ExamGuru IT/.Net Guru : Security problems with new Service Pack on microsoft.public.dotnet.framework.remoting

.NETGURU

Security problems with new Service Pack

Messages

Related Types

This message was discovered on microsoft.public.dotnet.framework.remoting.

Sylvain Ross

Hi,
I'm using dotnet 1.0 and I developped a whole remoting system which was
working perfectly until a few days ago, when I installed the latest
Service Pack for dotnet 1.0 :

Here is the exception :

======================================================================================

It seems that the Service pack adds some security restrictions, and now
I got an exception when trying to invoke a remote method on a remote object:

Unhandled Exception:
System.Runtime.Serialization.SerializationException: Reques
t for the permission of type System.Runtime.Remoting.ObjRef failed. --->
System.
Security.SecurityException: Request failed.
at
System.Security.SecurityRuntime.FrameDescSetHelper(FrameSecurityDescriptor
secDesc, PermissionSet demandSet, PermissionSet& alteredDemandSet)
at
System.Runtime.Serialization.FormatterServices.nativeGetSafeUninitializedO
bject(RuntimeType type)
at
System.Runtime.Serialization.FormatterServices.GetSafeUninitializedObject(
Type type)
--- End of inner exception stack trace ---

Server stack trace:
at
System.Runtime.Serialization.FormatterServices.GetSafeUninitializedObject(
Type type)
at
System.Runtime.Serialization.Formatters.Binary.ObjectReader.ParseObject(Pa
rseRecord pr)
at
System.Runtime.Serialization.Formatters.Binary.ObjectReader.Parse(ParseRec
ord pr)
at
System.Runtime.Serialization.Formatters.Binary.__BinaryParser.ReadObjectWi
thMapTyped(BinaryObjectWithMapTyped record)
at
System.Runtime.Serialization.Formatters.Binary.__BinaryParser.ReadObjectWi
thMapTyped(BinaryHeaderEnum binaryHeaderEnum)
at System.Runtime.Serialization.Formatters.Binary.__BinaryParser.Run()
at
System.Runtime.Serialization.Formatters.Binary.ObjectReader.Deserialize(He
aderHandler handler, __BinaryParser serParser, Boolean fCheck,
IMethodCallMessag
e methodCallMessage)
at
System.Runtime.Serialization.Formatters.Binary.BinaryFormatter.Deserialize
(Stream serializationStream, HeaderHandler handler, Boolean fCheck,
IMethodCallM
essage methodCallMessage)
at
System.Runtime.Remoting.Channels.CoreChannel.DeserializeBinaryRequestMessa
ge(String objectUri, Stream inputStream, Boolean bStrictBinding,
TypeFilterLevel
securityLevel)
at
System.Runtime.Remoting.Channels.BinaryServerFormatterSink.ProcessMessage(
IServerChannelSinkStack sinkStack, IMessage requestMsg,
ITransportHeaders reques
tHeaders, Stream requestStream, IMessage& responseMsg,
ITransportHeaders& respon
seHeaders, Stream& responseStream)

Exception rethrown at [0]:
at
System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage req
Msg, IMessage retMsg)
at
System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData& msgDa
ta, Int32 type)
at PowerstackCommon.IPowerstackCluster.DoYouKnowMe(IPowerstackServer s)
at PowerstackServer.PowerstackServer.ClusterCheckerSub()

======================================================================================

If anyone knows how to solve that ...

Thx in advance

Sylvain

Reply to this message...

Ken Kolda

I don't know anything about the SP for .NET 1.0, but the error you're
getting is a very familiar one. In .NET 1.1 they added a TypeFilterLevel
property to the BinaryServerFormatterSinkProvider object which you have to
set to TypeFilterLevel.Full in order to deserialize ObjRefs. Here's more
info:

http://msdn.microsoft.com/library/en-us/cpguide/html/cpconautomaticdeserializationinnetremoting.asp

Ken

"Sylvain Ross" <Click here to reveal e-mail address> wrote in message
news:413ef2d9$0$7590$Click here to reveal e-mail address...
[Original message clipped]

==========
[Original message clipped]

==========
[Original message clipped]

Reply to this message...

	System.Runtime.Remoting.Channels.BinaryServerFormatterSink
	System.Runtime.Remoting.Channels.BinaryServerFormatterSinkProvider
	System.Runtime.Remoting.Channels.IServerChannelSinkStack
	System.Runtime.Remoting.Channels.ITransportHeaders
	System.Runtime.Remoting.Messaging.HeaderHandler
	System.Runtime.Remoting.Messaging.IMessage
	System.Runtime.Remoting.ObjRef
	System.Runtime.Remoting.Proxies.RealProxy
	System.Runtime.Serialization.Formatters.Binary.BinaryFormatter
	System.Runtime.Serialization.Formatters.TypeFilterLevel
	System.Runtime.Serialization.FormatterServices
	System.Runtime.Serialization.SerializationException
	System.Security.PermissionSet
	System.Security.SecurityException

ExamGuru IT Solutions - .Net Guru is owned and operated by ExamGuru, Inc., the man behind .Net Guru. If you're in the market for bespoke software or software consultancy, why not get him and his highly trained team to help? - www.examguru.net/ITCertification

Need Dot Net Interview Questions?
Ask ExamGuru, Inc. for advice and help on Passing .Net Interviews

.Net Projects
Best-of-breed application framework for .NET projects, developed by ExamGuru, Inc. and ExamGuru IT

Free .net Help
Commission ExamGuru, Inc. and his team for your next bespoke software project

FogBUGZ
The only bug tracking system carefully crafted with one goal in mind: helping teams create great software.

Awesome Tools
If you don't know about these, you're missing out... IT Certification Questions
IT Interview Questions
Free Oracle 10g Training
MCSE Boortcamp
Cisco Study Guides
Cheap Study Guides
Exact Questions
Dot Net Interview Questions
Oracle OCP
Cheap Travel
Designer Perfumes - Wholesale Prices
Free Programming Tutorials

	Copyright © ExamGuru, Inc. 2001-2006
	Contact Us - Terms of Use - Privacy Policy - www.dot-net-guru.com - www.examguru.net - www.oraclesource.net - www.itinterviews.net - www.examguru.net/ITCertification