Read/Write/Modify actions needed on a remote server.

[chris]

Hello,

I do not have much expertise in the security area, especially when it
comes to Windows Authentication.

We have a Win 2003 server that runs the ASP.NET 2.0 Web application.

I have a simple page that needs to access the directory info on a
remote server and if the directory does not exist then create the
directory.

Here is a snippet of the code I am trying to exectute:
string serverPath =
@"\\RemoteServer\webimages\8f3d7375-05e9-435d-b284-3d0a9179681c";
DirectoryInfo di = new DirectoryInfo(serverPath);
if (!di.Exists)
di.Create();

imagefiles = di.GetFiles();

The problem is the DirectoryInfo object always has false for the Exists
property.

Here is the exception I get when it tries to create the directory:
Method Name: WinIOError
Declaring Type: System.IO.__Error
Message:
Could not find file
'\\RemoteServer\webimages\8f3d7375-05e9-435d-b284-3d0a9179681c'.

Ops told me that they gave the ASP.NET user full control to the
webimages directory. The remote machine is on the same domain and is a
Win 2003 server.

What we have is an image server that sits on the same domain as the web
server. We want to give our users the ability to upload images to that
server and manage their images.

Can anyone please give me some resources to read up on when it comes to
this? Or just let me know what the best practice is when it comes to
working file and directory objects on remote machines?

Thanks,
Chris

 

[Dominick Baier]

hi,

make sure you don't have impersonation enabled in web.config - otherwise
this is a delegation problem -

read more here:
http://msdn.microsoft.com/msdnmag/issues/05/09/SecurityBriefs/default.aspx

if no impersonation is enabled:
is ops really sure about the right account - the account under which the
worker process runs must have the access to the remote resource, this is
NETWORK SERVICE by default which materializes as MACHINE$ on the remote machine.
Otherwise you have configured a custom account for the worker process which
also needs the required access.