Comments for FatLemon http://www.fatlemon.co.uk Contemplations on software development and human factors, by Andrew Freemantle Mon, 17 May 2010 11:14:00 +0000 http://wordpress.org/?v=2.9.1 hourly 1 Comment on Securing ASP.Net Web Services with Forms Authentication by Lawrence Zhang http://www.fatlemon.co.uk/2010/04/securing-asp-net-web-services-with-forms-authentication/comment-page-1/#comment-24 Lawrence Zhang Mon, 17 May 2010 11:14:00 +0000 http://www.fatlemon.co.uk/?p=44#comment-24 Hi, Mr. Andrew, I've found the answer that I asked you a little earlier this morning, because I forgot to put the same machineKey tag in two web.config between web service and my website, and before even not have a machineKey tag in web.config when I sent passwordFormat=Encrypted,thank you for your article again. Kind Regards Lawrence Zhang Hi, Mr. Andrew,
I’ve found the answer that I asked you a little earlier this morning, because I forgot to put the same machineKey tag in two web.config between web service and my website, and before even not have a machineKey tag in web.config when I sent passwordFormat=Encrypted,thank you for your article again.

Kind Regards
Lawrence Zhang

]]> Comment on Securing ASP.Net Web Services with Forms Authentication by Andrew http://www.fatlemon.co.uk/2010/04/securing-asp-net-web-services-with-forms-authentication/comment-page-1/#comment-23 Andrew Mon, 17 May 2010 06:00:30 +0000 http://www.fatlemon.co.uk/?p=44#comment-23 <strong>@Lawrence</strong> - Thank you! You're welcome :) <br /> Though the article doesn't cover this specifically, storing the passwords either encrypted or hashed is the right thing to do, and the <code>MembershipProvider.PasswordFormat</code> dictates how the passwords are stored in the database. <br /> So, if you're using <code>MembershipProvider.PasswordFormat = Encrypted</code> you'll need to either encrypt the password supplied to the Web Service, or decrypt the password from the Membership Provider. There are methods on the <code>MembershipProvider</code> class to do this: <br /> <code>MembershipProvider.EncryptPassword()</code> and <code>MembershipProvider.DecryptPassword()</code> - Note that if you're using the Encrypted format, then you'll need to supply the encryption key information in the machineKey element of your .config (<a href="http://msdn.microsoft.com/en-us/library/system.web.security.membershipprovider.passwordformat.aspx" rel="nofollow">more info here</a>) <br /> However, if you're <code>MembershipProvider.PasswordFormat = Hashed</code> then you can't decrypt the stored password, so you're only left with encrypting the password supplied and then comparing the 2 hashes. <br /> <a href="http://msdn.microsoft.com/en-us/library/system.web.security.membershipprovider.passwordformat.aspx" rel="nofollow">This documentation might be useful</a> <br /> <a href="http://forums.asp.net/p/991824/1289770.aspx#1290035" rel="nofollow">And here's an example of the machineKey element</a> (for Encrypted password storage) <br /> Let us know know how you get on! @Lawrence – Thank you! You’re welcome :)

Though the article doesn’t cover this specifically, storing the passwords either encrypted or hashed is the right thing to do, and the MembershipProvider.PasswordFormat dictates how the passwords are stored in the database.

So, if you’re using MembershipProvider.PasswordFormat = Encrypted you’ll need to either encrypt the password supplied to the Web Service, or decrypt the password from the Membership Provider. There are methods on the MembershipProvider class to do this:

MembershipProvider.EncryptPassword() and MembershipProvider.DecryptPassword() – Note that if you’re using the Encrypted format, then you’ll need to supply the encryption key information in the machineKey element of your .config (more info here)

However, if you’re MembershipProvider.PasswordFormat = Hashed then you can’t decrypt the stored password, so you’re only left with encrypting the password supplied and then comparing the 2 hashes.

This documentation might be useful

And here’s an example of the machineKey element (for Encrypted password storage)

Let us know know how you get on!

]]> Comment on Securing ASP.Net Web Services with Forms Authentication by Lawrence Zhang http://www.fatlemon.co.uk/2010/04/securing-asp-net-web-services-with-forms-authentication/comment-page-1/#comment-22 Lawrence Zhang Mon, 17 May 2010 03:19:12 +0000 http://www.fatlemon.co.uk/?p=44#comment-22 Hi Mr. Andrew, Thank you very much for your article of Securing ASP.NET Web Service..., One thing I'd like to ask you, why I have to set MembershipProvider:passwordFormat=Clear before I create a user account, then I create a user account, the password stored in plain text, so I can pass the username and password from a test website to Web Service,just like your demonstration. If I create a account using passwordFormat=Encrypted or Hashed, the username and password can't pass from a test website webform input even hard coded to the web Service,how to solve it ? Tnanks. Kind Regards Lawrence Zhang Hi Mr. Andrew,
Thank you very much for your article of Securing ASP.NET Web Service…,
One thing I’d like to ask you, why I have to set MembershipProvider:passwordFormat=Clear before I create a user account, then I create a user account, the password stored in plain text, so
I can pass the username and password from a test website to Web Service,just
like your demonstration. If I create a account using passwordFormat=Encrypted or Hashed, the username and password can’t pass from a test website webform input even hard coded to the web Service,how to solve it ? Tnanks.

Kind Regards
Lawrence Zhang

]]> Comment on Increasing Processes, Sessions and Transactions in Oracle XE by Eddie Hapson http://www.fatlemon.co.uk/2009/06/increasing-processes-sessions-and-transactions-in-oracle-xe/comment-page-1/#comment-21 Eddie Hapson Mon, 17 May 2010 03:09:24 +0000 http://www.fatlemon.co.uk/?p=29#comment-21 Wow! this info saves me. Thank you so much Sir Andrew for this guide...it really helps me a lot... Wow! this info saves me. Thank you so much Sir Andrew for this guide…it really helps me a lot…

]]> Comment on Increasing Processes, Sessions and Transactions in Oracle XE by Andrew http://www.fatlemon.co.uk/2009/06/increasing-processes-sessions-and-transactions-in-oracle-xe/comment-page-1/#comment-20 Andrew Fri, 19 Mar 2010 22:28:14 +0000 http://www.fatlemon.co.uk/?p=29#comment-20 @Sram - you shouldn't have to edit the pfile manually to get these values to save permanently - that's why we're using the 'scope' argument. Are you logging in as sysdba? Are you including the 'scope = spfile' on the alter system commands? @Sram – you shouldn’t have to edit the pfile manually to get these values to save permanently – that’s why we’re using the ’scope’ argument.

Are you logging in as sysdba?
Are you including the ’scope = spfile’ on the alter system commands?

]]> Comment on Increasing Processes, Sessions and Transactions in Oracle XE by Sram http://www.fatlemon.co.uk/2009/06/increasing-processes-sessions-and-transactions-in-oracle-xe/comment-page-1/#comment-19 Sram Fri, 19 Mar 2010 14:03:52 +0000 http://www.fatlemon.co.uk/?p=29#comment-19 Hi Andrew, I altered the sessions to 150, but everytime I restart the xe database it defaults to 49. Do I have to configure the pfile manually if I want to store it permanently? Thanks Hi Andrew,

I altered the sessions to 150, but everytime I restart the xe database it defaults to 49. Do I have to configure the pfile manually if I want to store it permanently?

Thanks

]]> Comment on Increasing Processes, Sessions and Transactions in Oracle XE by Kxxx78 http://www.fatlemon.co.uk/2009/06/increasing-processes-sessions-and-transactions-in-oracle-xe/comment-page-1/#comment-18 Kxxx78 Thu, 18 Feb 2010 15:15:58 +0000 http://www.fatlemon.co.uk/?p=29#comment-18 Thank you very much, you save me today :) ! Thank you very much, you save me today :) !

]]> Comment on Increasing Processes, Sessions and Transactions in Oracle XE by Christoph Jahn http://www.fatlemon.co.uk/2009/06/increasing-processes-sessions-and-transactions-in-oracle-xe/comment-page-1/#comment-17 Christoph Jahn Mon, 15 Feb 2010 04:25:17 +0000 http://www.fatlemon.co.uk/?p=29#comment-17 Thanks for this. Whenever I need to install XE, I go to this site afterwards to change the settings (fatlemon is so easy to remember :-) ) Thanks for this. Whenever I need to install XE, I go to this site afterwards to change the settings (fatlemon is so easy to remember :-) )

]]> Comment on Increasing Processes, Sessions and Transactions in Oracle XE by Andrew http://www.fatlemon.co.uk/2009/06/increasing-processes-sessions-and-transactions-in-oracle-xe/comment-page-1/#comment-16 Andrew Thu, 11 Feb 2010 20:33:06 +0000 http://www.fatlemon.co.uk/?p=29#comment-16 Hi Hassene, I'm glad it helped you :) While there will be an answer to your question of what are the maximum values for Oracle Express, there are a few key factors I'd need to know first: 1. What Operating System are you running it on? 2. Is the Operating System 32bit or 64bit (although Oracle XE is 32bit only, this still affects how many processes the OS can handle in total) 3. How much RAM is available to the Operating System Hi Hassene, I’m glad it helped you :)

While there will be an answer to your question of what are the maximum values for Oracle Express, there are a few key factors I’d need to know first:

1. What Operating System are you running it on?
2. Is the Operating System 32bit or 64bit (although Oracle XE is 32bit only, this still affects how many processes the OS can handle in total)
3. How much RAM is available to the Operating System

]]> Comment on Increasing Processes, Sessions and Transactions in Oracle XE by Hassene http://www.fatlemon.co.uk/2009/06/increasing-processes-sessions-and-transactions-in-oracle-xe/comment-page-1/#comment-15 Hassene Thu, 11 Feb 2010 08:53:03 +0000 http://www.fatlemon.co.uk/?p=29#comment-15 thanks a lot you really help me but are this values the max we can choose for oracle express ? processes = 150 sessions = 300 transactions = 330 ! thanks a lot

you really help me

but are this values the max we can choose for oracle express ?

processes = 150

sessions = 300

transactions = 330

!

]]>