Monthly Archives: January 2008

UserName SupportingToken in WCF

Posted on January 31, 2008 by Dominick Baier

There has been some mentioning of supporting tokens recently (here and here). Supporting tokens allow adding additional tokens to a SOAP security header – at least one token (usually the primary token) must be capable of providing the necessary key … Continue reading →

Posted in ASP.NET, WCF | 5 Comments

WCF 3.5 and Partial Trust

Posted on January 29, 2008 by Dominick Baier

This is a good summary of things that work and don’t work when WCF is used in partially trusted AppDomains. I especially like this sentence: “The best way to discover that a piece of information or action is unavailable when … Continue reading →

Posted in WCF | Leave a comment

Web Deployment Projects for Visual Studio 2008

Posted on January 26, 2008 by Dominick Baier

(note to self) download here.

Posted in Uncategorized | Leave a comment

Jörg Neumann in da House

Posted on January 24, 2008 by Dominick Baier

I am very happy to announce that Jörg Neumann has joined thinktecture. Jörg is the UI master, a SQL Server expert and an overall really great guy. Looking forward working with him! http://www.thinktecture.com/staff/joerg

Posted in Uncategorized | Leave a comment

LeastPrivilege on RunAs Radio

Posted on January 24, 2008 by Dominick Baier

A few weeks ago I did a recording with Richard and Greg for RunAs Radio. That was fun. It is now online. Have fun and support the show! http://www.runasradio.com/default.aspx?showNum=41

Posted in Uncategorized | Leave a comment

ASP.NET Internals Spelunking II

Posted on January 18, 2008 by Dominick Baier

Suppose you want to step through one of the built-in HttpModules in ASP.NET. This doesn’t work by traversing the callstack. There is another little “trick” to get this working: Go to Debug/New Breakpoint/Break at Function Enter the function name, e.g. … Continue reading →

Posted in ASP.NET | Leave a comment

ASP.NET Internals Spelunking

Posted on January 18, 2008 by Dominick Baier

When I wrote the ASP.NET book I pretty much lived in Reflector 24/7 to figure out all the gory implementation details. Back then it would have been great to be able to simply set breakpoints in some of the low … Continue reading →

Posted in ASP.NET | Leave a comment

Simplified Impersonation Model

Posted on January 16, 2008 by Dominick Baier

While playing with the new Named Pipe classes in 3.5 I noticed that a simpler model for impersonating the client is used here. Instead of putting the burden on the user to call Impersonate on a WindowsIdentity (and making sure … Continue reading →

Posted in Uncategorized | Leave a comment

Most popular Content in 2007

Posted on January 15, 2008 by Dominick Baier

Just looked through my server logs… Top Downloads: InfoCardSelector for ASP.NET (1508) HTTP.SYS config utility (819) GetCertKeyFile (732) IfConfig 2.11 (683) SslHelper (588)   Top Documents: PenTest Slides from WinDev 2004 (1682) Integration mit Windows Security from Basta 2006 (1125) … Continue reading →

Posted in Uncategorized | 2 Comments

HTTP Basic Authentication against Non-Windows Accounts in IIS7

Posted on January 12, 2008 by Dominick Baier

The last posts (here, here, here and here) show how to build an HTTP Basic Authentication module using a membership provider (and including WCF support). Moving this code to IIS7 is technically not very difficult – but the mindset changes. … Continue reading →

Posted in ASP.NET, WCF | 3 Comments