Re: schannel.dll, secur32.dll, and DSCLIENT.EXE redistribution

From: Matthew S (mls_at_bitstream.net)
Date: 01/27/04 

Date: Tue, 27 Jan 2004 12:08:45 -0800

"Gary S. Terhune" <grystnews@mvps.org> wrote in
news:ONBMjaQ5DHA.488@TK2MSFTNGP12.phx.gbl:

> Sorry, I focused on one aspect of your post and failed to consider the
> larger picture. Let's see if I can remedy that.

No problem, I appreciate your effort.

> Am I right in assuming, from the way you couch this, that your program
> and its functions do not involve a Win 2000 generation server in any
> way?

In this particular situation, my company is acting as a service provider.
We host portions of the application via IIS on a Windows 2000 server.

The end user of the software, utilizes the software on their machines, on
their network. For various functions, the software communicates via SSL to
our Windows server on our network. I am concerned with the legality of
distributing these DLLs to them, for running on their machines.

> Are the two DLLs in your Subject line the only ones
> involved? If so, which versions? Only the ones available in
> dsclient.exe?

I believe so. Only the ones available in dsclient, which are secur32.dll
version 4.10.0.2226, and the schannel.dll version that I believe comes with
IE 5.01 which should be 4.86.x (I need to verify this).

> Suggest you see
> http://support.microsoft.com/servicedesks/fileversion/dllinfo.asp and
> research the versions available for each, and their distribution. Note
> that schannel.dll has an Export version, which I take to mean that
> certain versions are probably *not* for export outside the US.

Ahh, this is already proving to be a help. If nothing else, it is providing
me with alternate packages to install from. I need to test to see if
1.10.0.2222 of secur32.dll will work.

> From what I infer from the article, the expected method of
> distribution for dsclient.exe is for the server administrator to make
> dsclient.exe available for network installation, download to the
> client, or even pushed.

Undetermined at this time.

> If the functionality of the program involves Win2K-based server(s) and
> all you wish to do is make the client available in a more convenient
> manner, then I see no problem in redistributing the EXE--which you
> would get from a WinServer CD.

It does as described above, but would I get in trouble from MS legal for
doing so?
 
> However, in all other cases, I suspect that MDAC updates, VBRUN
> service packs, or any number of other redistributables would be the
> more kosher method, and probably more appropriate, considering the
> "packaged" nature of these runtime libraries. If you can provide me
> with the DLL names and versions required, I can fairly easily see
> which packages and which versions would satisfy your needs (I have
> most of them on my HD, and the rest of them somewhere in this mess.)

I concur, I'll let you know the versions once I do some more testing.

> At least, that's the way I see it. I can't comment on alternative
> code. Not my thing.

Thanks for your help so far, it has opened up some other possibilities.

- Matthew

Relevant Pages

  • RE: Printing from Win9x clients stops
    ... Open Server Management. ... then right-click the name of the computer running Windows Small Business ... >From the client computer: ... The Select Network Component Type ...
    (microsoft.public.windows.server.sbs)
  • RE: Printing from Win9x clients stops
    ... The printers with 9x drivers on the server appeared automatically in the ... > then right-click the name of the computer running Windows Small Business ... > From the client computer: ... The Select Network Component Type ...
    (microsoft.public.windows.server.sbs)
  • Re: Daily Server Report (Critical Errors, Event ID: 537)
    ... Does this issue happen on client workstation or server? ... Does your server and all clients' workstation work well now? ... issue in your Network? ...
    (microsoft.public.windows.server.sbs)
  • Re: Small business thinking about backing up data, having a server and 2-3 users - is SBS200
    ... is networked to the Master with a crossover network cable. ... Master on the Master PC and Client on the Slave pc. ... Since this machine is a server is should handle the requests ok ... Most real firewall appliances have HTTP and SMTP proxy services that allow ...
    (microsoft.public.windows.server.sbs)
  • RE: Private addresses on public network
    ... anybody accesses those computers from an external network," -- even when the ... JavaScript delivered to the client that causes the client to retrieve ... the attacker, the request results in another JavaScript response that tells ... Moving beyond a single server ...
    (Security-Basics)