Issues With User Control Embedded Into Web Page Since Installing .NET 2.0

microsoft.public.dotnet.security

9 Feb 2006 6:15 PM

Markus Kling

Hi,

I have a rich Forms UserControl which is embedded into a web page. Since
installing .NET 2.0 on the clients, the control stopped loading completly.

- I disabled security completly using caspol -s off => no effect
- I enabled fussion logging => no single entry generated
- I enabled the IEHost log => nothing created
- Changed to another client machine => same issues, same results
- I started writing a new UserControl from scratch and deployed it to the
same server. The control could also not be loaded.

I deployed the same test project to another 2003 server in the same domain,
with equal patch levels (SP1 and latest patches installed) and it worked.

Perhaps a naming issue?

- I tried to change the names => no result
- I compared the HTTP requests to the different server => nothing special

I have no other clue where to start searching!

- The issues stated above are reproducable from any client, such it should
be a server or framework issue.
- I even have a customer which experienced the same problems
- The problem exists for two completly different client applications

Any help appreciated.
Markus

9 Feb 2006 6:34 PM

Dominick Baier [DevelopMentor]

Hi,

are you sure you are using the 2.0 versions of caspol, fuslogvw etc..??

e.g. caspol -s off will not turn CAS off anymore in 2.0 -

also all policies defined in 1.1 will not apply to 2.0 code

---------------------------------------
Dominick Baier - DevelopMentor
http://www.leastprivilege.com

Show quoteHide quote

> Hi,
>
> I have a rich Forms UserControl which is embedded into a web page.
> Since installing .NET 2.0 on the clients, the control stopped loading
> completly.
>
> - I disabled security completly using caspol -s off => no effect
> - I enabled fussion logging => no single entry generated
> - I enabled the IEHost log => nothing created
> - Changed to another client machine => same issues, same results
> - I started writing a new UserControl from scratch and deployed it to
> the
> same server. The control could also not be loaded.
> I deployed the same test project to another 2003 server in the same
> domain, with equal patch levels (SP1 and latest patches installed) and
> it worked.
>
> Perhaps a naming issue?
>
> - I tried to change the names => no result
> - I compared the HTTP requests to the different server => nothing
> special
> I have no other clue where to start searching!
>
> - The issues stated above are reproducable from any client, such it
> should
> be a server or framework issue.
> - I even have a customer which experienced the same problems
> - The problem exists for two completly different client applications
> Any help appreciated.
> Markus

10 Feb 2006 9:00 AM

Markus Kling

Hi Dominick,

thanks for your reply. Yes, I'm definitly sure that I'm using the 2.0 tools.

Any other ideas?

Markus

"Dominick Baier [DevelopMentor]" <dbaier@pleasepleasenospamdevelop.com>

schrieb im Newsbeitrag
Show quoteHide quote

news:4580be631966768c7fbc6fb31ad56@news.microsoft.com...
> Hi,
> are you sure you are using the 2.0 versions of caspol, fuslogvw etc..??
>
> e.g. caspol -s off will not turn CAS off anymore in 2.0 -
>
> also all policies defined in 1.1 will not apply to 2.0 code
>
> ---------------------------------------
> Dominick Baier - DevelopMentor
> http://www.leastprivilege.com
>
>> Hi,
>>
>> I have a rich Forms UserControl which is embedded into a web page.
>> Since installing .NET 2.0 on the clients, the control stopped loading
>> completly.
>>
>> - I disabled security completly using caspol -s off => no effect
>> - I enabled fussion logging => no single entry generated
>> - I enabled the IEHost log => nothing created
>> - Changed to another client machine => same issues, same results
>> - I started writing a new UserControl from scratch and deployed it to
>> the
>> same server. The control could also not be loaded.
>> I deployed the same test project to another 2003 server in the same
>> domain, with equal patch levels (SP1 and latest patches installed) and
>> it worked.
>>
>> Perhaps a naming issue?
>>
>> - I tried to change the names => no result
>> - I compared the HTTP requests to the different server => nothing
>> special
>> I have no other clue where to start searching!
>>
>> - The issues stated above are reproducable from any client, such it
>> should
>> be a server or framework issue.
>> - I even have a customer which experienced the same problems
>> - The problem exists for two completly different client applications
>> Any help appreciated.
>> Markus
>
>

10 Feb 2006 9:09 AM

Dominick Baier [DevelopMentor]

could this apply to you?

http://lab.msdn.microsoft.com/ProductFeedback/viewfeedback.aspx?feedbackid=ef4ae9a2-1d40-4241-aca4-61d579929793

---------------------------------------
Dominick Baier - DevelopMentor
http://www.leastprivilege.com

Show quoteHide quote

> Hi Dominick,
>
> thanks for your reply. Yes, I'm definitly sure that I'm using the 2.0
> tools.
>
> Any other ideas?
>
> Markus
>
> "Dominick Baier [DevelopMentor]"
> <dbaier@pleasepleasenospamdevelop.com> schrieb im Newsbeitrag
> news:4580be631966768c7fbc6fb31ad56@news.microsoft.com...
>
>> Hi,
>> are you sure you are using the 2.0 versions of caspol, fuslogvw
>> etc..??
>> e.g. caspol -s off will not turn CAS off anymore in 2.0 -
>>
>> also all policies defined in 1.1 will not apply to 2.0 code
>>
>> ---------------------------------------
>> Dominick Baier - DevelopMentor
>> http://www.leastprivilege.com
>>> Hi,
>>>
>>> I have a rich Forms UserControl which is embedded into a web page.
>>> Since installing .NET 2.0 on the clients, the control stopped
>>> loading completly.
>>>
>>> - I disabled security completly using caspol -s off => no effect
>>> - I enabled fussion logging => no single entry generated
>>> - I enabled the IEHost log => nothing created
>>> - Changed to another client machine => same issues, same results
>>> - I started writing a new UserControl from scratch and deployed it
>>> to
>>> the
>>> same server. The control could also not be loaded.
>>> I deployed the same test project to another 2003 server in the same
>>> domain, with equal patch levels (SP1 and latest patches installed)
>>> and
>>> it worked.
>>> Perhaps a naming issue?
>>>
>>> - I tried to change the names => no result
>>> - I compared the HTTP requests to the different server => nothing
>>> special
>>> I have no other clue where to start searching!
>>> - The issues stated above are reproducable from any client, such it
>>> should
>>> be a server or framework issue.
>>> - I even have a customer which experienced the same problems
>>> - The problem exists for two completly different client applications
>>> Any help appreciated.
>>> Markus

10 Feb 2006 9:47 AM

Markus Kling

Hi Dominick,

thanks for your reply.

- I'm definitly sure that I'm using the 2.0 tools and not the 1.1 policy /
binding / whatever tools.
- I'm sure it is not a security issue, at least not one of the caspol which
I disabled completly using "caspol -s off"
- I'm sure the control gets downloaded by the browser into the temporary IE
directories and I'm sure that the downloaded version matches the dll's I
deployed onto the server
- Windows Firewall is completly disabled through Group Policy
- Virus Scanner has been temporarily turned off, on both client and server
- I'm sure that the problem is not dependant on the control code itself

It just doesn't load into the IEHost which I could conclude from none of the
logs, neither IEHost-log nor binding-log are beeing created at all.

My remaining and only problem is why does it not load from that specific
server. It must be something within the communication and not the control
itself.

---- hours later ---

I currently did a network trace and found one significant difference between
the two servers: one is doing chunced HTTP response encoding, the other one
not. I disabled my browser doing HTTP 1.1 and the control loads (HTTP 1.0
does not allow chunced encoding!).

I opened a case via Microsoft Support.

Thanks for your help.
Markus

"Dominick Baier [DevelopMentor]" <dbaier@pleasepleasenospamdevelop.com>

schrieb im Newsbeitrag
Show quoteHide quote

news:4580be6319670a8c7fc414509a860@news.microsoft.com...
> could this apply to you?
>
> http://lab.msdn.microsoft.com/ProductFeedback/viewfeedback.aspx?feedbackid=ef4ae9a2-1d40-4241-aca4-61d579929793
>
> ---------------------------------------
> Dominick Baier - DevelopMentor
> http://www.leastprivilege.com
>
>> Hi Dominick,
>>
>> thanks for your reply. Yes, I'm definitly sure that I'm using the 2.0
>> tools.
>>
>> Any other ideas?
>>
>> Markus
>>
>> "Dominick Baier [DevelopMentor]"
>> <dbaier@pleasepleasenospamdevelop.com> schrieb im Newsbeitrag
>> news:4580be631966768c7fbc6fb31ad56@news.microsoft.com...
>>
>>> Hi,
>>> are you sure you are using the 2.0 versions of caspol, fuslogvw
>>> etc..??
>>> e.g. caspol -s off will not turn CAS off anymore in 2.0 -
>>>
>>> also all policies defined in 1.1 will not apply to 2.0 code
>>>
>>> ---------------------------------------
>>> Dominick Baier - DevelopMentor
>>> http://www.leastprivilege.com
>>>> Hi,
>>>>
>>>> I have a rich Forms UserControl which is embedded into a web page.
>>>> Since installing .NET 2.0 on the clients, the control stopped
>>>> loading completly.
>>>>
>>>> - I disabled security completly using caspol -s off => no effect
>>>> - I enabled fussion logging => no single entry generated
>>>> - I enabled the IEHost log => nothing created
>>>> - Changed to another client machine => same issues, same results
>>>> - I started writing a new UserControl from scratch and deployed it
>>>> to
>>>> the
>>>> same server. The control could also not be loaded.
>>>> I deployed the same test project to another 2003 server in the same
>>>> domain, with equal patch levels (SP1 and latest patches installed)
>>>> and
>>>> it worked.
>>>> Perhaps a naming issue?
>>>>
>>>> - I tried to change the names => no result
>>>> - I compared the HTTP requests to the different server => nothing
>>>> special
>>>> I have no other clue where to start searching!
>>>> - The issues stated above are reproducable from any client, such it
>>>> should
>>>> be a server or framework issue.
>>>> - I even have a customer which experienced the same problems
>>>> - The problem exists for two completly different client applications
>>>> Any help appreciated.
>>>> Markus
>
>