Re: integrated security over vpn
From: Joe Kaplan (ilearnedthisthehardway@noway.com)
Date: 03/20/03
- Next message: Gary: "Re: integrated security over vpn"
- Previous message: Peter Rilling: "determine when passport instance expires?"
- In reply to: Gary: "Re: integrated security over vpn"
- Next in thread: Gary: "Re: integrated security over vpn"
- Reply: Gary: "Re: integrated security over vpn"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: "Joe Kaplan" <ilearnedthisthehardway@noway.com> Date: Thu, 20 Mar 2003 16:10:57 -0600
Are you using Windows authentication with SQL Server or SQL Server
authentication?
If you are using Windows authentication, then the current app needs to be
running as a user with permissions to access the server. This might not be
easy to do on a home machine scenario as I would expect the home machine to
not be in the domain. You also can't create an appropriate token to
impersonate the user unless the current machine is in the domain.
There might be some fancy way to do this using remoting or something, but I
have no idea how to do that. Another thing to consider using would be web
services. You could create a web service that returns and accepts the
required datasets. From there, you can use the IIS Windows authentication
system. It sounds like it starts to get pretty complicated though.
Joe K.
"Gary" <Jombo@goggle.net> wrote in message
news:OC1B$Sx7CHA.1808@TK2MSFTNGP12.phx.gbl...
> There are no web services used. VPN provides access to a SQL server which
> is secured behind a firewall. The local app runs in disconnected mode
using
> DataSets to hold data, only updating the SQL server as required. There
are
> a few text based files that are server based that the program periodically
> accesses, but that is primarially log based fuctionality.
>
>
> "Joe Kaplan" <ilearnedthisthehardway@noway.com> wrote in message
> news:ezarIjw7CHA.1604@TK2MSFTNGP10.phx.gbl...
> > Can you say a little bit more about how the app works over the VPN?
What
> is
> > being accessed remotely if the app is run locally? Is there a web
> > application or web service that is invoked?
> >
> > Joe K.
> >
> > "Gary" <Jombo@goggle.net> wrote in message
> > news:#Cr32Lq7CHA.2052@TK2MSFTNGP11.phx.gbl...
> > > Using vb.net, I am considering using integrated role-based security to
> > > secure the application. Most users, however, will be running the vb
app
> > > locally on their home computers tied back to the corporate offices via
> > VPN.
> > > SQL is smart enough to use the vpn connection login name, can .Net do
> > that.
> > > I have tried using WindowsPrincipal, which does return my local
> username,
> > > but I do not see any methods to address this particular need. Any
ideas
> > > greatly appreciated.
> > >
> > >
> >
> >
>
>
- Next message: Gary: "Re: integrated security over vpn"
- Previous message: Peter Rilling: "determine when passport instance expires?"
- In reply to: Gary: "Re: integrated security over vpn"
- Next in thread: Gary: "Re: integrated security over vpn"
- Reply: Gary: "Re: integrated security over vpn"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|