://bulls/data/gfrdata/bin/GFRHTTPModule/GFRHTTPModule.EXE.


Thanks
SAI


Adam Goossens wrote:
Show quoteHide quote
> Hi Sai,
>
> If your virtual directory is a network share, when the runs it will
run
> with a very limited set of permissions. Auth.dll must be trying to
> perform some action that requires more permissions than it's been
given.
>
> If you want to install Auth.dll locally, you could give it a strong
name
> (sign it with a key) and then place it into the Global Assembly
Cache.
>
> That way, when it runs Auth.dll *should* be granted the same security

> context as the ASP.NET process (since it's not coming from a network
> share anymore).
>
> HTH,
> -Adam.
>
> Sai wrote:
> > Hi All,
> >
> >
> > I have written a HTTP Module (Auth.dll) to authenticate pages in a
> > virtual directory. The virtual directory points to a network path
(per
> > se \\net1\web). Now I have to place the compiled HTTP Module
Auth.dll
> > and supporting dll's in \\net1\web\bin folder, and copied the
> > web.config to \\net1\web. I am getting security error when I try to
> > access the pages from the virtual folder. If I remove the HTTP
module
> > it works fine. This has been done on windows 2003.
> >
> >
> > Q) Can I move the Auth.dll to a path in local machine rather than
> > network path?, if yes how can i do that.
> >
> >
> > Appreciate for your help.
> >
> >
> > Thanks
> > SAI
> >