Help - Need to allow Java Client to post form data to ASPX Web Page

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

jjouett - 28 Apr 2006 14:50 GMT

I'm trying to setup an ASPX web page such that an existing Java Client
used by external customers can post form data, and I'm running into a
problem. The existing Java Client doesn't set any credentials, and when
I try to post to my page, the Java Client gets a 401 error. My own C#
client works because I am setting the Credentials of the WebClient, but
I have to support the existing Java Client as-is by external users.
What is the setup of my Web Page or IIS to allow a client to post form
data without requiring them to define credentials without opening up
any security holes?

Thanks in advance

Reply to this Message

Robert Ginsburg - 28 Apr 2006 15:17 GMT

It appears that you are going to allow anonymous access and anonymous post
data, so the "without any security holes" requirement is the problem.
You could go to external infrastracture and only allow client IP addresses
to connect (router settings) to your anonmyous site, or you could setup an
internally accessible URL, and require that clients vpn in to get to it,
since the vpn would be password protected you would have some protection of
your site.

> I'm trying to setup an ASPX web page such that an existing Java Client
> used by external customers can post form data, and I'm running into a
[quoted text clipped - 7 lines]
>
> Thanks in advance

Reply to this Message

jjouett - 28 Apr 2006 15:41 GMT

Thanks for the feedback. The existing Java client application has a
user/password pair in the values it posts, so I guess that there can be
application logic provided to only allow authorized users to upload
data. Concerning the configuration of the web page or IIS, is there a
recommended resource for describing how to set this up? Searching for
"anonymous post" turns up a log of results that are in no way related
to this topic.

Thanks in advance

Reply to this Message

Robert Ginsburg - 28 Apr 2006 16:04 GMT

Its as simple as enabling anonymous access on the web site directory
security tab.

> Thanks for the feedback. The existing Java client application has a
> user/password pair in the values it posts, so I guess that there can be
[quoted text clipped - 5 lines]
>
> Thanks in advance

Reply to this Message

Mitch Gallant - 28 Apr 2006 16:14 GMT

which should be the default setting on a web folder via IIS
- Mitch

> Its as simple as enabling anonymous access on the web site directory
> security tab.
[quoted text clipped - 8 lines]
>>
>> Thanks in advance

Reply to this Message

Help - Need to allow Java Client to post form data to ASPX Web Page

Free Magazines