MVC :: Reverse Proxy And Authentication?

Feb 21, 2011

We have nearly completed an ASP.NET MVC web application running with SSL in IIS and now find that we must integrate with a third-party product that is supplied as a PHP web app running under lightppd on an alternate port, but still on the same server.

We want to make the integration appear as seamless as possible, so our initial strategy is to do all of the authentication through our application, implement a reverse proxy to expose selected features from the third-party product, and then set-up the third-party product to only be accessible from localhost and (if we can manage it) only from the user our app pool runs as. As a second layer on top of this, we plan on running the third party active content in an IFRAME, so we can surround it with our menus and headers. With the right fonts and colors, hopefully, it won't look grossly out of place.

First question: Is this strategy totally naive? Given the hand we've been dealt, is there a better one?

Second question: What is the best way to implement the reverse proxy? I was thinking of using a routing rule with an Http Handler that invokes our usual authorization just as a controller would and makes the requests to the other site, streaming out the results it receives. Is there something that already does this generically, that I can just hook up and invoke? Maybe some way to specify a controller to handle everything I need to proxy and then use a ViewResult that represents a call to an external URL I construct from the URL I received?

If I can get a few pointers on what to look for, I can trot off to the docs for the details.

View 6 Replies


Similar Messages:

AJAX :: WebResource Fail To Work Under Reverse Proxy?

Jul 19, 2010

We have an issue when our web application runs under reverse proxy.

The reverse proxy change the URL for the website from for example: "http://TestWebApp/" to: "http://ProxyDomain/Test/" when it runs under reverse proxy which is mapped to "http://TestWebApp/" and rout requests to it.

This raise an issue of root relative paths (paths that start with "/" to be relative to the root of the web application i.e. "/Folder1/Test.aspx"). Generally all paths that need to be rendered to client we use ResolveClientUrl method and all is good.

When using Ajax controls and ScriptManager WebResource.axd paths are rendered in script tags as a relative url paths ("/WebResource.axd?blablabla") because the root under reverse proxy is the proxy domain itself the path is useless - the web resouce is not downloaded and the application break.

To fix this we tried to set a Response.Filter in OnPreRender event handler of our base page. In our custom filter we use Regex to search and replace all "/WebResource.axd" occurences with the resolved to client root path using the ResolveClientUrl method of the page. This works great and the web resources are downloaded to client.

But this is not the end of our troubles.

In Ajax requests the response output is fixed as described but when recieved at the client end it is not valid and the partial update fails with Sys.WebForms.PageRequestManagerParserErrorException.

It fails to parse the response because the rendered response have numbers that states the actual count of bytes per rendered component (which includes the script tags referencing the WebResource.axd). The client reciever validates the recieved response according to the numbers, but, our filter altered the response so the numbers are not correct and the response validation fails.

We can try and code a smart filter that parse the response and recalculate the numbers according to the ammount of paths fixed, but I hope there is an elegant and better solution for this.

View 3 Replies

How To Protect A Web Server Froma Reverse Proxy Server

Oct 10, 2010

I have a website [URL]. Recently I found out that somebody has set up a reverse proxy with an almost identical url "www.website1.com" in front of my website.

I'm concerned of those users who came to my website through that reverse proxy. Their username and passwords might be logged when they login.

Is there a way for me to have my web server refuse reverse proxy?

For example, I've set up a reverse proxy using squid with the url "www.fakestackoverflow.com" in front of "www.stackoverflow.com". So whenever I type "www.fakestackoverflow.com" in my web browser address bar, I'll be redirected to "www.stackoverflow.com" by the reverse proxy. Then I notice the url in my address bar changed to "www.stackoverflow.com" indicating that I'm no longer going through the reverse proxy.

"www.stackoverflow.com" must've detected that I came to the website from another url and then redirected me to the website through the actual url.

View 8 Replies

LDAP Authentication From .NET Using Proxy User?

Feb 3, 2010

We want to use a "proxy user" to connect to an LDAP server (Active Directory, Novell, or otherwise) and then make sure that the user trying to log into the application has typed in an acceptable user name and password. I have got the code for connecting to LDAP just fine, but I'm at a loss as to how to check the user name and password. Can you do this through an LDAP query?

Here's the guts of my code so far:

Public Function Authenticate(ByVal UserName As String, ByVal Password As String)
Dim LDAPServer As String = ConfigurationManager.AppSettings("LDAPServer")
Dim proxyUsername As String = ConfigurationManager.AppSettings("LDAPProxyUser")
Dim proxyPassword As String = ConfigurationManager.AppSettings("LDAPProxyPassword")
Dim entry As DirectoryEntry
entry = New DirectoryEntry(LDAPServer, proxyUsername, proxyPassword)
'This performs the LDAP authentication'
Dim obj As Object = entry.NativeObject
Dim search As New DirectorySearcher(entry)
search.Filter = String.Format("(SAMAccountName={0})", UserName)

'How do I check the password now?'

Dim result As SearchResult = search.FindOne()

If result Is Nothing Then Throw New Exception("Unable to find SAMAccountName")

View 2 Replies

Remote Server Returned An Error, Proxy Authentication Required?

Dec 8, 2010

The remote server returned an error: (407) Proxy Authentication Required.I get it when I use the GetReponse() method in WebRequest Dim request As WebRequest = WebRequest.Create(getNextURL()) Dim httpResponse As HttpWebResponse = CType(request.GetResponse(), HttpWebResponse)

View 1 Replies

WCF / ASMX :: Soap Header Authentication Fails Squid Proxy?

Aug 16, 2010

One of our client uses squid proxy and tries to connect to our asmx web service(which is deployed on our server over internet) via our windows application. But windows application fails to connect to our web service and gives below error.."This method call needs the custom bla bla.. " Soap ExceptionProxy (squid) shows this error:127.0.0.1 - - [10/Aug/2010:14:35:55 +0300] "POST http://abc:83/service.asmx HTTP/1.1" 500 759 "-" "Mozilla/4.0 (compatible; MSIE 6.0; MS Web Services Client Protocol 2.0.50727.4927)" TCP_MISS DIRECTWe have used soap header security and we are also passing soap header credential while calling the service. Application runs well at our end but can anybody guid me, what could be the problem ?

View 4 Replies

Security :: Forms Authentication Failed "The Ticket Supplied Was Invalid" For Users Using A Proxy?

May 11, 2010

Since we updated our website to .NET 4.0, users using a proxy-server can't login in our webapplication anymore.In the event-viewer on the server this error is thrown:Forms authentication failed for the request. Reason: The ticket supplied was invalid.This problem only exists for users with a proxy, all other users can login normally.We are not using a web garden or multiserver (load balance) environment, just a webserver and a databaseserver.

View 4 Replies

C# - Reverse Engineering .net Web App?

Feb 16, 2011

I have an asp.net web application. I don't have the source code. The bin contains 10 assemblies and a .compiled file. I used Reflector on the App_Code.dll and it shows me classes and namespaces and stuff, but its such a mess.Is there any way to reverse engineer this web app that won't take weeks/months to unfold? The application is pretty basic.

Note, the code is written by an engineer that left the company. We own the product.

View 3 Replies

Enable Reverse DNS Lookup For IIS?

Feb 24, 2010

(Not sure if I'm creating this post in the right place. Feel free to move if needed.)

I'm trying to enable full DNS lookup including hostname. Having trouble. I've followed the instructions here

(http://support.microsoft.com/kb/297795) with no luck. Request.ServerVariables("remote_host") still returns only an IP Address.

[Code]....

I've also tried using DNS.GetHostEntry(IPAddress) and the depricated DNS.GetHostByAddress(IPAddress). All I ever get back is the IP Address with no host name.

IIS 6.0, Windows Server 2007 Server Pack 2, .NET 2.0

View 1 Replies

How To Reverse The Order Of Words In Query

Jun 7, 2010

i have stored in the database as location India,Tamilnadu,Chennai,Annanagar while i bind in the grid view it ll be displaying as 'India,Tamilnadu,Chennai,Annanagar' this format.

but i need to be displayed as 'Annanagar,Chennai,Tamilnadu,India' in this format. how to perform this reverse order in query or in c#

note: this is stored under one column as 'India,Tamilnadu,Chennai,Annanagar' with comma separated.

View 5 Replies

Reverse Function Of HttpUtility.ParseQueryString?

Apr 9, 2010

.Net's System.Web.HttpUtility class defines the following function to parse a query string into a NameValueCollection:

public static NameValueCollection ParseQueryString(string query);

Is there any function to do the reverse (i.e. to convert a NameValueCollection into a query string)?

View 2 Replies

Do The Reverse Of A Regular PayPal Transaction?

Jan 4, 2010

How can I do the reverse of a regular PayPal transaction. The only information I found in their documents was for the customer to pay us for things. What if we want to pay out the customer?

Is there a way to give a transaction type to reverse and pay out to the customer instead of them paying us?

Update: Turns out you can use Mass Payments to pay out to customers... just needed to look on StackOverflow a bit more [URL]

View 1 Replies

C# - How To Remote Web Site Day And Month Reverse When Less Than Day 12 In Excel

Feb 17, 2011

Local machine visual studio day and month are normal in format dd/mm/yyyy. But after deployed to remote web site, saved Excel using C#, less than day 12, become mm/dd/yyyy.

Actually the code is to get data into Excel from stored procedure which do pivot table The way i save date to cell is oSheet.Cells[currentline, i + 1] = String.Format("{0:dd-MM-yyyy}", Convert.ToDateTime(reader[i].ToString()));

while (reader.Read())
{
for (int i = 0; i < reader.FieldCount; i++)
{
if (reader[i] != System.DBNull.Value)
{
if (i == 0)
{
oSheet.Cells[currentline, i + 1] = String.Format("{0:dd-MM-yyyy}", Convert.ToDateTime(reader[i].ToString()));
}
else
oSheet.Cells[currentline, i + 1] = reader[i].ToString();
}
}
currentline = currentline + 1;
}
reader.Close();
<runtime>
<assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
<dependentAssembly>
<assemblyIdentity name="System.Web.Extensions" publicKeyToken="31bf3856ad364e35"/>
<bindingRedirect oldVersion="1.0.0.0-1.1.0.0" newVersion="3.5.0.0"/>
</dependentAssembly>
<dependentAssembly>
<assemblyIdentity name="System.Web.Extensions.Design" publicKeyToken="31bf3856ad364e35"/>
<bindingRedirect oldVersion="1.0.0.0-1.1.0.0" newVersion="3.5.0.0"/>
</dependentAssembly>
</assemblyBinding>
<assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
<dependentAssembly>
<assemblyIdentity name="Microsoft.Office.Interop.Excel"
publicKeyToken="71e9bce111e9429c"
culture="neutral" />
<publisherPolicy apply="yes" />
<bindingRedirect oldVersion="12.0.0.0"
newVersion="11.0.0.0"/>
</dependentAssembly>
</assemblyBinding>
</runtime>

View 2 Replies

Reverse Authorized Pages Being Redirected To Login?

Feb 1, 2010

I have a page that I want only anonymous users to see, and authenticated users to be redirected. So, like this:

<location path="Login_ForgotUserID.aspx">
<system.web>
<authorization>
<allow users="?" />
<deny users="*" />
[code]...

View 4 Replies

Datalist - Show Information In Reverse Order?

Jun 18, 2010

I have a datalist that shows information from a SQL table perfectly. Is there a way to show the information in reverse order?

Example:

Person1
Person2
Person3

Instead I would like:;

Person3
Person2
Person1

View 3 Replies

Web Forms :: Dynamic Controls In Reverse Order?

Dec 30, 2010

I am created dynamic Usercontrol in the placeholder, it works fine(top to bottom) but i need to add controls in reverse order mean(bottom to top). I don know how to handle this one. how to display dynamic control in Bottom to top?

View 4 Replies

WebMatrix :: How To Reverse Sort Order In WebGrid

Feb 2, 2011

My webGrid is working perfectly fine. However, I would like the default sort order to be in the opposite direction. If it were SQL, I'd be adding a DESC somewhere. Here's my working line of code:

[Code]....

It correctly sorts on the UWDate column, but I would like it to sort the opposite sort order. Of course, once it is displayed, you can click on the title and it will resort at that time.

View 7 Replies

Reverse Ajax Comet/Polling Implementation For .NET MVC?

Jul 21, 2010

I am looking for ASP.Net MVC implementation for reverse ajax comet/polling. Can anyone provide some good link or tutorial

View 2 Replies

Javascript - Reverse Geocoding On Marker Click?

Jul 28, 2010

I have an embedded Google map with my web application in ASP.NET 3.5.I have implemented reverse geocoding (getting address from latitude and longitude) on Map click.Now, I need the same but on marker click.

View 2 Replies

Security :: Secure Dll To Prevent Reverse Engineering?

Feb 9, 2010

At the moment i,m working at a websit (ASP.net 3.5). I have build the project and till my surprise it is possible to reverse engineering the created dll's to the code (with Red Gate's .NET Reflector).

I have found several tools like Xheo and dotfuscator, but does there realy protected the created dll's ?? Does Microsoft have build a method to secure this ?? If this is not possible everybody can steal your code....

I have took a lot of time reading about this article, but is there a method or tool to make this secure?

View 4 Replies

C# - What's The Difference: Windows Authentication, Passport Authentication And Form Authentication

Sep 17, 2010

Just going to start making a web application and was wondering which was better, or at least what are the main differences between them (as it probably matters what I am using them for)?

View 3 Replies

Forms Data Controls :: Reverse TemplateField Conversion In A GridView?

Feb 15, 2010

Though it is usually not a big deal to edit the source code to accomplish this, I am just curious if there is an easier way to reverse the conversion of a column to a TemplateField. The covnersion can be done by a simple click. Is there a similar click to reverse it?

View 3 Replies

Data Controls :: Reverse DropDownList Items On Button Click

Aug 26, 2013

<asp:DropDownList ID="myDropDownList" runat="server"> <asp:ListItem>Aura </asp:ListItem> <asp:ListItem>Adrani</asp:ListItem> <asp:ListItem>Celsi M.</asp:ListItem> <asp:ListItem>Karilo</asp:ListItem></asp:DropDownList>

If I run the asp.net page this gives my normal out put like 

Aura 
Adrani
Celsi M.
Karilo

View 1 Replies

AJAX :: Control Toolkit Line Chart Reverse Y Axis

Feb 1, 2014

I am currently making a line chart of Ajax control toolkit referring to an article [URL] .....

It works fines as described. My question is how to reverse Y axis of the line chart. 

I need to place 1 (not 0) at the top of Y axis and biggest number near the bottom with some margin from axis X. The described chart is biggest number neat the top and 0 at the bottom. 

View 1 Replies

Forms Data Controls :: Reverse Display List View From Database?

Mar 1, 2011

I have a simple list view that displays some text and a picture. The text is stored in the database and new text is inserted into the database through the list view. The list view displays all of the data with the oldest, or first, line of the database first. I want to reverse that by displaying the last line, or newest entry first. The site is live, and I do not know how to change the database remotely. Can I put some code on the page or code behind that will accomplish this? What is it called and where do I look?

View 5 Replies







Copyrights 2005-15 www.BigResource.com, All rights reserved