| |
browse.develop.com
Browse.develop.com is a community that was established to collect and
organize valuable web information. Our technical staff have selected and
indexed information and courses that they feel will help you stay
current on best practices across the SDLC.
|
56 Articles match "Windows"
See all articles with
"Windows"
| The Latest from www.leastprivilege.com | MORE | | Identity in.NET 4.5–Part 3: (Breaking) changes Since WIF is part of the Windows operating system and also supported in future versions of.NET, there is no urgent need to migrate to the 4.5 I recently started porting a private build of Thinktecture.IdentityModel to.NET 4.5 and noticed a number of changes. The good news is that I can delete large parts of my library because many features are now in the box. Along the way I found some other nice additions. ClaimsIdentity now has methods to query the claims collection, e.g. HasClaim() , FindFirst() , FindAll(). ClaimsPrincipal has those methods as well. Services) and System.ServiceModel. www.leastprivilege.com - Wednesday, April 4, 2012 Identity in.NET 4.5–Part 2: Claims Transformation in ASP.NET (Beta 1) An example would be a Windows token – it contains things like the name of the user and to which groups he belongs to. In my last post I described how every identity in.NET 4.5 is now claims-based. If you are coming from WIF you might think, great – how do I transform those claims? Sidebar: What is claims transformation? One of the most essential features of WIF (and.NET 4.5) is the ability to transform credentials (or tokens) to claims. During that process the “low level” token details are turned into claims. That information will be surfaced as claims of type Name and GroupSid. www.leastprivilege.com - Tuesday, April 3, 2012 | | The Best from www.leastprivilege.com | MORE | | ASP.NET WebAPI Security 2: Identity Architecture Here the principal property gets only set when the host is configured for Windows authentication (inconsisteny). Pedro has beaten me to the punch with a detailed post (and diagram) about the WebAPI hosting architecture. So go read his post first, then come back so we can have a closer look at what that means for security. The first important takeaway is that WebAPI is hosting independent- currently it ships with two host integration implementations – one for ASP.NET (aka web host) and WCF (aka self host). Pedro nicely shows the integration into the web host. Why so generic? Stay tuned. www.leastprivilege.com - Thursday, March 8, 2012 ASP.NET WebAPI Security 5: JavaScript Clients This is more or less just like a normal desktop client – either running in the browser, or if you think of Windows 8 Metro style apps as “real” desktop apps. All samples I showed in my last post were in C#. Christian contributed another client sample in some strange language that is supposed to work well in browsers ;). JavaScript client scenarios. There are two fundamental scenarios when it comes to JavaScript clients. The most common is probably that the JS code is originating from the same web application that also contains the web APIs. come to mind. ajax({. else {. ajax({. www.leastprivilege.com - Thursday, March 15, 2012 WIF, ADFS 2 and WCF–Part 1: Overview They are grouped by the WS-Trust version they support (/13 and /2005), the client credential type (/windows*, /username*, /certificate*) and the security mode (*transport, *mixed and message). A lot has been written already about passive federation and integration of WIF and ADFS 2 into web apps. The whole active/WS-Trust feature area is much less documented or covered in articles and blogs. Over the next few posts I will try to compile all relevant information about the above topics – but let’s start with an overview. in IdP –> RSTS scenario). Stay tuned…. www.leastprivilege.com - Monday, October 11, 2010 | - Identity in.NET 4.5–Part 4: Claims over Kerberos
Today I found this article about the new Kerberos features in Windows Server 8. It also mentions claims and how to enable them. Made me smile ;). IdentityModel www.leastprivilege.com - Saturday, April 7, 2012 - Identity in.NET 4.5–Part 3: (Breaking) changes
Since WIF is part of the Windows operating system and also supported in future versions of.NET, there is no urgent need to migrate to the 4.5 I recently started porting a private build of Thinktecture.IdentityModel to.NET 4.5 and noticed a number of changes. The good news is that I can delete large parts of my library because many features are now in the box. Along the way I found some other nice additions. ClaimsIdentity now has methods to query the claims collection, e.g. HasClaim() , FindFirst() , FindAll(). ClaimsPrincipal has those methods as well. Services) and System.ServiceModel. www.leastprivilege.com - Wednesday, April 4, 2012 - Identity in.NET 4.5–Part 2: Claims Transformation in ASP.NET (Beta 1)
An example would be a Windows token – it contains things like the name of the user and to which groups he belongs to. In my last post I described how every identity in.NET 4.5 is now claims-based. If you are coming from WIF you might think, great – how do I transform those claims? Sidebar: What is claims transformation? One of the most essential features of WIF (and.NET 4.5) is the ability to transform credentials (or tokens) to claims. During that process the “low level” token details are turned into claims. That information will be surfaced as claims of type Name and GroupSid. www.leastprivilege.com - Tuesday, April 3, 2012 - Token based Authentication and Claims for Restful Services
While there is limited support for WCF WebServiceHost based services (for standard credential types like Windows and Basic), there is no ready to use plumbing for RESTful services that do authentication based on tokens. WIF as it exists today is optimized for web applications (passive/WS-Federation) and SOAP based services (active/WS-Trust). This is not an oversight from the WIF team, but the REST services security world is currently rapidly changing – and that’s by design. So it didn’t make sense to bake that into the core feature set of WIF. Here’s how. Claims transformation. www.leastprivilege.com - Tuesday, November 15, 2011 - How to build a Development/Test/Demo CA
So I ended up running Windows Cerificate Services which proved to be an easy to use, robust solution. Install Windows Server (2003 or 2008) - either phyiscally or virtually. You can also set the lifetime of that revocation list to some high value (like 5 years), so Windows will cache the list. I often need X509 certificates - but I never really became friendly with makecert. You can have one at home or carry it around in a VM. Perfect. There are some gotchas you can run into and I refined my configuration over the years. Basic Installation. Install Certificate Services. www.leastprivilege.com - Thursday, August 14, 2008 - Username/Password Validation with Geneva
By default the Windows handler is registered and unless you have a used a username/password pair that incidentally matches a Windows account on your system, username authentication will fail. You first have to remove the windows handler - or clear the handler collection and add your own handler to it: < add type = " LeastPrivilege.SimpleUserNameSecurityTokenHandler, AutoClaims " /> There is also a thread on MSDN where Pedro shows how to do that programmatically. This is also true for username/password authentication. if (unToken.UserName != unToken.Password). {. www.leastprivilege.com - Thursday, November 13, 2008 - WIF, ADFS 2 and WCF–Part 5: Service Client (more Flexibility with WSTrustChannelFactory)
The following code requests a token for a WCF service from ADFS 2: private static SecurityToken GetToken(). {. // Windows authentication over transport security. See the previous posts first. WIF includes an API to manually request tokens from a token service. This gives you more control over the request and more flexibility since you can use your own token caching scheme instead of being bound to the channel object lifetime. The API is straightforward. You first request a token from the STS and then use that token to create a channel to the relying party service. Stay tuned. www.leastprivilege.com - Thursday, October 14, 2010 %>
486 Articles match "Windows"
See all articles with
"Windows"
| The Latest from DevelopMentor | MORE | | Installing MongoDB on Windows and OS X Here are two 7-minute walkthroughs for installing MongoDB as a Windows service / OS X daemon. Windows: OS X: Feedback welcome. 'Ready to get started with NoSQL and MongoDB? These are both excepts from my upcoming online MongoDB course for DevelopMentor. You can take the first 1 1/2 hours for free here: Early access: MongoDB and NoSQL for.NET developers. cheers. mkennedy. Filed under: NoSQL Tagged: LearningLine , NoSQL , Open Source , Screencasts. NoSQL LearningLine Open Source Screencasts Michael C. Kennedy's Weblog - Thursday, May 2, 2013 A Roundup of MongoDB Management Tools Robomongo, price: $0 / open-source, platforms: Windows, OS X, Linux. The shell , price: $0 / open-source, platforms: Windows, OS X, Linux. Mongovue , price: $0 / $35 / $up, platforms: Windows. MongoVUE is an innovative MongoDB desktop application for Windows OS that gives you an elegant and highly usable GUI interface to work with MongoDB. LINQPad, , price: $0 / $39, platforms: Windows. REST view, price: $0 / open-source, platforms: Windows, OS X, Linux. Genghis, price: $0 / open-source, platforms: Windows, OS X, Linux. The news is good. link]. Michael C. Kennedy's Weblog - Monday, April 22, 2013 The Architecture of WCF Over the lifetime of Windows there have been many technologies to achieve this: sockets, DCOM, MSMQ,NET Remoting, ASMX Web Services and more. You can either create the ServiceHost instance yourself and call Open on it (known as self hosting) or you can get the Windows Process Activation Service to do this (formally known as WAS hosting). 'Before WCF it was, of course, possible for software running on different machines to communicate. The problem is all of these have different APIs and different levels of capability. Messages. Channels. WCF, as of 4.5, Encoders. Contracts. DevelopMentor Courses - Sunday, April 7, 2013 | -
| The Best from DevelopMentor | MORE | - Using Windows 7 Search to delete ‘obj’ folders
One easy way is to use Windows 7 Search to look for all the ‘obj’ folders and just delete them manually. For a complete overview of the Windows 7 Search syntax go to: [link]. Tags: Windows 7 Visual Studio will create ‘obj’ folders within your solution to store a bunch of temporary files. You can remove these files in a number of ways. To do this I use the ‘kind’ keyword in the query box. Tip: Just typing ‘kind:’ will give you a list of choices to choose from. The Blomsma Code - Tuesday, February 9, 2010 - Unblocking assemblies in Windows 7
I just ran into a little problem when attempting to run a Visual Studio unit test on my Windows 7 machine. Tags: NET C# Windows 7 downloaded log4net.dll and wanted to use it in a project, but when running the unit test I ran into the following error: Failed to queue test run 'Mark@L-ONE 2009-10-11 14:08:38': Test Run deployment issue: The location of the file or directory 'c:usersmarkdocumentsvisual studio 2008projectssourcesdevelopone.myproject.unittestsbindebuglog4net.dll' is not trusted. Turns out that a downloaded file is blocked. The Blomsma Code - Sunday, October 11, 2009 - Have to learn Japanese
Tags: Windows Live The Blomsma Code - Tuesday, December 1, 2009 - Playing around with Windows Live Sync 2011 beta
I have been an avid user of Mesh and was so pleased with the beta that I was hesitant to switch to Windows Live Sync 2011 beta. You may want to check with you IT guy to see how he feels about the security risks, but for me this works really well (I do make sure that my Windows Live, Facebook and Google passwords are all different!). Tags: Windows Live But since the Mesh page started saying that the service is to be replaced I figured I ‘d better get my machines switched over. For those who don’t know: Live Sync allows you to synchronize folders between devices. The Blomsma Code - Sunday, September 12, 2010 - Just took a walk around Fenway – using Bing Maps
Tags: Windows Live The Blomsma Code - Wednesday, December 2, 2009 %>
| |   |
