IIS + HttpHandler or IIS+ISA

Hi,

I have the following problem:

I have a ASPX-Portal and under a specific subsite sub_Book e.g.
www.portal.net/Sub_Books I want to redirect the Request to an external
WebServer. The External WebServer delivers an ASPX-Site - the site is
not interpreted it is the source ASPX the IIS has to render now.

Is it possible to solve this with ISS+ISA 2006 (because ISA is already
in Use) - or do we need a custom HTTP-Handler?

Can anyone help me?

cu
Torsten

David
Fri Mar 14 16:42:10 CDT 2008

On Mar 14, 5:47=A0am, Torsten_Fle...@web.de wrote:
> Hi,
>
> I have the following problem:
>
> I have a ASPX-Portal and under a specific subsite sub_Book e.g.www.portal.=
net/Sub_BooksI want to redirect the Request to an external
> WebServer. The External WebServer delivers an ASPX-Site - the site is
> not interpreted it is the source ASPX the IIS has to render now.
>
> Is it possible to solve this with ISS+ISA 2006 (because ISA is already
> in Use) - or do we need a custom HTTP-Handler?
>
> Can anyone help me?
>
> cu
> Torsten


That design seems flawed to me.

You want to redirect requests to an External WebServer which sends
your web server arbitrary ASPX source code for your IIS to render.

That is basically your worst security nightmare, to allow external
source direct access to run code on your internal server.

I do not know what your real problem you are trying to solve, but this
solution cannot be considered because it is fatally flawed.


//David
http://w3-4u.blogspot.com
http://blogs.msdn.com/David.Wang
//

Torsten_Flegel
Fri Mar 14 17:42:38 CDT 2008

Hi,

it would be a security nightmare if the external server is not under
my control. external means, that we have another application outside
of our sharepoint-farm. the external server pickup an apsx-page of
sharepoint and paste some content into a tagged area - but the
external server can render it, so it has to go back to the sharepoint
server again and the iis should render the site.

so there is no security problem - but still the question how can I
solve this.

cu
torsten

David Wang schrieb:
> On Mar 14, 5:47=EF=BF=BDam, Torsten_Fle...@web.de wrote:
> > Hi,
> >
> > I have the following problem:
> >
> > I have a ASPX-Portal and under a specific subsite sub_Book e.g.www.porta=
l.net/Sub_BooksI want to redirect the Request to an external
> > WebServer. The External WebServer delivers an ASPX-Site - the site is
> > not interpreted it is the source ASPX the IIS has to render now.
> >
> > Is it possible to solve this with ISS+ISA 2006 (because ISA is already
> > in Use) - or do we need a custom HTTP-Handler?
> >
> > Can anyone help me?
> >
> > cu
> > Torsten
>
>
> That design seems flawed to me.
>
> You want to redirect requests to an External WebServer which sends
> your web server arbitrary ASPX source code for your IIS to render.
>
> That is basically your worst security nightmare, to allow external
> source direct access to run code on your internal server.
>
> I do not know what your real problem you are trying to solve, but this
> solution cannot be considered because it is fatally flawed.
>
>
> //David
> http://w3-4u.blogspot.com
> http://blogs.msdn.com/David.Wang
> //

David
Sat Mar 15 03:07:47 CDT 2008

On Mar 14, 3:42=C2=A0pm, Torsten_Fle...@web.de wrote:
> Hi,
>
> it would be a security nightmare if the external server is not under
> my control. external means, that we have another application outside
> of our sharepoint-farm. the external server pickup an apsx-page of
> sharepoint and paste some content into a tagged area - but the
> external server can render it, so it has to go back to the sharepoint
> server again and the iis should render the site.
>
> so there is no security problem - but still the question how can I
> solve this.
>
> cu
> torsten
>
> David Wang schrieb:
>
>
>
> > On Mar 14, 5:47=EF=BF=BDam, Torsten_Fle...@web.de wrote:
> > > Hi,
>
> > > I have the following problem:
>
> > > I have a ASPX-Portal and under a specific subsite sub_Book e.g.www.por=
tal.net/Sub_BooksIwant to redirect the Request to an external
> > > WebServer. The External WebServer delivers an ASPX-Site - the site is
> > > not interpreted it is the source ASPX the IIS has to render now.
>
> > > Is it possible to solve this with ISS+ISA 2006 (because ISA is already=

> > > in Use) - or do we need a custom HTTP-Handler?
>
> > > Can anyone help me?
>
> > > cu
> > > Torsten
>
> > That design seems flawed to me.
>
> > You want to redirect requests to an External WebServer which sends
> > your web server arbitrary ASPX source code for your IIS to render.
>
> > That is basically your worst security nightmare, to allow external
> > source direct access to run code on your internal server.
>
> > I do not know what your real problem you are trying to solve, but this
> > solution cannot be considered because it is fatally flawed.
>
> > //David
> >http://w3-4u.blogspot.com
> >http://blogs.msdn.com/David.Wang
> > //- Hide quoted text -
>
> - Show quoted text -


Make the External WebServer's modifications a WebService, and invoke
it from the Sharepoint site with an HttpHandler which handles the
requests, picks up the ASPX Page of Sharepoint, does the
modifications, then causes the modification to be executed.

Unless you are saying that you want the request to reach Sharepoint
and have it first do the rendering, and you just insert something into
the rendered output. At which point, ISA would be the good
interception point.


//David
http://w3-4u.blogspot.com
http://blogs.msdn.com/David.Wang
//

Torsten_Flegel
Sat Mar 15 14:57:01 CDT 2008

Hi,

the external server isn't able to provide a webservice.

The scenario starts on the moss portal. the user will be form
authentificated and starts the browsing on the portal. One subsite is
the site which will be filled with the external content. the page
layout of this aspx-sharepoint site has a place holder for the
external content. An actual page layout is stored as template on the
external server. when a page is called from the external server, the
template will be picked up, the user specific content will be filled
into the moss-page-layout template and the external server deliver
this page to the IIS of SharePoint who have to render it.
Is there realy a place for the ISA? On which step can I use it, and
how?

cu
Torsten

>
> Make the External WebServer's modifications a WebService, and invoke
> it from the Sharepoint site with an HttpHandler which handles the
> requests, picks up the ASPX Page of Sharepoint, does the
> modifications, then causes the modification to be executed.
>
> Unless you are saying that you want the request to reach Sharepoint
> and have it first do the rendering, and you just insert something into
> the rendered output. At which point, ISA would be the good
> interception point.
>
>
> //David
> http://w3-4u.blogspot.com
> http://blogs.msdn.com/David.Wang
> //

David
Sun Mar 16 02:57:01 CDT 2008

On Mar 15, 12:57=A0pm, Torsten_Fle...@web.de wrote:
> Hi,
>
> the external server isn't able to provide a webservice.
>
> The scenario starts on the moss portal. the user will be form
> authentificated and starts the browsing on the portal. One subsite is
> the site which will be filled with the external content. the page
> layout of this aspx-sharepoint site has a place holder for the
> external content. An actual page layout is stored as template on the
> external server. when a page is called from the external server, the
> template will be picked up, the user specific content will be filled
> into the moss-page-layout template and the external server deliver
> this page to the IIS of SharePoint who have to render it.
> Is there realy a place for the ISA? On which step can I use it, and
> how?
>
> cu
> Torsten
>
>
>
>
>
> > Make the External WebServer's modifications a WebService, and invoke
> > it from the Sharepoint site with an HttpHandler which handles the
> > requests, picks up the ASPX Page of Sharepoint, does the
> > modifications, then causes the modification to be executed.
>
> > Unless you are saying that you want the request to reach Sharepoint
> > and have it first do the rendering, and you just insert something into
> > the rendered output. At which point, ISA would be the good
> > interception point.
>
> > //David
> >http://w3-4u.blogspot.com
> >http://blogs.msdn.com/David.Wang
> > //- Hide quoted text -
>
> - Show quoted text -


It sounds like you are trying to embed the contents generated by the
External Server into the web page presented by MOSS. MOSS has WebParts
and such ways to embed and aggregate external information into MOSS
such that you don't want to write code to do this sort of thing, so I
am puzzled by what you are trying to do.


//David
http://w3-4u.blogspot.com
http://blogs.msdn.com/David.Wang
//

Torsten_Flegel
Mon Mar 17 05:47:49 CDT 2008

Hi,

on the external server runs a seperate Applikation with an own screen-
design and so on. So I haven't just content, I have to paste the whole
content-area of the external app into the MOSS-Page Content area. The
external Application has the option to put the content into a given
template, so I thought this would be the best way.
The users should only call one web-url - so an iframe solution is
prohibated.

What webpart would you prefer?

cu
Torsten

On Mar 16, 8:57 am, David Wang <w3.4...@gmail.com> wrote:
> On Mar 15, 12:57 pm, Torsten_Fle...@web.de wrote:
>
>
>
> > Hi,
>
> > the external server isn't able to provide a webservice.
>
> > The scenario starts on the moss portal. the user will be form
> > authentificated and starts the browsing on the portal. One subsite is
> > the site which will be filled with the external content. the page
> > layout of this aspx-sharepoint site has a place holder for the
> > external content. An actual page layout is stored as template on the
> > external server. when a page is called from the external server, the
> > template will be picked up, the user specific content will be filled
> > into the moss-page-layout template and the external server deliver
> > this page to the IIS of SharePoint who have to render it.
> > Is there realy a place for the ISA? On which step can I use it, and
> > how?
>
> > cu
> > Torsten
>
> > > Make the External WebServer's modifications a WebService, and invoke
> > > it from the Sharepoint site with an HttpHandler which handles the
> > > requests, picks up the ASPX Page of Sharepoint, does the
> > > modifications, then causes the modification to be executed.
>
> > > Unless you are saying that you want the request to reach Sharepoint
> > > and have it first do the rendering, and you just insert something into
> > > the rendered output. At which point, ISA would be the good
> > > interception point.
>
> > > //David
> > >http://w3-4u.blogspot.com
> > >http://blogs.msdn.com/David.Wang
> > > //- Hide quoted text -
>
> > - Show quoted text -
>
> It sounds like you are trying to embed the contents generated by the
> External Server into the web page presented by MOSS. MOSS has WebParts
> and such ways to embed and aggregate external information into MOSS
> such that you don't want to write code to do this sort of thing, so I
> am puzzled by what you are trying to do.
>
> //Davidhttp://w3-4u.blogspot.comhttp://blogs.msdn.com/David.Wang
> //