Authenticate connection as remote user

I need to secure a connection to a server (most likely TCP, but I'm
open to whatever works) based on file security. In a sense, the client
app "opens" a file on the server, but in reality this file is served up
by the server application. However, I do not wish to bypass security on
this file. The same security procedure or as close as possible needs to
be applied.

The client machine will already have a "logon" session to the server
via a network share/mapped drive. I would like to use the same
credentials of this share so that the user does not have to logon to
the server again.

In a nutshell, I need to be able to transfer the user's security token
for the open share/mapped drive to the server so that the server app
can properly authenticate file access.

>>From what I can gather so far SSPI seems like it might be the way to
go. As yet I'm not very familiar with SSPI, but I'm still looking into
it.

The problem I have though is how to get the right security token. For
the most part everything is geared toward the local logged on user.
This is easily NOT the same user that is logged onto the server/share.

For example, let's say the server is MachineS and the client is
MachineC. The user is logged on locally as MachineC\Bob, but is logged
on to the share as MachineS\BobSmith. Everything works perfectly in
Explorer and normal file I/O, of course. But, how do I authenticate as
MachineS\BobSmith and not as MachineC\Bob?

.

Relevant Pages

  • Re: UnauthorizedAccessException when using MSDTC
    ... dispatcher2 is the user logged on the client pc. ... Event Source: Security ... Object Server: SC Manager ... Primary Domain: BLITZ ...
    (microsoft.public.data.ado)
  • Re: Routing and Remote Access - Authentication Failure
    ... because the real client computer can tunel through it's local NAT router, ... travel the Intrenet, join the VPN and access the server, when this feature ... Their security system decided that the server was trying to steel ...
    (microsoft.public.windows.server.networking)
  • Re: WCF security advice (and clarification) needed
    ... You, the client, resolve the foo.mycompany.com hostname within your ... TCP/IP) with that ticket as the security token. ... There are two parties participating in a security scenario, the server ... HTTP supports other authentication ...
    (microsoft.public.dotnet.framework.webservices)
  • RE: Problems with security requirements in Windows WorkGroups.
    ... "A remote side security requirement was not fulfilled during authentication. ... small chat application between a client and a server ... When I try to use the TCP channel I get the error (with NO inner exception ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: VPN -- the next consumer "turnkey"?
    ... I'm not a security expert. ... "A Hamachi system is comprised of backend servers and end-node ... Server nodes track client's locations and provide ... services without providing Hamachi with a list of client IP's. ...
    (alt.internet.wireless)
Loading