Browse by Tags

• Development Phase
• Implementation
• Performance
• Planning Phase
• Practices
• Security
• Test Phase
• Tools

Authentication And Identity Flow When ASP Page Consumes ASP.NET Web Service

"Classic" ASP has application isolation that is different from ASP.NET. Here is one of the real world scenarios where it might matter. There is a legacy web application written in ASP and hosted on Win2K3 box (IIS 6.0). It is of course in the process Read More...

Posted 05 September 07 05:04 by alikl | 4 Comments   
Filed under Security, Deployment Phase, Authentication, Planning Phase

Client Certificates Authentication - Dirty Trick To Disable CRL Check. For Demos Only!

My lab domain has MS CA installed in it so I am able to issue certificates to the left and to the right. Recently I spent some time to understand why client certificates authentication does not work. More precisely the certificates dialog box was offering Read More...

Posted 14 August 07 04:12 by alikl | 1 Comments   
Filed under Security, Deployment Phase, Authentication

Web Services Over SSL - Is It Really That Slow Like They Say?

My answer is "no" . I am working on solution where there is no Windows Active Directory Domain so we cannot utilize our beloved Kerberos and Windows Integrated Authentication saving big on configuration and management while taking advantage of increased Read More...

Posted 01 August 07 03:35 by alikl | 2 Comments   
Filed under Security, Development Phase, Implementation, Deployment Phase, Performance, Authentication, Planning Phase

T-Shooting Kerberos

I was delivering "Authentication Explained" session for Security User Group. First off - thanks for attending the session! The session was based on "Authentication Explained" workshop . During the session I was demoing the following topics: Identity Flow Read More...

Posted 04 July 07 10:16 by alikl | 2 Comments   
Filed under Test Phase, Security, Implementation, Deployment Phase, Practices, Authentication

Who Access My File?

In my post File Access Auditing - I Am Not Afraid Of GPO I've digested technet documentation on how to set Active Directory Group Policy Object (AD GP) to enable file access auditing as security measure to prevent repudiation. It is heavy weight techniques Read More...

Posted 03 April 07 07:02 by alikl | 7 Comments   
Filed under Test Phase, Security, Tools, Development Phase, Deployment Phase, Authentication

Search

This Blog

• Home
• Email