聪明的客户 [英] Smart clients

问题描述

我想从服务器流式传输数据，客户端是我想要的智能客户端

能够连接到个人电脑（最终从它下载的电脑）。

您可能会遇到的问题是智能客户端没有足够的权限来打开套接字，使用远程处理甚至调用Web服务。 />
任何人都知道该怎么办？ （当然，使用caspol放松安全工作，

但它不是一个选项）

I want to stream data from a server, the client is a smart client it I want
to be able to connect to a pc (eventually the pc it''s been downloaded from).
The problem as you might expect is that the smart client doesn''t have enough
permissions to open a socket, use remoting or even call a web service.
Anyone knows what to do ? (using caspol to loosen security works of course,
but it is not an option)

推荐答案

一个解决方案是使用.msi文件来增加特定

公钥的权限。本文解释了这个过程。
http://msdn.microsoft.com/library/de...ms11122002.asp


问候，

Frank Hileman


查看VG.net： www.vgdotnet.com

动画矢量图形系统

集成Visual Studio .NET图形编辑器


"主" <所以*** @ nospam.com>在消息中写道

news：30 ************* @ uni-berlin.de ...

One solution is to use an .msi file to increase permissions for a specific
public key. This article explains the process.
http://msdn.microsoft.com/library/de...ms11122002.asp

Regards,
Frank Hileman

check out VG.net: www.vgdotnet.com
Animated vector graphics system
Integrated Visual Studio .NET graphics editor

"MaSTeR" <so***@nospam.com> wrote in message
news:30*************@uni-berlin.de...

我想从中流式传输数据一个服务器，客户端是一个智能客户端，我想要它能够连接到一台电脑（最终是它已被下载的电脑）。
你可能遇到的问题期望智能客户端没有足够的权限来打开套接字，使用远程处理甚至调用网络服务。
任何人都知道该怎么做？ （使用caspol放松安全作品当然，
但不是一个选项）

I want to stream data from a server, the client is a smart client it I want
to be able to connect to a pc (eventually the pc it''s been downloaded
from).
The problem as you might expect is that the smart client doesn''t have
enough
permissions to open a socket, use remoting or even call a web service.
Anyone knows what to do ? (using caspol to loosen security works of
course,
but it is not an option)

MaSTeR，


实际上，您应该有权调用Web服务（或打开

连接）到客户端下载的机器。


此外，使用.NET 2.0，您应该能够安装一个安全策略

，这将允许通过ClickOnce更多的网络访问。


希望这会有所帮助。

-

- Nicholas Paldino [.NET / C＃MVP]

- mv*@spam.guard.caspershouse.com

" MaSTeR" <所以*** @ nospam.com>在消息中写道

news：30 ************* @ uni-berlin.de ...

MaSTeR,

Actually, you should have permissions to call a web service (or open a
connection) to the machine that the client was downloaded from.

Also, with .NET 2.0, you should be able to install a security policy
which would allow more network access through ClickOnce.

Hope this helps.
--
- Nicholas Paldino [.NET/C# MVP]
- mv*@spam.guard.caspershouse.com
"MaSTeR" <so***@nospam.com> wrote in message
news:30*************@uni-berlin.de...

我想从中流式传输数据一个服务器，客户端是一个智能客户端，我想要它能够连接到一台电脑（最终是它已被下载的电脑）。
你可能遇到的问题期望智能客户端没有足够的权限来打开套接字，使用远程处理甚至调用网络服务。
任何人都知道该怎么做？ （使用caspol放松安全作品当然，
但不是一个选项）

I want to stream data from a server, the client is a smart client it I want
to be able to connect to a pc (eventually the pc it''s been downloaded
from).
The problem as you might expect is that the smart client doesn''t have
enough
permissions to open a socket, use remoting or even call a web service.
Anyone knows what to do ? (using caspol to loosen security works of
course,
but it is not an option)

当然，要求您的客户请运行此MSI与请求请运行此非托管.exe并没有什么不同。你要求他们执行在CAS主持之外运行的任意本机代码，因此，对你的用户来说，这本身就是一种蹩脚的做法。


然而，问题是当然你又做了什么？如果您需要客户端提升代码的权限以使您的应用程序能够运行，那么这就没有简单的答案。托管网络（如域）中存在可通过企业安全策略级别控制安全策略并通过某种文件分发系统（组策略对象或系统管理软件）进行分发的解决方案。但对于非集中控制的网络来说，问题更难。


编写不需要提升权限的软件是最好的解决方案，但并不总是实用。目前唯一的另一个解决方案是要求用户手动设置策略更改（容易出错），或者正如您所说，要求他们运行MSI。


问候


Richard Blewett - DevelopMentor
http： //www.dotnetconsult.co.uk/weblog
http：/ /www.dotnetconsult.co.uk


一种解决方案是使用.msi文件来增加特定

公钥的权限。本文解释了这个过程。
http://msdn.microsoft.com/library/de...ms11122002.asp


问候，

Frank Hileman


查看VG.net： www.vgdotnet.com

动画矢量图形系统

集成Visual Studio .NET图形编辑器

Of course, asking your clients to "please run this MSI" is not really any different from asking "please run this unmanaged .exe". You are asking them to execute arbitrary native code that runs outside of the auspices of CAS and so is, in of itself, a ricky practice for your users.

However, the problem is of course "what do you do instead?" And that has no easy answers if you need your client to elevate the permissions for your code to enable your application to run. There are solutions in managed networks (like domains) where security policy can be be controlled via the enterprise security policy level and distributes via some kind of file distribution system (Group Policy Objects, or system management software). But for non-centrally controlled networks the problem is harder.

Writing software that doesn''t require elevated permissions is the best solution, just not always practical. At the moment the only other solution is to ask the user to manually set up policy changes (error prone) or, as you say, ask them to run an MSI.

Regards

Richard Blewett - DevelopMentor
http://www.dotnetconsult.co.uk/weblog
http://www.dotnetconsult.co.uk

One solution is to use an .msi file to increase permissions for a specific
public key. This article explains the process.
http://msdn.microsoft.com/library/de...ms11122002.asp

Regards,
Frank Hileman

check out VG.net: www.vgdotnet.com
Animated vector graphics system
Integrated Visual Studio .NET graphics editor

这篇关于聪明的客户的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！