|
Configuring ASP.NET for Security
|
| bet | 18/38 | | Sana | 22.07.2021 | | Hajmi | 0,67 Mb. | | #15596 |
There are various security options that can be configured in web.config and machine.config files. The settings are dependent on the local security requirements and administrative preferences. In
IMPORTANT: Web Plus has not been tested in the load balanced environment. Please contact Registry Plus if you want to test it in this environment. Use of Windows 2003 and higher server operating system is highly recommended for production use of Web Plus because of improved security and stability of these operating systems.
Initial steps:
Have a web server machine on your network with the Internet Information Services (IIS) and .NET Framework version 2.0 installed. If you have Windows 2003 or later server versions you need to change your server configuration to add the Web server (IIS) role and enable it to run ASP.NET applications.
This web server should have proper connectivity to a SQL Server machine (SQL Server and web server can be located on the same machine for testing purposes).
Create a user account (SQL Server account or Windows domain account) on the SQL Server for all Web Plus users to access the Web Plus database from the application.
If your web server sits outside the firewall and the SQL Server is inside the firewall, open appropriate ports on the firewall to let the web server and the SQL Server communicate with each other.
Download the Web Plus deployment files (filename will appear in the email you received) from the specified folder on the CDC ftp site:
Address: ftp://sftp.cdc.gov
UserID: nccdnc
Password: 2013cDast
Unzip the downloaded file to a temporary folder.
Create and configure the database for Web Plus on the database server computer.
SQL Server backup is included in the deployment package and will appear in the WebPlusV2\Data folder when you unzip it. Create the WebPlus database from this backup.
Grant the “datareader” and “datawriter” roles to the Web Plus user account; also grant this account the execute permission on stored procedures called “lookupuser”, “initializelargeobjectstableforinsert”, and “getsetbaseid”.
NOTE: The above instructions are for MS SQL Server 2000 and later versions. There is a version of Web Plus available that works with My SQL Server, however, not all functionalities of the application have been tested to work correctly with this database. If you are using My SQL Server database you need to download the My SQL Server version of the application. The deployment package has MySQL data dump in the WebPlus\data folder. Create WebPlus database from this dump and update the database connection string in the web.config file (WebPlus folder) to point to this database.
Set up application on the web server. The steps for this task differ depending on the operating system you have on the web server computer. Please locate the section for the operating system you have on the web server and follow the steps described in that section.
|
| |
