Building Secure ASP.NET Applications - People Search Directory

Chapter 11: .NET Remoting Security 273
You can either specify the use of DefaultCredentials in a configuration file or set
the credentials programmatically.
Explicit Configuration
Within the client application configuration file (Web.config, if the client application
is an ASP.NET Web application) set the useDefaultCredentials attribute on the
element to true in order to specify that the proxy should use
DefaultCredentials when it communicates with the remote object.
Programmatic Configuration
For programmatic configuration, use the following code to establish the use of
DefaultCredentials programmatically.
IDictionary channelProperties;
channelProperties = ChannelServices.GetChannelSinkProperties(proxy);
channelProperties ["credentials"] = CredentialCache.DefaultCredentials;
Using Specific Credentials
To use a specific set of credentials for authentication when you call a remote object,
disable the use of default credentials within the configuration file, by using the
following setting.
Note: Programmatic settings always override the settings in the configuration file.
Then, use the following code to configure the proxy to use specific credentials.
IDictionary channelProperties =
ChannelServices.GetChannelSinkProperties(proxy);
NetworkCredential credentials;
credentials = new NetworkCredential("username", "password", "domain");
ObjRef objectReference = RemotingServices.Marshal(proxy);
Uri objectUri = new Uri(objectReference.URI);
CredentialCache credCache = new CredentialCache();
// Substitute "authenticationType" with "Negotiate", "Basic", "Digest",
// "Kerberos" or "NTLM"
credCache.Add(objectUri, "authenticationType", credentials);
channelProperties["credentials"] = credCache;
channelProperties["preauthenticate"] = true;