schannel app
Mon, 5 May 2008 13:00:56 -0700 (PDT)
All:
I work for an application-service provider.. sort of... anyway. One
of our many applications is actually a TN3270/telnet application which
has hooks into a microsoft DLL to tunnel/encrypt the user traffic over
SSL. So on the network, we see encrypted packets destined to/from
port 443.
This traffic h ...
|
Application icon in Security Warning dialog
Mon, 5 May 2008 11:20:00 -0700
I'm using signcode.exe to apply a code signing certificate to sign my
installation program. When the user is launching the installer, they're
(expectedly) seeing the "Open File - Security Warning" dialog to confirm that
they want to execute, and the proper code signing certificate is being
referenced. Howeve ...
|
Diagnosing crypto problem
Fri, 2 May 2008 08:56:00 -0700
This is embarrasing.
I wrote quite a complicated DRM type system some 5 years ago and it work
fine (after a fair amount of sweat). In fact it still does.
However, I'm now in the process of moving it on to a new machine and I'm
struggling. Of course I cannot find the documentation I wrote (possibly the ...
|
Getting all security groups without a token?
Thu, 1 May 2008 19:18:00 -0700
Please excuse the long post. I hope I have provided enough background.
I have an application that applies security-group based authorization rules.
It uses CheckTokenMembership for groups that it cares about, using a token
obtained through LogonUser or via SSPI.
I now have a case where I need to apply th ...
|
Non-interactive process launched by DCOM does not have network access
Thu, 1 May 2008 13:50:49 -0400
I have a DCOM server that when launched remotely, running in a
non-interactive window station, does not have access to shared files on the
network that the launching user should have access to. I am getting
ERROR_ACCESS_DENIED.
Is this because of the way the DCOM Server Process Launcher logs the user
in? ...
|
Windows Firewall blocking LSASS, causing DCOM launch error
Thu, 1 May 2008 13:29:13 -0400
I am having a problem with several Windows Server 2003 SP1 servers on our
domain that have the Windows Firewall service running, but Windows Firewall
configured "off" (by domain policy). I turned on ALL auditing (since I don't
know what I am looking for!) and see that Windows Firewall is blocking LSASS
liste ...
|
Email singing failing Outlook 2007 on Vista
Thu, 1 May 2008 03:40:00 -0700
Hi All,
Email singing is failing with Outlook 2007 on Vista when email is signed via
the baseCSP.
We have implemented our card module and when trying to sign the mail by
using the"Micosoft Base smart Card Crypto Provider" (baseCsp). It is failing.
When I debug more into the cardModule/sc mini driver, i ...
|
|
|
Display security descriptor
Wed, 30 Apr 2008 22:36:59 -0700 (PDT)
Having retrieved a security descriptor via GetFileSecurity for
example, what APIs to I use to enumerate and retrieve each of the
entries in it.
TIA, John ...
|
import only public key
Wed, 30 Apr 2008 04:10:48 -0700 (PDT)
Hi...
I am trying to create a certificate using hardcoded key file. I am
using a sample code i found from the net. Now the certificate is
created with both the public and private key. But i dont want the
private key in my certificate. When i view frm IE my certificate
shows, "you have a private key that corre ...
|
Security concerns with registry key "EnforceWriteProtection"
Tue, 29 Apr 2008 19:56:00 -0700
I have an application, Ai Squared ZoomText Magnifier/Reader 9.11, which giong
to be deployed soon. Before that, I've discovered this application added a
registry key in session manager:
"HKLM\SYSTEM\CurrentControlSet\Control\SessionManager\Memory Management\"
"EnforceWriteProtection" = dword:00000000
Know ...
|