Remoting Security issues

From: Ice (ice_at_nospam.com)
Date: 10/21/04 

Date: Thu, 21 Oct 2004 17:45:19 -0500

All -

I've done this so many times in the past, so I hope I am missing something
obvious. My server config file looks like this:
<?xml version="1.0" encoding="utf-8" ?>

<configuration>

<system.runtime.remoting>

<application>

<service>

<wellknown

mode = "Singleton"

type = "RemoteObject.RemoteObject,RemoteObject"

objectUri = "RemoteObject"

/>

</service>

<channels>

<channel ref = "tcp" port ="8000"/>

<serverProviders>

<formatter ref="binary" typeFilterLevel="Full"/>

</serverProviders>

</channels>

</application>

</system.runtime.remoting>

</configuration>

and my client config file is similar except for the necessary changes. When
I pass a custom object from my client to my server I get the
"System.Runtime.Serialization.SerializationException: Because of security
restrictions" error.

When I do the configuration in code i.e. set the typeFilter property on the
provider, I don't get this error. It's almost like the framework is not
reading file in its entirety. Has anyone seen this or have suggestions?

I am running framework v1.1 sp1 on W2K3.

Thanks.

Eb

Relevant Pages

  • Re: Problem with remote events
    ... Do you have refference to assembly which holds BroadcastEventWrapper at ... > Server config file: ...
    (microsoft.public.dotnet.framework.remoting)
  • Re: DOCSIS vulnerability
    ... Sure, you can get a config file onto the modem, but if ... the router will not allow the cable modem to finish booting (With some kind ... > items, a syslog server, a tftp server, a time server, and a config file to ... > rate limit their customers, it's how they keep their customers ...
    (Vuln-Dev)
  • Re: Deserialization exception when using MarshalByRef object with events
    ... In your server's config file you have the element outside ... > of code from the server, client, MarshalByRef object, and .config ... > public void Start ... > public class Bomb: MarshalByRefObject ...
    (microsoft.public.dotnet.framework.remoting)
  • Re: Better way to manage DNS
    ... parser that would inturn set options on a w2k/w3k server and export the ... Justin has been working on a parser for the config file and general ... > Microsoft MVP (Windows Server System: ...
    (microsoft.public.windows.server.dns)
  • Re: Which authenttication is better
    ... > PreferredAuthentications in the config file or on the command line. ... >>hostbased method" of protocol 1 is tried first, ... >>I was presented with the server host's RSA ... >>The fingerprint from the 2nd one didn't match ...
    (comp.security.ssh)