Security Issue ASP.NET-IIS

Discussion in 'ASP General' started by Reza Alirezaei, May 26, 2004.

  1. Is it possible to define an account in <Identity> in web.config which
    dosen't exist in

    domain???

    The following line is in somebody's ASP.Net application:
    I was viewing somebody's application I found the following line in his
    web.config
    <identity impersonate="true" userName="DOMAIN_NAME\ASP_NET_TESTER"
    password="TEST"/>

    but problem is that I didn't find user ASP_NET_TESTER on the domain and
    application is working fine.
    By the way ,,he has enabeld annonymous access to his web application using a
    completely diferent account called "IUSR_DEV"


    thanks for your help.
    Reza Alirezaei, May 26, 2004
    #1
    1. Advertising

  2. http://www.aspfaq.com/5002

    --
    Aaron Bertrand
    SQL Server MVP
    http://www.aspfaq.com/




    "Reza Alirezaei" <> wrote in message
    news:...
    > Is it possible to define an account in <Identity> in web.config which
    > dosen't exist in
    >
    > domain???
    >
    > The following line is in somebody's ASP.Net application:
    > I was viewing somebody's application I found the following line in his
    > web.config
    > <identity impersonate="true" userName="DOMAIN_NAME\ASP_NET_TESTER"
    > password="TEST"/>
    >
    > but problem is that I didn't find user ASP_NET_TESTER on the domain and
    > application is working fine.
    > By the way ,,he has enabeld annonymous access to his web application using

    a
    > completely diferent account called "IUSR_DEV"
    >
    >
    > thanks for your help.
    >
    >
    >
    >
    >
    Aaron Bertrand - MVP, May 26, 2004
    #2
    1. Advertising

Want to reply to this thread or ask your own question?

It takes just 2 minutes to sign up (and it's free!). Just click the sign up button to choose a username and then you can ask your own questions on the forum.
Similar Threads
  1. Nick Palmer
    Replies:
    0
    Views:
    1,958
    Nick Palmer
    Jan 29, 2005
  2. Jon Davis
    Replies:
    3
    Views:
    577
    Jon Davis
    Jun 21, 2007
  3. JimLad
    Replies:
    5
    Views:
    1,596
    JimLad
    Oct 9, 2007
  4. Dinis Cruz

    Asp.Net Security Analyser (new security tool by DDPlus)

    Dinis Cruz, Oct 8, 2003, in forum: ASP .Net Security
    Replies:
    2
    Views:
    136
    Dinis Cruz
    Oct 11, 2003
  5. Michael Randrup
    Replies:
    3
    Views:
    302
    Henning Krause [MVP]
    Mar 27, 2006
Loading...

Share This Page