COM+ and NetworkCredenti al problem

[surya]

Hi,

I have a COM+ out of proc service that is configured to impersonate the user
making the call to the COM+ service. Is there a way to create a
NetworkCredenti al object based on the current thread's security? Using
System.Net.Cred entialCache.Def aultCredentials always returns the credentials
of the user configured to run the out of proc COM+ server and not the
credentials of the user set on the current thread.

Regards
Surya

[Willy Denoyette [MVP]]

"surya" <su************ ************@ho neywell.com> wrote in message
news:%2******** ********@TK2MSF TNGP12.phx.gbl. ..

Hi,

I have a COM+ out of proc service that is configured to impersonate the
user
making the call to the COM+ service. Is there a way to create a
NetworkCredenti al object based on the current thread's security? Using
System.Net.Cred entialCache.Def aultCredentials always returns the
credentials
of the user configured to run the out of proc COM+ server and not the
credentials of the user set on the current thread.

Regards
Surya

Impersonate != delegate. So you need to select delegate a impersonation
level, but:
- the client has to specify during the initial authentication (using
Kerberos) that it allows it's identity to be delegated (this is the default
for AD accounts) , and
- you need to run in a Kerberos realm,
- and the server needs to be trusted for delegation i the AD (not set by
default).

Willy.
PS. please, don't cross-post to half of microsoft NG's, you question relates
to .NET Microsoft.publi c.dotnet.framew ork.component_s ervices and possibly to
Microsoft.publi c.platformsd.co mponent_svcs only.