Re: Remoting Security issues

From: Ken Kolda (ken.kolda_at_elliemae-nospamplease.com)
Date: 10/21/04 

Date: Thu, 21 Oct 2004 16:49:44 -0700

The <serverProviders> should be within the <channel> tag, e.g.

<channels>
   <channel ref = "tcp" port ="8000">
      <serverProviders>
         <formatter ref="binary" typeFilterLevel="Full"/>
      </serverProviders>
   </channel>
</channels>

Ken

"Ice" <ice@nospam.com> wrote in message
news:%23MOtp%237tEHA.160@TK2MSFTNGP11.phx.gbl...
> All -
>
> I've done this so many times in the past, so I hope I am missing something
> obvious. My server config file looks like this:
> <?xml version="1.0" encoding="utf-8" ?>
>
> <configuration>
>
> <system.runtime.remoting>
>
> <application>
>
> <service>
>
> <wellknown
>
> mode = "Singleton"
>
> type = "RemoteObject.RemoteObject,RemoteObject"
>
> objectUri = "RemoteObject"
>
> />
>
> </service>
>
> <channels>
>
> <channel ref = "tcp" port ="8000"/>
>
> <serverProviders>
>
> <formatter ref="binary" typeFilterLevel="Full"/>
>
> </serverProviders>
>
> </channels>
>
> </application>
>
> </system.runtime.remoting>
>
> </configuration>
>
> and my client config file is similar except for the necessary changes.
When
> I pass a custom object from my client to my server I get the
> "System.Runtime.Serialization.SerializationException: Because of security
> restrictions" error.
>
> When I do the configuration in code i.e. set the typeFilter property on
the
> provider, I don't get this error. It's almost like the framework is not
> reading file in its entirety. Has anyone seen this or have suggestions?
>
> I am running framework v1.1 sp1 on W2K3.
>
> Thanks.
>
> Eb
>
>

Relevant Pages

  • Re: Problems with Remote Events using .NET 2.0
    ... Server config file: ... when the server hits the line of code ... "This remoting proxy has no channel sink which means either the server ... Since I always use code to build the remote function. ...
    (microsoft.public.dotnet.framework.remoting)
  • Re: Problem with remote events
    ... Do you have refference to assembly which holds BroadcastEventWrapper at ... > Server config file: ...
    (microsoft.public.dotnet.framework.remoting)
  • Re: Problems with Remote Events using .NET 2.0
    ... Server config file: ... Client config file: ... when the server hits the line of code ...
    (microsoft.public.dotnet.framework.remoting)
  • Remoting Security issues
    ... I've done this so many times in the past, so I hope I am missing something ... and my client config file is similar except for the necessary changes. ... I pass a custom object from my client to my server I get the ...
    (microsoft.public.dotnet.framework.remoting)
  • [Full-disclosure] Multiple vulnerabilities in ircu
    ... Ircu is the open source IRC server used on Undernet and other IRC networks. ... they allow clients to get more privileges on the IRC ... Gaining ops on channels that get empty on one side of a netsplit ... Making clients think someone is on a channel, ...
    (Full-Disclosure)
Loading