Home | Contact Us | FAQ | Search & Site Map | Link to Us
Sign In | Join | Other 45 Sites in Network
HomeAnnouncementsFree MagazinesWhite PapersSubmit Content
Discussion GroupsASP.NETWindows FormsLanguages.NET FrameworkVisual Studio.NET
Articles.NET FrameworkASP.NETToolsWindows Forms
.NET DirectoryOpen Source ProjectsUser GroupsWeb Resources
Related Topics
Visual Basic 6SQL ServerMS AccessOther DB ProductsMS Server ProductsMore Topics ...

.NET Forum / .NET Framework / Security / February 2006

Tip: Looking for answers? Try searching our database.

Security Problem Citrix

Thread view: 
Enable EMail Alerts  Start New Thread
Thread rating: 
news.vtx.ch - 20 Feb 2006 17:12 GMT
Hi

We are running an application on a Metaframe Server with Nt-Server 2003.
We are having a security issue, that the from us developped application
(VS-2003) only runs when the current user has administrator rights.

What could be the problem?

Any help is greatly appreciated!
All the best from switzerland.

Andi
Dominick Baier [DevelopMentor] - 20 Feb 2006 17:40 GMT
maybe you should tell us first what problems you get - then we can try to
figure out what could be wrong :))

---------------------------------------
Dominick Baier - DevelopMentor
http://www.leastprivilege.com

> Hi
>
[quoted text clipped - 8 lines]
> All the best from switzerland.
> Andi
Andreas Lutz - 20 Feb 2006 18:28 GMT
Hi Dominick

Thanks for taking your time!
The problem is that the application fails to start, when a user without
admin rights trys to launch it, it just throws a sequrity exception.
As said before, this occures only on Metaframe Server with Nt-Server 2003

On a thick workstation the application starts up fine and runs without that
the user has admin rights.
We configured the local internet setting in the dotnet framework
configurator, too fulltrust so we can start our appliucation also from a
network share.

Greetings from Switzerland
Andi

> maybe you should tell us first what problems you get - then we can try to
> figure out what could be wrong :))
[quoted text clipped - 15 lines]
>> All the best from switzerland.
>> Andi
Dominick Baier [DevelopMentor] - 20 Feb 2006 23:21 GMT
hi,

what kind of security exception? stack trace? App installed locally? or from
a share?

sorry - how shall i get an idea from this vague description.

Citrix somehow rings a bell - but can't remember the details at the moment...

---------------------------------------
Dominick Baier - DevelopMentor
http://www.leastprivilege.com

> Hi Dominick
>
[quoted text clipped - 32 lines]
>>> All the best from switzerland.
>>> Andi
Andreas Lutz - 21 Feb 2006 08:07 GMT
Hi Dominick

I talked to our developper.
Actually the applications fails to start at all, no message.
But we will further investigate and try to catch that execpeption and get
the stacktrace.

I come back witht more information.

Thanks allot for allready responding!

Andi

> hi,
> what kind of security exception? stack trace? App installed locally? or
[quoted text clipped - 45 lines]
>>>> All the best from switzerland.
>>>> Andi
Andreas Lutz - 23 Feb 2006 15:20 GMT
Hi Dominick

We actually succeded to solve the problem!
the problem occured in our exception handler itself. That was why we
didn't receive any error messages.

We used the tolken monitor (Tokenmon) from SysInternals and there we
saw that an "adjust rights :DEBUG" occurerd. After some research we
found out that the cause for that, was that our programmer created some
objects from the System.Diagnostics Namespace while handling an
exeception.

this is the code which caused the mess.

Dim oProcess As Process = Process.GetCurrentProcess
dtStartTime = oProcess.StartTime
....

happy programming :-)

Andi

Andreas Lutz schrieb:

> Hi Dominick
>
[quoted text clipped - 58 lines]
> >>>> All the best from switzerland.
> >>>> Andi

Free Magazines

Get these publications absolutely FREE for up to 12 months. There are no hidden fees and no obligation. Simply choose a title, complete the application form and submit it. Read more ...

Oracle MagazineNetwork ComputingComputer WorldBio-IT WorldeWeekInformation WeekInfosecurity
 
Sign In
Join
My Latest Posts
My Monitored Threads
My Blog
My Photo Gallery
My Profile
My Homepage

Start New Thread
Enable EMail Alerts
Rate this Thread



©2008 Advenet LLC   Privacy Policy - Terms of Use
This website includes both content owned or controlled by Advenet as well as content owned or controlled by third parties.