Accessing file contents is easy once you remember that the filename is prefixed with the Namespace. So if you embed the file foo.txt in a Directory “bar” of a project configured with the default namespace “companydll” then the embedded resource will have the filename “companydll.bar.foo.txt”.

Simply pass that to the GetManifestResourceStream method and read the contents as follows:

public string GetFileContents(string file)
{
  using (Stream stream = this.GetType().Assembly
                             .GetManifestResourceStream(file))
  using (StreamReader reader = new StreamReader(stream))
  {
    return reader.ReadToEnd();
  }
}

So far so good. You can create MVC controller methods that load files from the manifest resource stream – just remember to always check the request file against a whitelist of allowed files.

In my case I embedded some .less files and wanted to deliver those to the browser. Working with less in ASP.NET projects couldn’t be easier. The dotlesscss project provides the engine for transforming less to css (and it can even be added using nuget). You simply add an HttpHandler and all .less requests are automatically parsed. But in my case I needed to run the less parser on files from the manifest. So basically I have a string in memory and not a real file path. The problem is the less parser provided by dotlesscss needs a file path to the .less file in order to import referenced files.

I started out by looking at IsolatedFileStorage as a temporary store for the .less files which I could pass to the engine, but there is only a private reflection hack to get to the real path of a file in IsolatedFileStorage, so I kept looking for something better. After a git clone of the dotlesscss source I produced this neat (and in retrospect very simple) solution to this problem. You can simply override the file provider for the less engine and read the files from the manifest stream.

public class DotLessEmbedded : IFileReader
{
 private LessEngine m_lessEngine;
 private string m_filesNamespace;

 public DotLessEmbedded(string filesNamespace)
 {
    m_filesNamespace = filesNamespace;
    if (!m_filesNamespace.EndsWith("."))
      m_filesNamespace += ".";
    m_lessEngine = new LessEngine();
    m_lessEngine.Parser.Importer.FileReader = this;
  }

  public string TransformToCss(string file)
  {
    return m_lessEngine.TransformToCss(GetFileContents(file), file);
  }

  public string GetFileContents(string fileName)
  {
    using (Stream stream = this.GetType().Assembly
          .GetManifestResourceStream(m_filesNamespace + fileName))
    using (StreamReader reader = new StreamReader(stream))
    {
      return reader.ReadToEnd();
    }
  }
}

(Remember to reference and import dotless.Core.Input and dotless.Core.)

With this class you can simply transform any embedded less file by using:

var dotLess = new DotLessEmbedded("Web.Core.Assets.Bootstrap");
var out = dotLess.TransformToCss("bootstrap.less");

Everyone knows a good psycho thriller always involves some kind of countdown. It really increases the suspense. Microsoft seem to have adopted a similar tactic, which is great at first glance. After all they are warning you that your DATA WILL BE DELETED. Definitely something I want to know about and constantly be reminded of if I don’t take action (no sarcasm here actually!).

Trial users of Office 365 will have received numerous emails from the time the trial ends until 30 days (+15 days grace period as far as I can see) after that telling them to buy a license. Ok, sounds reasonable. People may have signed up for the trial and forgotten about purchasing real licenses and nobody wants to lose their data. In my case I signed up for the trial, got hooked and bought the licenses probably a couple of days after that. So my license panel reads:

It was my understanding that as long as “Assigned” licenses <= “Valid” licenses then everything is fine. I could let those expired licenses simply expire.

Now I’m not easily irritated and assume that the Office 365 Portal simply forgot to do the math and just sends those warning whenever trial licenses are in your account. But an assumption won’t be enough for customers asking the same question, so let me reassure myself and them.

First of all I really appreciate that the warning email is not sent from a “noreply@microsoft.com” – it actually goes to msonlineservicesteam@microsoftonline.com. Awesome, that’s a +1 over Google Services (where asking questions per email is apparently a no-no).

Quickly fired off a reply asking what the warning will do in my scenario. This was back at the beginning of September. A couple of days ago I got the “7 day warning”. I again sent an email reminding them they had left my email unanswered and asking what to do. Still no reply. WTF? I did pay my subscription didn’t I?

I know there is a great forum (and I have received helpful information there before about technical issues) but this is a financial/licensing (and usually confidential - especially for customers) issue which I’m not going to post on a public forum – that’s why I am a paying customer and expect answers to questions like these via email. Sadly I don’t even know if my email was ignored, deleted or is still in progress, because I didn’t get any answer at all. Not even one of those kind automated emails thanking you for your email.

Dear Microsoft. Don’t be a faceless monster in the cloud and try to:

• Answer emails (especially if I am paying and especially if “DATA WILL BE DELETED”)
• Implement some form of ticketing so that I at least know my issue arrived and is being looked at by someone.
• Or simply don’t send out warning emails if my data is not really in jeopardy.

Why oh why would you ever put a maximum length on the password field? Even if the database size is a concern (really?) would it make sense to bump the limit to something much longer like 100 or 200 characters. Even the default security setting for KeyPass (which I’m sure many people use) is longer than 16 characters.

I may be Microsoft-friendly and it won’t keep me from using the service, but come on Microsoft. Ask the guys who wrote the (ludicrously long) method: HashPasswordForStoringInConfigFile

Each link has the format threelikes.com/date/category so people go to the sites via us (for statistics purposes and so people can share the link – we bought 3lik.es for that purpose). Being a good internet citizen (and in order not to comply with Google “law”) I decided to implement a permanent redirect (HTTP 301) for redirecting to the actual destination site.

Next up I started testing the “liking”. At first everything looked great, the site was appearing on my wall. But wait, no reference to our site. Turns out Facebook respects 301 redirects. This makes sense (why would you store or show the “old” link that is redirecting) but is not optimal for us. Apart from not contributing to our viral marketing it actually defies the purpose of including it: the voting. My first test suddenly displayed “400 people like this” which was great but only on the surface. Because my short link was redirecting to the much bigger destination site it was displaying the likes from the destination site on my page. This distorts the voting results.

So my solution was to return a client site (META refresh) redirect from an intermediate page. This is not perfect (and if anyone has a different idea please ping me) but it achieves what I wanted. People click like and the information (title and a short description) we provide appears alongside our own url. When people click they briefly see the intermediate page (unstyled in order to reduce page load) and are then redirected to the main page. Worked great, except for the times when it didn’t.

I’ll spare you all the dirty details of debugging the like button, but the most important parts are:

• Check you have all the required open graph meta tags in your page and choose the right og:type (in my case the redirect page is article not website – read about the difference here).
• Check the url you are liking in Facebooks lint: https://developers.facebook.com/tools/lint/
• If and only if there are no errors, click once with your real account (do it too often and your urls start to get blocked and the error message is hard to find!)
• You can test a bit more by using Facebook test users (available via developers.facebook.com).

Some things I will think about in the future is: (1) using a iframe or standard frame (2) finding a way to use server side redirect but customize the Facebook Like url to point to us

Fired up the all-might Powershell and tried deleting the column from there:

PS C:\swFiles\DualConsult.SharePoint.SecretsList\Scripts> $field.Delete()
Exception calling "Delete" with "0" argument(s): "Cannot complete this action.
Please try again."
At line:1 char:14
+ $field.Delete <<<< ()
+ CategoryInfo : NotSpecified: (:) [], MethodInvocationException
+ FullyQualifiedErrorId : DotNetMethodException

Nothing obvious turned up in ye grande search engine so I had a look what was different about this list and other lists. Turns out I had created a custom content type for the list and it was the only content type on the list (the standard “item” content type wasn’t part of the definition). Since I had used this pattern before I didn’t suspect anything wrong, but since I was stuck I went ahead and added the “item” content type.

SharePoint 2010 - List Content Types

Tried deleting the columns again and voila it worked. Interesting side note: Once I removed the “item” content type again, I could delete the second column I had created without any problems as well. SharePoint, you are strange.

To take away my summary, I will be coming back and it will still be one of the major events of the year. But Tech-Ed has lost some of its magic. Let me break that down into Content, Contacts and Context.

Content

The most important part of any conference (for me at least) is content. Different points of view, shiny new technology and buckets full of inspiration. Looking back the three big topics for me (both from my enterprise day-job and start-up dream world) were: OData, Sharepoint in the Cloud and (as always) process experience from those grandmasters of development.

Know-How and stories from CapGemini and the always entertaining Stephen Forte once again reminded me that where I work we have come so far from our early days but still have a long way to go. It is a never ending journey in a constantly changing field.

SharePoint is always interesting and the new Office 365 (the service formerly known as BPOS) offering brings SharePoint 2010 into the cloud. Azure was a hot topic and a couple of sessions tried to build a bridge between the cloud and SharePoint. What was presented seemed like early prototypes and not production ready yet, but we may soon see some ShareAzure or AzurePoint solutions utilizing the best of both worlds. A highlight was the chance to talk to Daniel McPherson (Twitter @danmc) about his upcoming SharePoint AppStore. It’s in beta at the moment and already great for the current BPOS offering. Can’t wait to see how it evolves and hopefully you’ll see some of my products there soon.

Last but not least OData. Before I came to Berlin I thought it was rather uninteresting. It took until the last session of the conference by (Austria’s own) Mario Szpuszta to really get my fired up about the possibilities. Together with the next Entity Framework (coming in Q1) and AppFabric I see a lot of potential to change (and simplify) some major parts of our standard architecture approach.

Finally Windows Phone 7 was the sexy topic of the conference. Sadly not for me since I’m not interested in consumer apps (yet) and the Enterprise story has been pushed to the next release. So that’s a topic for next year. (But it is a neat phone…)

Contacts

I was coming to Berlin expecting to see only a small group of fellow Austrians but I heard the group was larger than last year. But Tech-Ed is about the people you don’t meet so often. I enjoyed roaming the exhibition halls and technical learning center. The Microsoft product teams and invited guests were helpful, interested and just know their stuff. I wouldn’t mind visiting just the tlc every couple of months to talk with those guys about current (high-level, but they know the details too) issues. I’m usually not a big fan of exhibitions, but I visited almost every stand on the first day (during the Keynote) and got all the answers I was looking for and some others too.

Context

Up until now I have mostly praise for the conference. Sadly the context has been on a decline since I visited my first Tech-Ed in Barcelona. Each year recession has hit the conference and this year was no exception. Costs are cut at all ends. There was the lunch bag affair of ’08 (2 warm meals and 3 lunch bags on first, last and country drink day) and this year’s Turnbeutelbag drama. After talking with some Microsoft representatives it is clear that the conference is costly (even though it was sold out) and to be able to put on the show every year without making more loss that the year before they have to shave off some of the bonus material. I understand but I hope Tech-Ed finds back to it’s glory days. The event team improves the experience as best they can every year: the Berlin Messe is a labyrinth and the navigation was drastically improved this year, registration was swift, WIFI was very good and snacks were plenty.

To all who went and all who will be going, I hope to see you next year. Thanks everybody and stealing one of the lesser known Microsoft slogans: “Create Software – Change the World”. (What a dramatic ending…)

But I just ran into something annoying in Visio 2010 (may actually also happen in versions before 2010, but I just noticed in 2010). If you copy a complete page (=pressing Ctrl-C while nothing on the page is selected) and you have a background layer, Visio gets confused and messes up the copied image. It crops the image, makes it smaller somehow or whatever – but it’s definetely messed up. Continue for a quick-fix.

Steps to reproduce the issue

1. Create a background (set the page to “Background” in Right-click > Page Setup > Type).

2. Create a foreground page with that background and copy it.

3. Paste into your favorite paint application.

You see there are margins of the image missing. Don’t know why, but I only found one way of fixing it.

Fixing it

1. Create a large canvas (ideally filled with white and a white line – here in yellow just for demonstration purposes) on the background page which spans the complete page.

2. Copy and paste as before and voila the page is complete.

This is not as bad a fix as it seems, because the large yellow canvas is not selectable (like anything on the background) in the foreground pages.

There are a couple of resources on the net for:

• People Picker only shows a partial list of AD users
• People Picker only shows a list of AD in specific OUs
• People Picker has a bad day and just doesn’t like you today

But none applied to or solved my problem, my PP didn’t show any error, it just didn’t find any users.

One clue was that directly after the installation it actually worked and since then “nothing had changed”. Two existing users that were added after installation were still in the PeoplePicker cache, so I confirmed that it must have worked at some time in the past.

In Event Viewer I searched for errors during of shortly after my searched, but nothing obvious appeared. I then filtered for only “errors and warnings” and those that happened after the installation date and (apart from the classic DCOM permissions errors under a 2008 R2 installation) it showed me that about 6 days after installation the server started having NETLOGON errors along the lines of “Computer could not be authorized.” This continued until today. Turns out for some reason the computer account of the server in Active Directory got screwed up and after

• detaching the server from the domain
• manually deleting the computer account in Active Direcotry
• and rejoining the server to the domain

everything worked again as usual.

HTH, Alex

All my session files at the Student Big>Days: “ASP.NET MVC with SharpArchitecture” are available on SkyDrive.

Have fun, thanks for attending. Any questions, feel free to contact me!

The FAQ:

The registration page:

Maybe I’ve become overconscious for security topics since I started working for www.securityresearch.at but if you want to avoid a mistake like this on your app give us a call… I’m not handing out my bank details on any terms but at least our team can help you reach state-of-the-art levels of security.