access to server application

access to server application

Secure Home | Search | About
 General Computer Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
access to server application lolek1021 01-10-2006
Posted by on January 10, 2006, 11:21 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Hi,
I have a system consisting of 3 elements:
- application written in C++ using CORBA API interface working as a
server process on Windows 2003 server,
- CORBA Name Server, working on the same machine,
- clients - applications written in Java working on Windows station in
the internal network of company (they do not have a permanent IP
address);
All this tree elements work together in an internal network of big
company.
Clients communicate with server by TCP on a known port.
My problem is that every single host with a client installed on it can
connect to the server and this solution is not safe (because of data
access which can be made on a server).
I need a solution which will have a list of authorized users (login +
password) and only those users will be able to connect to the server.
I thought about solution using IPsec, with filtering IP, but clients do
not have permanent IP. Besides this solution is not good because I wont
users to be filtered not IPs.
Any ideas? Any ready to use software? Any Windows system solutions?
Thx for any idea of solution:)
Lolek1021


Posted by Volker Birk on January 10, 2006, 11:41 am
If you were  Registered and logged in, you could reply and use other advanced thread options
lolek1021@wp.pl wrote:
[CORBA implementation]
> I need a solution which will have a list of authorized users (login +
> password) and only those users will be able to connect to the server.

CORBA does not solve such problems. You have to implement authentication
in your server yourself.

Yours,
VB.
--
Ein vision statement ist in aller Regel planfreies Gelalle einer Horde
realitätsferner Spinner.
        Dietz Pröpper in d.a.s.r

Posted by Barry Margolin on January 10, 2006, 11:13 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
lolek1021@wp.pl wrote:

> Hi,
> I have a system consisting of 3 elements:
> - application written in C++ using CORBA API interface working as a
> server process on Windows 2003 server,
> - CORBA Name Server, working on the same machine,
> - clients - applications written in Java working on Windows station in
> the internal network of company (they do not have a permanent IP
> address);
> All this tree elements work together in an internal network of big
> company.
> Clients communicate with server by TCP on a known port.
> My problem is that every single host with a client installed on it can
> connect to the server and this solution is not safe (because of data
> access which can be made on a server).
> I need a solution which will have a list of authorized users (login +
> password) and only those users will be able to connect to the server.
> I thought about solution using IPsec, with filtering IP, but clients do
> not have permanent IP. Besides this solution is not good because I wont
> users to be filtered not IPs.
> Any ideas? Any ready to use software? Any Windows system solutions?
> Thx for any idea of solution:)
> Lolek1021

Put the server behind a firewall that supports VPNs, and require users
to use a client-to-gateway VPN that performs authentication.

--
Barry Margolin, barmar@alum.mit.edu
Arlington, MA
*** PLEASE post questions in newsgroups, not directly to me ***
*** PLEASE don't copy me on replies, I'll read them in the group ***

Similar ThreadsPosted
Do P2P programs need access as server? April 18, 2005, 7:15 pm
SSRT4782 rev. 0 HP-UX CIFS Server potential remote root access July 28, 2004, 12:10 pm
SSRT4782 rev. 1 HP-UX CIFS Server potential remote root access August 5, 2004, 2:05 pm
Cisco Access Control Server and Oracle Internet Directory July 22, 2004, 11:44 am
for angie: truly fantabulous premium news server access - utbi - (1/1) January 24, 2007, 10:31 am
SSRT3622 rev.3 HP-UX Apache HTTP Server Denial of Service, unauthorized access. July 5, 2004, 3:43 pm
SSRT4789 rev. 0 HP-UX Apache server remote Denial of Service and bypassing access restrictions August 9, 2004, 12:31 pm
SSRT4789 rev. 1 HP-UX Apache server remote Denial of Service and bypassing access restrictions August 13, 2004, 11:48 am
HPSBUX02155 SSRT061235 rev.1 HP-UX CIFS Server (Samba) Local Unauthorized Access, Elevated Privileges September 25, 2006, 4:02 pm
HPSBUX02157 SSRT061220 rev.1 HP-UX Running Ignite-UX Server, Remote Unauthorized Access and Privilege Elevation October 2, 2006, 7:15 am

The site map in XML format XML site map

Contact Us | Privacy Policy