CodeVerge.Net Beta


   Explore    Item Entry    Members      Register  Login  
NEWSGROUP
.NET
Algorithms-Data Structures
Asp.Net
C Plus Plus
CSharp
Database
HTML
Javascript
Linq
Other
Regular Expressions
VB.Net
XML

Free Download:
Zone: > NEWSGROUP > Asp.Net Forum > general_asp.net.security Tags:
Item Type: NewsGroup Date Entered: 11/9/2007 3:42:08 PM Date Modified: Subscribers: 0 Subscribe Alert
Rate It:
(NR, 0)
XPoints: N/A Replies: 3 Views: 33 Favorited: 0 Favorite
Can Reply:  No Members Can Edit: No Online: Yes
4 Items, 1 Pages 1 |< << Go >> >|
j00h
Asp.Net User
Retrieving documents from a file server11/9/2007 3:42:08 PM

0/0

Not sure 100% if this fits in to the security category, but hey it's my first post and I'll learn quickly.

I have an asp.net website that must allow users who have been successfully authenticated to view a suite of word documents. However, these documents are stored on a file server. The file server is on our company domain and the web server is in a DMZ. What is the best way to allow documents to be copied from the application server up to the web server ready for view when a user logs in.

I was thinking that we could set up a system account on the web server that has the privliges to get the documents from the file server. When the user logs in the process of copying up the documents to the web server would be done by this new account. However, our infrastructure guys think that this is a bad idea as it would allow anyone who has compromised the web server free access to the secure documents. They recommened using an application server inside the domain that receives requests from the web server. When a request is received the application server would do the copy process.

I'm really in the dark about the best way to achieve this. There must be a best practivce way of retrieving content from another server and uploading them to a web server. Obviously we would have to amend our firewall rules to allow this to happen.

Any help or guidance would be appreciated.

 Thanks in advance!
utlandsfantomen
Asp.Net User
Re: Retrieving documents from a file server11/9/2007 10:37:37 PM

0/0

I'm agreeing with the infrastructure guys. Letting a machine in the DMZ know something about the inside is not a good idea.

What you could do, is set up some kind of push-service towards the machine placed in the DMZ from the inside. Setting up file-synchronization from the inside perhaps? FTP? That way, the DMZ machine won't know anything about the inside, and you can still publish the documents. No documents containing sensitive information are to be published, correct? If that is true, you can't use something on the DMZ. Or, you can, but I wouldn?t beacuse it's to insecure. In that case I'd look towards VPN.

Cheers!

/Eskil
almargob
Asp.Net User
Re: Retrieving documents from a file server11/10/2007 12:55:18 AM

0/0

 As I understand the problem you can program a windows service that has a file watcher and as soon as the user login in, the website dumps a file in the directory watched by the service, the service will read the username and password from the file and authenticates the user which add another level of security. After that the service reads the files from your application server and copies them to the a local folder accessible by the website. The website will read the files and display them. You might need to use Ajax to make asynchronous calls checking for the files if ready or not.

 
Hope this helps. 

Mark as an answer if it helps.
j00h
Asp.Net User
Re: Retrieving documents from a file server11/11/2007 8:31:43 PM

0/0

Sounds like exactly what I need. Like the idea of adding the username and password in the file, as I can set up a connection from the app server to to our SQL server where the .Net Membership database is located. I grabbed a Windows Service template from Code Project, which is pretty good as a starting point. Think I'll be ok from here. Thanks so much!
4 Items, 1 Pages 1 |< << Go >> >|


Free Download:

Books:
Computer Analysis of Sequence Data Authors: Annette M. Griffin, Hugh G. Griffin, Humana Press, Pages: 0, Published: -1
The Internet navigator: The Essential Guide to Network Exploration for the Individual Dial-Up User Authors: Paul Gilster, Pages: 590, Published: 1994
The Internet for Scientists and Engineers: Online Tools and Resources Authors: Brian J. Thomas, Pages: 497, Published: 1997
Computer Analysis of Sequence Data Authors: Annette M. Griffin, Hugh G. Griffin, Humana Press, Pages: 0, Published: 1994
Applied Cryptography and Network Security: Third International Conference, ACNS 2005, New York, NY, USA, June 7-10, 2005 : Proceedings Authors: John Ioannidis, Angelos Keromytis, Moti Yung, Pages: 530, Published: 2005
Linux Cookbook Authors: Carla Schroder, Pages: 553, Published: 2005
Pro EDI in BizTalk Server 2006 R2: Electronic Document Interchange Solutions Authors: Hristo Deshev, Mark Beckner, Pages: 185, Published: 2007
Microsoft Office XP 8-in-1: Office XP 8 in 1 Authors: Joe Habraken, Pages: 921, Published: 2001
HTML and XHTML: The Definitive Guide Authors: Chuck Musciano, Bill Kennedy, Pages: 645, Published: 2002

Web:
System and method for retrieving files from a file server using ... There is disclosed systems and methods for retrieving files from a file server using file attributes. In one embodiment, an audio file server is accessed to ...
DBAzine.com: Saving and Retrieving Binary Files With SQL Server Additionally, the Full-Text Index feature of SQL Server requires the storage and specification for each document of its file extension to allow for ...
Retrieving documents from a file server - ASP.NET Forums Retrieving documents from a file server. Last post 11-11-2007 3:31 PM by j00h. 3 replies. Sort Posts:. Oldest to newest, Newest to oldest ...
Retrieving a tif image stored on a windows file server and ... Oct 14, 2007 ... Retrieving a tif image stored on a windows file server and displaying it in a new web ... -For NT share the documents folder on file server ...
Document Manager Administrator's Guide - About archiving and ... Run agents to archive and retrieve documents on a file system. ... This add-in task is disabled during Document Manager Server setup. ...
ODWEK MP - Retrieve Document HTM file is the sample template file provided with ODWEK. ... _afp=value, When you retrieve an AFP document from the OnDemand server, the value of this ...
How to retrieve lost files using Group Policy folder redirection Learn how to retrieve lost files using the 'Redirect My Documents' option ... to save their critical files to the network file server/mapped network drive, ...
(WO/2007/101022) SYSTEM AND METHOD FOR RETRIEVING FILES FROM A ... A method for retrieving files from a file server, said method comprising: sending a query URL to a browser, said query URJL addressing said file server, ...
Retrieving an XML document using Ajax The below shows retrieving this XML document and outputing the headlines ... Assuming this is the case on your server and the file you're retrieving via ...
Retrieving Files from an FTP Server If the application has established an FTP session handle to the server with ... The following example shows how to retrieve the file indicated by the ...

Videos:
SoIntuitive Office Manager Touch Filing Document Management SoIntuitive Office Assistant allows you to Scan with One Touch, File with One Touch and find your documents with One Touch. It's a 100% web based Doc...
Learn How To Make A Website Go to http://www.supawebsite.com and learn how to make a website in less than 30 minutes. A website (alternatively, web site or Web site, a back-co...
Discovering the Internet: Protocols Episode 3(of a 11-part series) This Nortel LearniT tutorial reviews the protocols for navigating the Internet.
Discovering the Internet: Protocols Episode 3(of a 11-part series) This Nortel LearniT tutorial reviews the protocols for navigating the Internet.
Introduction to Google Data Jeff Fisher walks through basic history and concepts behind the Google Data protocol. Visit the documentation for more information and list of availa...
XML11: An Abstract Windowing Protocol Google TechTalks June 1, 2006 Arno Puder Arno Puder received his masters and Ph.D. in computer science and is currently working as an Assistant Prof...
Using open source tools for performance testing Google London Test Automation Conference (LTAC) Google Tech Talks September 8th, 2006 Presenter: Goranka Bjedov
Kirby Air Ride another video




Search This Site:










debugging active directory security

very simple display problem

web application administration tool

certificates

best way to iterate through treeview

user control menu

error when using web parts.

validating textbox

bind sitemap to dropdownlist

get currently theme from a masterpage

get directory listing from another server.

centering static level menu item text (how?)

cookieless auth...

dnn 3.0.8 navigation issue

deleting files and folders

printing to com port

speed issues

how to allow to edit a page without being able to add a module to a page from control panel

<@ master> does not have a theme attribute?

adding meta tags not working ..!

login user id not persistent after user logs in. works locally but not on server side.

cannot access streamed ashx file when using forms (or windows) authentication.

@outputcache

error message when deploying

use msword to open .doc file instead of ie

tostring() – formatting for the web

asp to asp.net 2 code convert help

path - relative / absolute

"adduser" doens't work

portal starter kit web.config, portalcfg.xml and portalcpg.xsd
 
All Times Are GMT