RE: Passing security context to COM object
From: [MSFT]Allen (yweng@online.microsoft.com)
Date: 12/12/02
- Next message: Sondre Bjellås: "Error using SSL cert (Could not establish secure channel for SSL/TLS)"
- Previous message: Tom: "Visual Studio .Net problem"
- In reply to: Timothy Vogel: "Passing security context to COM object"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: yweng@online.microsoft.com ([MSFT]Allen) Date: Thu, 12 Dec 2002 10:25:29 GMT
The following is excerpted from the MSDN online documents:
If a Web application needs to access Active Directory, it can use
impersonation in an environment that supports delegation, or it can supply
explicit credentials to the DirectoryEntry constructor in the
System.DirectoryServices namespace. If explicit credentials are used,
applications should store credentials appropriately using a technique such
as COM+ construction strings or using the Windows data protection APIs.
1. Check if the account you specified in the web.config supports delegation.
2. Check the authentication level of the COM+
3. Try supplying explicit credentials like this: DirectoryEntry entry = new
DirectoryEntry(_path, uid, pwd, AuthenticationTypes.Delegation);
HTH,
-Allen
Disclaimer:
This posting is provided "AS IS" with no warranties, and confers no rights.
Got .Net? http://www.gotdotnet.com
--------------------
| From: "Timothy Vogel" <tvogel@msn.com>
| Subject: Passing security context to COM object
| Date: Wed, 11 Dec 2002 20:08:17 -0500
| Lines: 15
| Message-ID: <uIvDopXoCHA.844@TK2MSFTNGP12>
| Newsgroups: microsoft.public.dotnet.framework.aspnet.security
| NNTP-Posting-Host: adsl-78-199-58.sdf.bellsouth.net 216.78.199.58
| Path: cpmsftngxa09!cpmsftngxa10!tkmsftngp01!TK2MSFTNGP12
|
| I have a web service that works with Active Directory via LDAP,
| System.DirectoryServices namespace and ActiveDs.dll. This web service
needs
| the security context of the logged-in user to ensure the user has the
| correct rights to modify the AD object. I have the web site and
web.config
| properly setup to pass in the user's identity and have verified it via
calls
| to WindowsIdentity.GetCurrent.
|
| The problem is that when I make calls to the DirectoryEntry object and it
| passes those calls to adsi, the security context is not passed to COM.
Any
| suggestions on how to work around this issue?
|
| Thanks in advance,
| Timothy Vogel
|
|
|
- Next message: Sondre Bjellås: "Error using SSL cert (Could not establish secure channel for SSL/TLS)"
- Previous message: Tom: "Visual Studio .Net problem"
- In reply to: Timothy Vogel: "Passing security context to COM object"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
