ASP.Net breaks after Framework 1.0 SP3

[David Hodges]

On my Windows 2000 Server, SP4, I run asp.net app's for both
Framework versions 1.0 and 1.1.

I installed the service packs for both frameworks and after, none of
my applications worked!

By reinstalling the frameworks and re-doing the mappings with
aspnet_regiis I got the sites based on 1.1 to work, but the 1.0 sites
still don't work.

I get the following error:
"Security Exception
Description: The application attempted to perform an operation not
allowed by the security policy. To grant this application the required
permission please contact your system administrator or change the
application's trust level in the configuration file.

Exception Details: System.Security.SecurityException: Failure decoding
embedded permission set object."

I tried opening up the Trust zones to the maximum but that didn't
help.
Anyone got any ideas?

Thanks,
David

 

[Mark Gibson]

David,

SP3 includes the old channel security updates first introduced by .NET
1.1.

In any channel configuration (through code or config files), an extra
attribute has to be added to the formatter used for that channel.
This attribute is typeFilterLevel="???".

e.g.

<channels>
<channel ref="http">
<serverProviders>
<formatter ref="binary" typeFilterLevel="Full"/>
<provider ref="..."/>
</serverProviders>
...

You should look this attribute up and decide what value you want to
put in it. For a quick test, set it to "Full". However, this is
supposed to be fairly insecure so you may not want to keep it set to
this.

Mark

 

[David Hodges]

Mark,

Thanks for your answer! Does this channel config go in web.config or
machine.config? And I assume you mean it goes in the config for the
framework 1.0 sites?

Thanks,
David

 

[Bert Hyman]

(e-mail address removed) (Mark Gibson) wrote in

SP3 includes the old channel security updates first introduced by .NET
1.1.

I found that out the hard way; did you have some early warning that this
was going to happen? Is there a Microsoft document that mentions the
inclusion of this change in Framework 1.0 SP3?