如何在广域网中控制DCOM的安全

[liontian1977]

COM,DCOM的安全是基于NT的安全技术的,如果把DCOM 的身份验证级别不设为无,模拟级别不设为匿名,那么远程CLIENT 将不能访问SERVER 上的DCOM 组件,
但是不进行安全控制,有很危险,所以请大家一起来讨论:

1. DCOM 的安全认证要求客户端以域用户身份登陆,但广域网客户端不一定是服务端的域用户,并且客户端要进行一些配置,但我希望客户端什么也不设置,就能访问DCOM,
并且有身份验证,请问该如何?
2. 我想在客户端模拟一次服务端的域用户登陆,该如何实现?


欢迎大家提出高见!

[wyzegg]

使用编程的安全性呀

[Dreamaster]

咱俩的问题正好相反。有趣！
在客户端起动时，选择拨号登陆服务器。

[XT2]

DCOM does have security in mind, it use RPC security model, but working on COM security is a bloody process for new commers, you may want to reference <<Programming Windows Security>> by COM security guru, Keith Brown. This is definitely the best COM security book.

DCOM is not scalable in internet, one problem is DCOM elect using dynamic port for resolving each object reference, this approach will be blocked by most of the firewallls, CORBA faces the same problem too.

one solution is using COM Internet Service, but it may take several weeks before doing things right