Groups | Blog | Home
all groups > dotnet odbc.net > february 2004 >

dotnet odbc.net : Securing method calls on a remote object


Ben
2/23/2004 6:21:05 AM
Hi

I have a remote object (which may be hosted in either IIS or a Windows Service - undecided at this time) that is going to be publicly available over the web. I have several method calls on this object that I want to only be available from behind the firewall. What is the best way to do this

Thanks
Ben
2/24/2004 5:56:10 AM
So that's where this post went... I had intended it to be in the remoting discussion board and I apologize for it ending up here. When I couldn't find this post I created another one (that time in the .net remoting forum) and I have added a reply there and consider the thread on this forum closed

Thanks
Be

yhhuang NO[at]SPAM online.microsoft.com
2/24/2004 6:58:37 AM
Hello Ben,

Thanks for posting in the group.

Based on my understanding, now the question is: You have a remote object
that could be hosted in IIS or Windows Service. It is going to be
published. However, you want some methods in it can only be accessed from
behind the firewall. Is it correct?

For "from behind the firewall", could I suppose it can only be accessed
from users locally (in Intranet)?

If so, I think the simplest way to do it is to pass the name and password
as a parameter to each method call. We can verify whether it is a valid
user programmatically.

When hosting in IIS, we may also consider using WS-Security, as it would
be seamless and secure. This is a pretty good article on how to do it:
http://msdn.microsoft.com/msdnmag/issues/03/11/RemotingChannelSinks/default.
aspx.

BTW, in the future, it would be best to post these questions in the
following newsgroup.
microsoft.public.dotnet.framework.remoting

All .NET framework remoting issues, configuration and other questions are
posted in the newsgroup above. This group is for odbcnet .net programming
issues.

The reason why we recommend posting appropriately is you will get the most
qualified pool of respondents, and other partners who the newsgroups
regularly can either share their knowledge or learn from your interaction
with us. Also, this is to make sure that the responders can better track
the problem. Thank you for your understanding.

Have a nice day!

Best regards,
Yanhong Huang
Microsoft Community Support

Get Secure! ¨C www.microsoft.com/security
This posting is provided "AS IS" with no warranties, and confers no rights.
yhhuang NO[at]SPAM online.microsoft.com
2/25/2004 3:47:56 AM
Hi Ben,

It is fine. :) We are glad to be of assistance. For remoting issues, you
could also post it in microsoft.public.dotnet.framework, which is a MSDN
managed newsgroup.

http://msdn.microsoft.com/newsgroups/managed/default.aspx?dg=microsoft.publi
c.dotnet.framework&lang=en&cr=US

Thanks very much for participating the community.

Best regards,
Yanhong Huang
Microsoft Community Support

Get Secure! ¨C www.microsoft.com/security
This posting is provided "AS IS" with no warranties, and confers no rights.
AddThis Social Bookmark Button