Hi All,

Would be grateful for any advice on this:

I am running a Windows Service that sends and receives emails for various
purposes.

This service exposes a remote interface that allows support staff to
connect via a UI and instruct the service to start sending / receiving
certain emails.

All of this is written in .Net (C#) 2.0.

So far so good.

I use a secure connection (authenticated using Kerberos) between the
Windows service (remote host) and the support UI (remote client).

If I set the remote host to use impersonation then I can tell who is
calling the remote method and authorize them accordingly (again using
Kerberos).  However, does this mean that the remote objects they create
(the ones that will send and receive emails) will run under the users
context?

In a nutshell, I want to be able to tell who the remote user is without
impersonating them.  Ideally, I don't want to have to include credentials
as a parameter to the remote method.

Any advice would be greatly appreciated.

Kind regards,

Graeme

===================================
This list is hosted by DevelopMentorĀ®  http://www.develop.com

View archives and manage your subscription(s) at http://discuss.develop.com

Reply via email to