c# - How do I securely authenticate the calling assembly of a WCF service method? -

-

The current situation is as follows: We have a production. 3.5 WCF service, which is used by many applications throughout the organization, is being authenticated on the transport level using WsHttpBinding or netTcpBinding Windows integrated security. This service has a method Foo (string parameter) , which can only be called by members of the AD group, string parameter is mandatory.

A new client comes into the App Play (NIT 3.5, C # console app), which eliminates the need for a string parameter. However, this particular application should only release the allowed call-permission string parameter. Identification of the client application's caller should still be known by the server, because the limit of the AD Group still applies (except for impersonation on the customer side).

I have found a way, but this method is not clearly safe because "proof" can easily be deceptive, besides CAS (code access protection) seems like a possible solution, but I can not understand how to use CAS in this particular scenario.

Is anyone suggesting how to solve this issue?

Edit: I found; Apparently, the conclusion is that it is impossible to implement in a safe fashion.

I feel as if you need to draw safety into a different service ... a more federal By going down the route, you can apply a handshake type of encryption using public and private keys to generate a secure session token in both cases.

In this way you can still get both windows of CNA = a certification and a custom solution in the game while maintaining your properties on safety methods (I'm assuming that you do this in this manner However, fair bit of work - I had to do this from scratch and participated in some cross domain / delegation issues. But I'm sure this idea is good.

How do you end with a solid model based on a solid concrete claim


Comments

Post a Comment

Popular posts from this blog

windows - Heroku throws SQLITE3 Read only exception -

-
After I deploy the app to Heroku, I have to run migration scripts and get this error message ... ITES \ padrino \ prophetmargin & gt; Heroku Rack AR: Rack mutated! SQLite3 :: ReadOnlyException: only one try to write database to read: CREATE TABLE "schema_migrations" ( "version" varchar (255) NOT NULL) /disk1/home/slugs/215264_925fd2c_65a3/mnt/.bundle/gems/gems/ padrino-core- is 0.9.11 / lib / padrino-core / cli / rake.rb: 9: in `init ' how can this be? I also tried to run Heroku dbpush SQLite: //db/my-db.db and that did not work Horoku sqlite3 but using postgres does not do. I'm not sure why you are receiving this error, however, as I have used sqlite3 in development and when pushing it into its travel, they do some magic which migrates to postgrads. I'm absolutely sure how Heroku does 'backwash' this database but it seems that this is happening to you because it's the SQLite db file which is obviously due to Heroku's
Read more

lex - Building a lexical Analyzer in Java -

-
I am currently learning lexical analysis in compiler design. To know how a lexical analyzer actually works, I am trying to build myself. I am planning to make it in Java The input to the lexical analyzer is a .tex file that is of the following format. \ section {script} {intro} \ section {Scope} arbitrary text \ section {relevance} uncontrolled text \ subdivision (profit) arbitrary text \ subsubsection {in real life} \ subdivision {Ingredient} \ end {document} The output of the lecture may be a table of contents with a page number in another file. 1 Introduction 1 1.1 Scope 1 1.2 Relevance 2 1.2.1 Benefits 2 1.2.1.1 Real life 2 1.2.2 loss 3 I hope that This problem is within the scope of Language Analysis Read the .exe file and check '\' and continue to check whether it is actually on search In the sectioning command is set to indicate whether or not a flag variable is the type of sectioning. I hope the above approach will work for the construction of Lexa
Read more

python - rename keys in a dictionary -

-
I want to change the names of keys in a dictionary which are ints, and I need them so that the inputs with key zero They can sort correctly. For example, my keys are like this: '1', '101', '11' and I may need them: '001', '101', '011' What is doing, but I know that there is a better way tmpDict = {} in the ADC for the old: t MpDict ['% 04d'% int (olden)] = addict [oldkey] New controlled = tmpDict You are going wrong about this if you want to draw entries on a line in a specific way, then you have to sort on the extraction. for sorted (D, key = int): print '% s:% R'% (k, d [k]) < / Div>
Read more