Article View: borland.public.cppbuilder.webservices.soap
Article #124COM server in SOAP server-security issue?
From: manosg80
Date: Wed, 16 Mar 2005 10:01
Date: Wed, 16 Mar 2005 10:01
26 lines
2279 bytes
2279 bytes
Hi there, I had a COM DLL server (automation interface) which essentially uses a TSocketServer component to implement TCP functionality. Recently I was asked to convert it to a SOAP server and did so using SOAP Toolkit 3 - yes, it's outdated but it's fast. The SOAP server now, among others, exposes the methods StartListening which invokes a listening socket to port 210 and ServerStatus which returns 1 if socket is up and listening and 0 if it's not. Here starts the odd thing: when I call the method StartListening from a SOAP client, the method opens the socket, queries the socket compoenent if it is active and returns a success string. However, although the string indicates success, no socket appears on the firewall to have been raised. On addition, the ServerStatus method always returns 0. The COM server has been tested extensively with COM clients and works fine, I can see on the firewall the socket raised, returns correct status messages, etc. This 'selective' behavior seems like a security issue though I have set IUSR_computername user as administrator and given full access to this user to the directory where the soap server resides but now I'm out of clues. Any suggestions as to where to look for a solution? Thank you
Technical Details
Message-ID:
<1110964498.052398.79750@o13g2000cwo.googlegroups.com>Path:
arc1-ca.pugleaf.net!g2news1.google.com!postnews.google.com!o13g2000cwo.googlegroups.com!not-for-mailShow Full Headers
Complete Article Headers
X-Google-Thread: 11096a,99b028428e0227a8,start X-Google-Attributes: gid11096a,public X-Google-Language: ENGLISH,ASCII-7-bit Path: arc1-ca.pugleaf.net!g2news1.google.com!postnews.google.com!o13g2000cwo.googlegroups.com!not-for-mail From: "manosg80@no_spam.com" <manosg80@gmail.com> Newsgroups: borland.public.cppbuilder.webservices.soap Subject: COM server in SOAP server-security issue? Date: 16 Mar 2005 02:01:19 -0800 Organization: http://groups.google.com Lines: 27 Message-ID: <1110964498.052398.79750@o13g2000cwo.googlegroups.com> NNTP-Posting-Host: 150.140.187.109 Mime-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" X-Trace: posting.google.com 1110967283 12386 127.0.0.1 (16 Mar 2005 10:01:23 GMT) X-Complaints-To: groups-abuse@google.com NNTP-Posting-Date: Wed, 16 Mar 2005 10:01:23 +0000 (UTC) User-Agent: G2/0.2 Complaints-To: groups-abuse@google.com Injection-Info: o13g2000cwo.googlegroups.com; posting-host=150.140.187.109; posting-account=NdY1sA0AAAB2eI_l_UIiBB7_hnOXxvwQ