Solved

DCOM security problem

Posted on 2001-07-17
12
295 Views
Last Modified: 2010-04-06
I have made a DCOM server. Everything works well when connection from clients that are in the same domain as the server.

I moved my server out of the domain and into its on little workgroup and started my server. When I connect from a machine from within the domain I get a "Interface not supported" errormessage. But if I move that server into the workgroup I have no problem connecting!

I have set the following in DCOMCNFG:

"Default Authentication Level"=none
"Default Impersonation Level"=Anonymous
"Default Access Permissions"=Everyone allowed
"Default Launch Permissions"=Everyone allowed

What the heck is wrong?? I don't want the server in the workgroup to do any security checking.

Thanks.
0
Comment
Question by:kbb2
  • 5
  • 3
  • 2
  • +2
12 Comments
 

Author Comment

by:kbb2
ID: 6288966
Might I add the the DCOM server is running as a service using SvComm.
0
 
LVL 21

Expert Comment

by:ziolko
ID: 6289001
What kind of OS are server and client ?(WinNT - PDC, BDC, SAS; Win2K, Win9x)?
ziolko.
0
 
LVL 3

Expert Comment

by:smurff
ID: 6289005
Just a comment but if I were you I would make a simple DCOM server and client (not in a service) and see if you can connect to it. I say this because I think it is to do with system permissions in the NT service.

regards
Smurff
0
Free Tool: Postgres Monitoring System

A PHP and Perl based system to collect and display usage statistics from PostgreSQL databases.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

 

Author Comment

by:kbb2
ID: 6289006
I actually just sorted it out!!

Im using WinNT4 and Win2k.

It seems that I must set the above settings on both the client AND server! The one with the highest security wins. So when setting the client also I connected with no problem!
0
 
LVL 21

Expert Comment

by:ziolko
ID: 6289009
kbb2 > yes if You use callbacks, if not I'm not sure
ziolko.
0
 

Author Comment

by:kbb2
ID: 6289019
I don't use callbacks but I found two very interesting articles that gave me inspiration:

http://www.codeguru.com/activex/COMSecurity1.html
http://www.codeguru.com/activex/COMSecurity2.html

I guess that the question is closed then!
0
 
LVL 21

Expert Comment

by:ziolko
ID: 6289045
Just think some people gave up with DCOM 'cause they couldn't solve problems with security config :-)))
ziolko.
0
 

Author Comment

by:kbb2
ID: 6289061
DCOM certainly is very good but can be frustrating sometimes... Very good to have expertsexchange in those cases.
0
 

Expert Comment

by:gutian
ID: 6290932
I think if you login with the user his name is same with a domain user and password is the same on the client,it may be right.
0
 

Author Comment

by:kbb2
ID: 6292564
No I tried that!! I dont' want any authentication so I switched it off on the server but I just didn't know that you also had to switch it off on the client to!

The hole point is that there are a firewall between them so the machine in front of the firewall can't see the PDC.

But I have no problem anymore!! I love DCOM... Dang nice thing!


0
 
LVL 1

Expert Comment

by:Moondancer
ID: 7014636
ADMINISTRATION WILL BE CONTACTING YOU SHORTLY.  Moderators Computer101, Netminder or Mindphaser will return to finalize these if they are still open in 7 days.  Experts, please post closing recommendations before that time.

Below are your open questions as of today.  Questions which have been inactive for 21 days or longer are considered to be abandoned and for those, your options are:
1. Accept a Comment As Answer (use the button next to the Expert's name).
2. Close the question if the information was not useful to you, but may help others. You must tell the participants why you wish to do this, and allow for Expert response.  This choice will include a refund to you, and will move this question to our PAQ (Previously Asked Question) database.  If you found information outside this question thread, please add it.
3. Ask Community Support to help split points between participating experts, or just comment here with details and we'll respond with the process.
4. Delete the question (if it has no potential value for others).
   --> Post comments for expert of your intention to delete and why
   --> YOU CANNOT DELETE A QUESTION with comments; special handling by a Moderator is required.

For special handling needs, please post a zero point question in the link below and include the URL (question QID/link) that it regards with details.
http://www.experts-exchange.com/jsp/qList.jsp?ta=commspt
 
Please click this link for Help Desk, Guidelines/Member Agreement and the Question/Answer process.  http://www.experts-exchange.com/jsp/cmtyHelpDesk.jsp

Click you Member Profile to view your question history and please keep them updated. If you are a KnowledgePro user, use the Power Search option to find them.  

Questions which are LOCKED with a Proposed Answer but do not help you, should be rejected with comments added.  When you grade the question less than an A, please comment as to why.  This helps all involved, as well as others who may access this item in the future.  PLEASE DO NOT AWARD POINTS TO ME.

To view your open questions, please click the following link(s) and keep them all current with updates.
http://www.experts-exchange.com/questions/Q.11872059.html
http://www.experts-exchange.com/questions/Q.20091392.html
http://www.experts-exchange.com/questions/Q.20151939.html
http://www.experts-exchange.com/questions/Q.20161749.html
http://www.experts-exchange.com/questions/Q.20222497.html
http://www.experts-exchange.com/questions/Q.20223741.html
http://www.experts-exchange.com/questions/Q.20228155.html
http://www.experts-exchange.com/questions/Q.20250731.html
http://www.experts-exchange.com/questions/Q.20257573.html
http://www.experts-exchange.com/questions/Q.20268089.html
http://www.experts-exchange.com/questions/Q.20284719.html

To view your locked questions, please click the following link(s) and evaluate the proposed answer.
http://www.experts-exchange.com/questions/Q.20155364.html

*****  E X P E R T S    P L E A S E  ******  Leave your closing recommendations.
If you are interested in the cleanup effort, please click this link
http://www.experts-exchange.com/jsp/qManageQuestion.jsp?ta=commspt&qid=20274643 
POINTS FOR EXPERTS awaiting comments are listed in the link below
http://www.experts-exchange.com/commspt/Q.20277028.html
 
Moderators will finalize this question if in @7 days Asker has not responded.  This will be moved to the PAQ (Previously Asked Questions) at zero points, deleted or awarded.
 
Thanks everyone.
Moondancer
Moderator @ Experts Exchange
0
 
LVL 1

Accepted Solution

by:
Moondancer earned 0 total points
ID: 7024928
I have refunded 100 points to you for this question and closed it for you.
Moondancer - EE Moderator
0

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

The uses clause is one of those things that just tends to grow and grow. Most of the time this is in the main form, as it's from this form that all others are called. If you have a big application (including many forms), the uses clause in the in…
Creating an auto free TStringList The TStringList is a basic and frequently used object in Delphi. On many occasions, you may want to create a temporary list, process some items in the list and be done with the list. In such cases, you have to…
Established in 1997, Technology Architects has become one of the most reputable technology solutions companies in the country. TA have been providing businesses with cost effective state-of-the-art solutions and unparalleled service that is designed…
A short tutorial showing how to set up an email signature in Outlook on the Web (previously known as OWA). For free email signatures designs, visit https://www.mail-signatures.com/articles/signature-templates/?sts=6651 If you want to manage em…

830 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question