<?xml version="1.0" encoding="utf-8" ?>
<?xml-stylesheet type="text/xsl" href="RSS_xslt_style.asp" version="1.0" ?>
<rss version="2.0" xmlns:WebWizForums="http://syndication.webwiz.co.uk/rss_namespace/">
 <channel>
  <title>DevForce Community Forum : Security on Production Server</title>
  <link>http://www.ideablade.com/forum/</link>
  <description>This is an XML content feed of; DevForce Community Forum : DevForce 2010 : Security on Production Server</description>
  <pubDate>Wed, 29 Jul 2026 20:34:02 -700</pubDate>
  <lastBuildDate>Wed, 27 Apr 2011 13:26:29 -700</lastBuildDate>
  <docs>http://blogs.law.harvard.edu/tech/rss</docs>
  <generator>Web Wiz Forums 9.69</generator>
  <ttl>360</ttl>
  <WebWizForums:feedURL>www.ideablade.com/forum/RSS_post_feed.asp?TID=2625</WebWizForums:feedURL>
  <image>
   <title>DevForce Community Forum</title>
   <url>http://www.ideablade.com/forum/forum_images/IdeaBlade_logo_tm.png</url>
   <link>http://www.ideablade.com/forum/</link>
  </image>
  <item>
   <title>Security on Production Server : That worked! I granted the IIS_USERS...</title>
   <link>http://www.ideablade.com/forum/forum_posts.asp?TID=2625&amp;PID=10561#10561</link>
   <description>
    <![CDATA[<strong>Author:</strong> <a href="http://www.ideablade.com/forum/member_profile.asp?PF=1013" rel="nofollow">CodeNameTech</a><br /><strong>Subject:</strong> 2625<br /><strong>Posted:</strong> 27-Apr-2011 at 1:26pm<br /><br /><span ="Apple-style-span" style="font-family: 'Segoe UI'; line-height: normal; font-size: medium; "><b>That worked! &nbsp;</b></span><div style="font-family: 'Segoe UI'; line-height: normal; font-size: medium; "><br></div><div style="font-family: 'Segoe UI'; line-height: normal; font-size: medium; ">I granted the IIS_USERS group "read" and "list folder contents" permissions to the C:\Windows\Temp folder.<div>After restarting IIS, I could successfully&nbsp;log in to my DevForce Silverlight app, using the ASP.NET membership provider.</div><div><br></div><div>Thank-you KimJ! &nbsp;And a HUGE thank-you to Greg, who very kindly took the time, and helped me debug and troubleshoot the issue.</div><div><br></div><div>DevForce rocks!</div><div><br></div><div>Mike</div></div>]]>
   </description>
   <pubDate>Wed, 27 Apr 2011 13:26:29 -700</pubDate>
   <guid isPermaLink="true">http://www.ideablade.com/forum/forum_posts.asp?TID=2625&amp;PID=10561#10561</guid>
  </item> 
  <item>
   <title>Security on Production Server :   Thanks for the research and...</title>
   <link>http://www.ideablade.com/forum/forum_posts.asp?TID=2625&amp;PID=10559#10559</link>
   <description>
    <![CDATA[<strong>Author:</strong> <a href="http://www.ideablade.com/forum/member_profile.asp?PF=11" rel="nofollow">kimj</a><br /><strong>Subject:</strong> 2625<br /><strong>Posted:</strong> 27-Apr-2011 at 8:28am<br /><br />Thanks for the research and help Greg.<div> </div><div>That error message with the web.config is interesting, and some googling on it proved enlightening.  Since the ideablade.configuration isn't being loaded, the ASP.NET support within DevForce isn't kicking in.</div><div> </div><div>Check the permissions on the c:\windows\temp folder.  The IIS_USERS group should have "read" and "list folder contents" permissions.   After changing the folder permissions bounce IIS.   Doing this should allow the ideablade.configuration information to load successfully.</div>]]>
   </description>
   <pubDate>Wed, 27 Apr 2011 08:28:52 -700</pubDate>
   <guid isPermaLink="true">http://www.ideablade.com/forum/forum_posts.asp?TID=2625&amp;PID=10559#10559</guid>
  </item> 
  <item>
   <title>Security on Production Server :   Just to follow up on this...</title>
   <link>http://www.ideablade.com/forum/forum_posts.asp?TID=2625&amp;PID=10558#10558</link>
   <description>
    <![CDATA[<strong>Author:</strong> <a href="http://www.ideablade.com/forum/member_profile.asp?PF=579" rel="nofollow">gregweb</a><br /><strong>Subject:</strong> 2625<br /><strong>Posted:</strong> 27-Apr-2011 at 7:32am<br /><br />Just to follow up on this for the benefit of the DevForce guys, I have been in touch with Mike via email to try to debug this.&nbsp; It seems to be an IIS setting issue as he can upload an empty SL template and log in correctly, but doing the same with the DevForce an empty dev-force template hangs when the user trys to register or log-in.<div>&nbsp;</div><div>The Entity Server is working and connects just fine as the app retrieves data correctly for anonymous user.&nbsp; It is only when you try to log-in with the ASPNETDB that it hangs.&nbsp; </div><div>&nbsp;</div><div>No errors are produced in the Error Log except the following, but I don't know if this has to do with it.</div><div>&nbsp;</div><div>IdeaBladeConfig resolution: File: C:\inetpub\wwwroot\QORSystem\web.config - found but failed to load: Unable to deserialize an object of type 'IdeaBlade.Core.IdeaBladeConfig' from the &lt;{http://schemas.ideablade.com/2010/IdeaBladeConfig}ideablade.configuration&gt; configuration section: Unable to generate a temporary class (result=1). error CS2001: Source file 'C:\Windows\TEMP\40bbrfsu.0.cs' could not be found error CS2008: No inputs specified</div><div>&nbsp;</div><div>The config file looks like this:</div><div>&nbsp;</div><div>&lt;objectServer&gt;<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;serverSettings useAspNetSecurityServices="true" allowAnonymousLogin="true" loginManagerRequired="true" /&gt;&nbsp;&nbsp;&nbsp; <br>&nbsp;&nbsp;&nbsp; &lt;/objectServer&gt;</div><div>&nbsp;</div><div>If the DevForce project is run from VS on his local machine connecting to the remote server, it does connect and log in just fine.</div><div>&nbsp;</div><div>I am not sure what else to try.</div><div>&nbsp;</div><div>Greg</div>]]>
   </description>
   <pubDate>Wed, 27 Apr 2011 07:32:50 -700</pubDate>
   <guid isPermaLink="true">http://www.ideablade.com/forum/forum_posts.asp?TID=2625&amp;PID=10558#10558</guid>
  </item> 
  <item>
   <title>Security on Production Server :   Thanks Greg. Could you send...</title>
   <link>http://www.ideablade.com/forum/forum_posts.asp?TID=2625&amp;PID=10543#10543</link>
   <description>
    <![CDATA[<strong>Author:</strong> <a href="http://www.ideablade.com/forum/member_profile.asp?PF=1013" rel="nofollow">CodeNameTech</a><br /><strong>Subject:</strong> 2625<br /><strong>Posted:</strong> 26-Apr-2011 at 11:40am<br /><br />Thanks Greg.&nbsp; Could you send me an email to:&nbsp; mike at codename dot ca?<div>I will send you the link and username/password.&nbsp; </div><div>I just don't want to post them on a public forum.</div><div><br>Thanks!</div><div>&nbsp;</div><div>Mike</div>]]>
   </description>
   <pubDate>Tue, 26 Apr 2011 11:40:52 -700</pubDate>
   <guid isPermaLink="true">http://www.ideablade.com/forum/forum_posts.asp?TID=2625&amp;PID=10543#10543</guid>
  </item> 
  <item>
   <title>Security on Production Server :   If you post the project somewhere...</title>
   <link>http://www.ideablade.com/forum/forum_posts.asp?TID=2625&amp;PID=10542#10542</link>
   <description>
    <![CDATA[<strong>Author:</strong> <a href="http://www.ideablade.com/forum/member_profile.asp?PF=579" rel="nofollow">gregweb</a><br /><strong>Subject:</strong> 2625<br /><strong>Posted:</strong> 26-Apr-2011 at 11:11am<br /><br />If you post the project somewhere where I can access it, I will look at it for you.&nbsp;&nbsp; The ASP.NET membership has a great deal in it, you don't want to have to rewrite it!<div>&nbsp;</div><div>Greg</div>]]>
   </description>
   <pubDate>Tue, 26 Apr 2011 11:11:48 -700</pubDate>
   <guid isPermaLink="true">http://www.ideablade.com/forum/forum_posts.asp?TID=2625&amp;PID=10542#10542</guid>
  </item> 
  <item>
   <title>Security on Production Server : So, I have resolved the issue...</title>
   <link>http://www.ideablade.com/forum/forum_posts.asp?TID=2625&amp;PID=10540#10540</link>
   <description>
    <![CDATA[<strong>Author:</strong> <a href="http://www.ideablade.com/forum/member_profile.asp?PF=1013" rel="nofollow">CodeNameTech</a><br /><strong>Subject:</strong> 2625<br /><strong>Posted:</strong> 26-Apr-2011 at 11:06am<br /><br />So, I have resolved the issue with the non-devforce application using your suggestion above.<div>The permissions are fine, and everything works great with the non-devforce app. &nbsp;It authenticates to the default aspnetdb.mdf, no problem.</div><div><br></div><div>So, I tried to apply the same principles to my DevForce app, but with no success.</div><div>Even after ensuring that the Application Pool identity has sufficient permissions to the site and database, it still will not authenticate properly.</div><div><br></div><div>As I mentioned above, it will accept the username/password, connect to the database to verify, but then it remains logged out, without giving any error messages.</div><div><br></div><div>I have also checked the configuration of the Windows 2008 server. &nbsp;It has all of the Server Roles and Features that it needs to properly operate IIS &amp; ASP.NET &amp; Silverlight applications (as is evidenced by the fact that the non-devforce app works fine).</div><div><br></div><div>Any other ideas?</div><div><br></div><div>My next step would be to totally scrap the ASP.NET Membership provider, and attempt to build an authentication mechanism from scratch (probably using core WCF), but I would like to avoid re-inventing the wheel if at all possible.</div><div><br></div><div>Thanks again for your help.</div><div>Regards,</div><div><br></div><div>Mike</div>]]>
   </description>
   <pubDate>Tue, 26 Apr 2011 11:06:00 -700</pubDate>
   <guid isPermaLink="true">http://www.ideablade.com/forum/forum_posts.asp?TID=2625&amp;PID=10540#10540</guid>
  </item> 
  <item>
   <title>Security on Production Server : Thanks Greg! I will give that...</title>
   <link>http://www.ideablade.com/forum/forum_posts.asp?TID=2625&amp;PID=10496#10496</link>
   <description>
    <![CDATA[<strong>Author:</strong> <a href="http://www.ideablade.com/forum/member_profile.asp?PF=1013" rel="nofollow">CodeNameTech</a><br /><strong>Subject:</strong> 2625<br /><strong>Posted:</strong> 20-Apr-2011 at 3:45pm<br /><br />Thanks Greg! &nbsp;I will give that a try, and let you know how it goes.<div><br></div>]]>
   </description>
   <pubDate>Wed, 20 Apr 2011 15:45:43 -700</pubDate>
   <guid isPermaLink="true">http://www.ideablade.com/forum/forum_posts.asp?TID=2625&amp;PID=10496#10496</guid>
  </item> 
  <item>
   <title>Security on Production Server :    Are you running your own...</title>
   <link>http://www.ideablade.com/forum/forum_posts.asp?TID=2625&amp;PID=10495#10495</link>
   <description>
    <![CDATA[<strong>Author:</strong> <a href="http://www.ideablade.com/forum/member_profile.asp?PF=579" rel="nofollow">gregweb</a><br /><strong>Subject:</strong> 2625<br /><strong>Posted:</strong> 20-Apr-2011 at 3:44pm<br /><br />Are you running your own instance of WS08?&nbsp; If so, you need to make sure that the permissions are correctly set up for the website.&nbsp; This requires several steps.<div>&nbsp;</div><div>First, verify which application pool is being used by the website.&nbsp; It probably is using DefaultAppPool. Then go to the Advanced Settings of the AppPool and check which identity is being used.&nbsp; It should say "ApplicationPoolIdentity"&nbsp; This in fact means the Identity called "DefaultAppPool" which is created by IIS automatically.</div><div>&nbsp;</div><div>You then need to make sure that the "DefaultAppPool" identity has NTFS permissions on your testbizapp directory.&nbsp; If not, you need to add the permissions.&nbsp; The only way to do that is through a command line tool called ICACLS.</div><div>&nbsp;</div><div><span style="color: black; font-size: 9pt; mso-ansi-: EN-US; mso-fareast-: EN-US; mso-bidi-: AR-SA;"><font face="Courier New">ICACLS C:\inetpub\wwwroot /grant "IIS AppPool\DefaultAppPool":(M)</font></span></div><div><span style="color: black; font-size: 9pt; mso-ansi-: EN-US; mso-fareast-: EN-US; mso-bidi-: AR-SA;"><font face="Courier New">After you run it, open up the permissons GUI and you will see it has been added.&nbsp; Verify that it has the correct permissions.</font></span></div><div><span style="color: black; font-size: 9pt; mso-ansi-: EN-US; mso-fareast-: EN-US; mso-bidi-: AR-SA;"><font face="Courier New"></font></span>&nbsp;</div><div><span style="color: black; font-size: 9pt; mso-ansi-: EN-US; mso-fareast-: EN-US; mso-bidi-: AR-SA;"><font face="Courier New">Here is a thread on the above: <a href="http://forums.iis.net/p/1177263/1978361.aspx" target="_blank">http://forums.iis.net/p/1177263/1978361.aspx</a></font></span></div><div><span style="color: black; font-size: 9pt; mso-ansi-: EN-US; mso-fareast-: EN-US; mso-bidi-: AR-SA;"><font face="Courier New"></font></span>&nbsp;</div><div><span style="color: black; font-size: 9pt; mso-ansi-: EN-US; mso-fareast-: EN-US; mso-bidi-: AR-SA;"><font face="Courier New">Then you need to make sure the Anonymous user identity is set to the Application Pool Identity.&nbsp;</font></span></div><div><span style="color: black; font-size: 9pt; mso-ansi-: EN-US; mso-fareast-: EN-US; mso-bidi-: AR-SA;"><font face="Courier New">To do this, go to the website in IIS 7, and click on "Authentication", then click on "Anonymous Authentication".&nbsp; Click on Edit, and then make sure "Application Pool Identity" is selected.</font></span></div><div><span style="color: black; font-size: 9pt; mso-ansi-: EN-US; mso-fareast-: EN-US; mso-bidi-: AR-SA;"><font face="Courier New"></font></span>&nbsp;</div><div><span style="color: black; font-size: 9pt; mso-ansi-: EN-US; mso-fareast-: EN-US; mso-bidi-: AR-SA;"><font face="Courier New">I am no expert on these things, I have just gotten my own web server to work!</font></span></div><div><span style="color: black; font-size: 9pt; mso-ansi-: EN-US; mso-fareast-: EN-US; mso-bidi-: AR-SA;"><font face="Courier New"></font></span>&nbsp;</div><div><span style="color: black; font-size: 9pt; mso-ansi-: EN-US; mso-fareast-: EN-US; mso-bidi-: AR-SA;"><font face="Courier New">Greg</font></span></div><div>&nbsp;</div><div>&nbsp;</div>]]>
   </description>
   <pubDate>Wed, 20 Apr 2011 15:44:05 -700</pubDate>
   <guid isPermaLink="true">http://www.ideablade.com/forum/forum_posts.asp?TID=2625&amp;PID=10495#10495</guid>
  </item> 
  <item>
   <title>Security on Production Server : Thanks for the reply Greg.So,...</title>
   <link>http://www.ideablade.com/forum/forum_posts.asp?TID=2625&amp;PID=10491#10491</link>
   <description>
    <![CDATA[<strong>Author:</strong> <a href="http://www.ideablade.com/forum/member_profile.asp?PF=1013" rel="nofollow">CodeNameTech</a><br /><strong>Subject:</strong> 2625<br /><strong>Posted:</strong> 20-Apr-2011 at 2:42pm<br /><br />Thanks for the reply Greg.<div><br></div><div>So, I created a blank application using the "Silverlight Business Application" (non-DevForce) template. &nbsp;&nbsp;I then deployed the app using the standard Web Deploy function. &nbsp;I did not create the aspnetdb.mdf file, as this should be created for me the first time I run the app, correct?</div><div><br></div><div>I run the app, click on login, and try to create a new user.&nbsp;It gives me the error:&nbsp;</div><div>"Invoke operation 'CreateUser' failed. &nbsp;Access to the path 'C:\Inetpub\wwwroot\testbizapp\App_Data' is denied."</div><div><br></div><div>So, for some reason, it doesn't have permission to create the database in that directory.</div><div><br></div><div>So, I tried creating the aspnetdb.mdf database first, and then publish it to the server along with everything else. &nbsp;That doesn't work either.</div><div><br></div><div>I didn't encounter any of these issues with the DevForce app, as the SQL Database was not a User Instance. &nbsp;It was a SQL Express DB that was &nbsp;created ahead of time.</div><div><br></div><div>So, I am not sure what's going on. &nbsp;Any ideas?</div>]]>
   </description>
   <pubDate>Wed, 20 Apr 2011 14:42:07 -700</pubDate>
   <guid isPermaLink="true">http://www.ideablade.com/forum/forum_posts.asp?TID=2625&amp;PID=10491#10491</guid>
  </item> 
  <item>
   <title>Security on Production Server :    Just as a test, try a non-dev...</title>
   <link>http://www.ideablade.com/forum/forum_posts.asp?TID=2625&amp;PID=10489#10489</link>
   <description>
    <![CDATA[<strong>Author:</strong> <a href="http://www.ideablade.com/forum/member_profile.asp?PF=579" rel="nofollow">gregweb</a><br /><strong>Subject:</strong> 2625<br /><strong>Posted:</strong> 20-Apr-2011 at 1:16pm<br /><br />Just as a test, try a non-dev force template on your local machine, and then uploading it and see if it works.&nbsp; If it does, it means it is something with DevForce, if it doesn't, it means it is something with the configuration on the server.<div>&nbsp;</div><div>Are you using the same connection string locally as well as on the production server?&nbsp; In other words, hit the production server from your Dev-Machine for the data&nbsp;- it should connect just fine, but you can get more data about what's going on from VS.</div><div>&nbsp;</div><div>You can also&nbsp;pull out Fiddler and see what's going back and forth across the wire.</div><div>&nbsp;</div><div>Greg</div><span style="font-size:10px"><br /><br />Edited by gregweb - 20-Apr-2011 at 1:16pm</span>]]>
   </description>
   <pubDate>Wed, 20 Apr 2011 13:16:20 -700</pubDate>
   <guid isPermaLink="true">http://www.ideablade.com/forum/forum_posts.asp?TID=2625&amp;PID=10489#10489</guid>
  </item> 
  <item>
   <title>Security on Production Server : I just realized that my issue...</title>
   <link>http://www.ideablade.com/forum/forum_posts.asp?TID=2625&amp;PID=10483#10483</link>
   <description>
    <![CDATA[<strong>Author:</strong> <a href="http://www.ideablade.com/forum/member_profile.asp?PF=1013" rel="nofollow">CodeNameTech</a><br /><strong>Subject:</strong> 2625<br /><strong>Posted:</strong> 20-Apr-2011 at 11:20am<br /><br />I just realized that my issue is very similar to this one:<div><a href="http://www.ideablade.com/forum/forum_posts.asp?TID=2474&amp;title=deployment-issue" target="_blank">http://www.ideablade.com/forum/forum_posts.asp?TID=2474&amp;title=deployment-issue</a><br></div><div><br></div><div>However, how that was solved was by deleting all project files on the server, and re-uploading.</div><div>That did not work for me, unfortunately.</div><div><br></div>]]>
   </description>
   <pubDate>Wed, 20 Apr 2011 11:20:34 -700</pubDate>
   <guid isPermaLink="true">http://www.ideablade.com/forum/forum_posts.asp?TID=2625&amp;PID=10483#10483</guid>
  </item> 
  <item>
   <title>Security on Production Server : I am experiencing an issue when...</title>
   <link>http://www.ideablade.com/forum/forum_posts.asp?TID=2625&amp;PID=10482#10482</link>
   <description>
    <![CDATA[<strong>Author:</strong> <a href="http://www.ideablade.com/forum/member_profile.asp?PF=1013" rel="nofollow">CodeNameTech</a><br /><strong>Subject:</strong> 2625<br /><strong>Posted:</strong> 20-Apr-2011 at 11:14am<br /><br />I am experiencing an issue when trying to deploy my finished Silverlight application.<div>My application is based on the "DevForce Silverlight Business Application" template (DevForce 6.0.7), which included support for the authentication/authorization features of ASP.Net's membership provider.</div><div> </div><div><br></div><div>When it is running on my development machine, everything works great - login/logout function works, role authorization works, etc.</div><div><br></div><div>As soon as I upload the application to my production server (an Amazon EC instance running Win2008 server), the security features no longer work correctly. &nbsp;No changes are made to the code before deployment.</div><div><br></div><div>And the weird thing is, it does not even report an error - it just doesn't login.</div><div>To explain: &nbsp;I click on the link in the Silverlight application to login; it brings up the dialog box to enter username &amp; password; if I type in the incorrect password, it responds correctly by saying they are invalid credentials (so it is connecting to the database). &nbsp;If I enter the correct password, it accepts the login, closes the dialog box, but does not update the application, and it remains logged out. &nbsp;No error messages, no indications that anything is wrong at all.</div><div><br></div><div>I can't debug the application, as the problem doesn't happen when it is running on my machine! &nbsp;There is no debugger on the production server.</div><div><br></div><div>Here's my full environment:</div><div>&nbsp;- Silverlight 4</div><div>&nbsp;- DevForce 6.0.7</div><div>&nbsp;- IIS 7 on production server (IISExpress on dev machine)</div><div>&nbsp;- SQL Server Express (on both production server and dev machine)</div><div>&nbsp;- I have integrated the ASP.Net membership tables into my main database using the aspnet_regsql.exe command. &nbsp;</div><div>&nbsp;- Web.config file has been verified to use Membership provider correctly.</div><div><br></div><div>It's hard to fully detail everything in this post, so feel free to ask more questions if you think you might know what it is.</div><div>Any help is greatly appreciated.</div><div><br></div><div>Thanks!</div><div><br></div><div>Mike</div><div><br></div>]]>
   </description>
   <pubDate>Wed, 20 Apr 2011 11:14:40 -700</pubDate>
   <guid isPermaLink="true">http://www.ideablade.com/forum/forum_posts.asp?TID=2625&amp;PID=10482#10482</guid>
  </item> 
 </channel>
</rss>