Programming with .NET - General

Re: Socket Policy Server (was Re: sockets with Silverlight 2 and java)

BigTundra — Tue, 07 Oct 2008 13:18:53 GMT

Thanks for the reply...I've tried it both ways and neither seems to make a difference.

Re: Socket Policy Server (was Re: sockets with Silverlight 2 and java)

elenabcn — Tue, 07 Oct 2008 08:08:46 GMT

In the line <socket-resource port="4502-4534" protocol="tcp" /> put just the port that ju're using. In my case it didn't work writing here a rank of ports.

Re: Socket Policy Server (was Re: sockets with Silverlight 2 and java)

BigTundra — Mon, 06 Oct 2008 18:31:56 GMT

So I have my policy file server implemented, but I'm still getting access denied when I try the socket connection. I put a packet sniffer on the connection I can see the request go out and the policy file returned, but from that point I'm at a loss as to why I'm being denied.

Here is my policy file:

<access-policy>
<cross-domain-access>
<policy>
<allow-from>
<domain uri="*" />
</allow-from>
<grant-to>
<socket-resource port="4502-4534" protocol="tcp" />
</grant-to>
</policy>
</cross-domain-access>
</access-policy>

The only other thing that I can think of is if the AccessDenied has something to do with internet zones in windows, because I'm in a VM that is running on a 192.168 address and connecting to 10. address. I've setup http://localhost,http://10.8.104.81 and 10.8.104.81 as both being in my intranet zone which allowed me to use Http communication to the device, but the socket stuff still isn't working.

Any help will be greatly appreciated! Thanks for everyone's time.

Re: Socket Policy Server (was Re: sockets with Silverlight 2 and java)

dejavudesi — Thu, 02 Oct 2008 16:54:29 GMT

thank you Psychlist1972..you da man cheers!

Re: Socket Policy Server (was Re: sockets with Silverlight 2 and java)

BigTundra — Fri, 19 Sep 2008 18:13:55 GMT

Anythings possible ;) ...I'm going down that road now. But it's more like a winding mountain road than the information super highway I was trying to get on. :)

Anyway thanks for your help Pete!!

Re: Socket Policy Server (was Re: sockets with Silverlight 2 and java)

Psychlist1972 — Fri, 19 Sep 2008 17:37:57 GMT

If you can control the port number so that it is in the 4500 range, are you sure you can't also run a policy server?

Pete

Re: Socket Policy Server (was Re: sockets with Silverlight 2 and java)

BigTundra — Fri, 19 Sep 2008 17:28:06 GMT

That's a bummer that security may get in the way of us being able to do something really cool. I sent this info to my manager and he sent me a link to Flex 3.... uggh.

Re: Socket Policy Server (was Re: sockets with Silverlight 2 and java)

Psychlist1972 — Fri, 19 Sep 2008 13:21:07 GMT

I wouldn't expect it to be. It was put in specifically because socket servers often don't exist on the same machines as web servers. The Port 943 Policy Server is a security precaution, required in order to keep Silverlight a safe and trusted platform for internet applications.

If you need to get access to a resource that can't support the addition of a policy server, you will need to build a proxy service. That's a socket (and policy) server on a machine you can control, which then uses the regular .NET (or other) stack to communicate with your telnet server and forward packets from and to Silverlight.

Pete

Re: Socket Policy Server (was Re: sockets with Silverlight 2 and java)

BigTundra — Fri, 19 Sep 2008 12:23:18 GMT

Is this something that is going to change when they release. Because it might be a deal breaker for me to use silverlight, because the device I'm connecting to isn't a webserver it just supports a telnet connection. I can't make it provide a policy file on port 943.

Re: Socket Policy Server (was Re: sockets with Silverlight 2 and java)

Psychlist1972 — Fri, 19 Sep 2008 02:20:27 GMT

Yep. Silveright will contact the 10.8. whatever : 943 address to look for the policy before it connects to the 4502 endpoint at the same address.

The policy server controls access at the server. Think of it this way: you, as the server owner, want to control what ports you'll allow access to and from where, so you serve up a policy file. This is very similar to the client access policy on a web site - the server owns it.

The policy server needs to be a non-silverlight app running on the same ip (or dns address) as your socket server.

Pete

Re: Socket Policy Server (was Re: sockets with Silverlight 2 and java)

BigTundra — Thu, 18 Sep 2008 20:34:06 GMT

Crap...so I was just reading is the policy server on port 943 at the destination that you are creating the connection to?

Re: Socket Policy Server (was Re: sockets with Silverlight 2 and java)

BigTundra — Thu, 18 Sep 2008 20:21:06 GMT

Ok...so I turned off windows firewall just to make sure it's not blocking.

I connected to the policy server using IE http://localhost:943 and it connected hit my break point etc. So that seems to be working.

I know I can get to that port on the outside 10.8... box because it's a telnet session running on the other end so I was able to telnet into it from my virtual machine.

Now this policy server is running on port 943 I'm confused as to how Silverlight uses it. If it blocks all but ports 4502-4534 then what is accessing the policy server?

What's next :)

Thanks!

Shane

Re: Socket Policy Server (was Re: sockets with Silverlight 2 and java)

Psychlist1972 — Thu, 18 Sep 2008 13:48:38 GMT

Let's check the simple stuff first.

Have you verified that no software or hardware firewalls are blocking this call from within the browser? You can't really ping a specific port, so are you sure you got through?

Did you try to get through to port 943 (the policy server)?

Pete

Re: Socket Policy Server (was Re: sockets with Silverlight 2 and java)

BigTundra — Thu, 18 Sep 2008 13:38:51 GMT

Hi,

I'm trying to get sockets to work and I keep getting the AccessDenied SocketError. I've implemented the policyserver, but nothing ever connects to it when I run my Silverlight socket code. I'm trying to do this in a virtual machine with a 192.168 address and port I'm trying to connect to is a 10. address port 4502. Is this why I'm having problems? I can ping and connect to that port from within the virtual machine just not with Silverlight.

Thanks for your help

public AgTelnet()
        {
            Socket s = new Socket(AddressFamily.InterNetwork, SocketType.Stream, ProtocolType.Tcp);
            SocketAsyncEventArgs args = new SocketAsyncEventArgs();
            args.RemoteEndPoint = new IPEndPoint(IPAddress.Parse("10.8.104.81"),4502);
            args.UserToken = s;
            args.Completed += new EventHandler(args_Completed);
            s.ConnectAsync(args);
        }

        void args_Completed(object sender, SocketAsyncEventArgs e)
        {
            if (e.SocketError != null)
            {
                string s = "";
            }
            int i = e.BytesTransferred;
            byte[] response = new byte[1024];
            e.SetBuffer(response, 0, response.Length);
            e.Completed -=
              new EventHandler(args_Completed);
            e.Completed += new EventHandler(OnSocketReceive);
            Socket socket = (Socket)e.UserToken;
            socket.ReceiveAsync(e);

        }

Re: Socket Policy Server (was Re: sockets with Silverlight 2 and java)

elenabcn — Wed, 10 Sep 2008 15:17:11 GMT

Thanks, it's working!!!