Page 1 of 4

Hosting provider security issues

Posted: Tue 07 Nov 2006 15:06
by farshore
Hi we are trying with our hosting provider to install the corelabs component on a server, but they require some further information regarding security permissions, does anyone know if it is possible to run the component outside the global assembly cache and how to get any security information regarding corelab components
Thanks

Posted: Tue 07 Nov 2006 15:17
by Alexey
What security information do you need? Please describe in detail.

security information

Posted: Tue 07 Nov 2006 15:47
by farshore
That's exactly what I need, detailed security information about installing/running the corelabs component.
Can you help?

Posted: Tue 07 Nov 2006 15:53
by Alexey
Do you need information about trust levels or not?

security information

Posted: Tue 07 Nov 2006 16:37
by farshore
Hi basically the hosting party have told us that they cannot run the component from the global cache folder because that effects their security.
Is there a way to register the component that will allow their security level to stay intact and is there anyone I can contact directly about this issue.
Many thanks

Posted: Wed 08 Nov 2006 06:55
by Alexey
Which security level do they use?

security issues

Posted: Wed 08 Nov 2006 10:23
by farshore
Alexey wrote:Which security level do they use?
Which file should I get the hosting party to send to verify their security settings?

Posted: Wed 08 Nov 2006 10:57
by farshore
Alexey wrote:Which security level do they use?










Posted: Wed 08 Nov 2006 11:07
by Alexey
There is a section in the web.config file:

Code: Select all

            
                
                
                
                
                
            
            
Tell me the trust level ("Full" is this snippet).

Posted: Wed 08 Nov 2006 11:19
by farshore
In their web.config the trust level is set by the config file I posted:

(...)





security issues

Posted: Wed 08 Nov 2006 13:35
by farshore
Hi are these permissions the same for the mysql component
Thanks

Posted: Thu 09 Nov 2006 07:10
by Alexey
For MySQLDirect .NET you need SocketPermission in Direct mode (in addition to Medium Trust Level). Others are ok in Medium.

Security issues

Posted: Thu 09 Nov 2006 09:40
by farshore
I'll see if we can set up a test later today
the component we are trying to use is MySQLDirect for .NET 3.5.10
The hosting party say they have an issue with any component being placed in the global assembly cache.
but they are willing to modify their config to allow the component
What trusts are required for none direct mode
Thanks

Posted: Thu 09 Nov 2006 11:13
by Alexey
For non-direct mode medium trust level should be enough.

Posted: Thu 09 Nov 2006 11:31
by farshore
Hi can you also give a log file from the installer for this component please
Thanks