Re: Passing user credintials from a web page to a web service.

Hi Dan:

It is the 2 hop issue Brock mentioned. One solution is to use
delegation, and I have some links to more information here:

http://odetocode.com/Blogs/scott/archive/2005/02/24/1053.aspx


--
Scott
http://www.OdeToCode.com/blogs/scott/

On Fri, 08 Apr 2005 18:32:49 -0700, Dan Higman
<danNews1@xxxxxxxxxxxxxxx> wrote:

>Thanks Ken,
> I had not see this particular article. I'm not sure how I missed it in
>my search.
> Unfortunately, the article is exactly correct; at least not in my
>environment.
> The technique in the article works if all the code is running on the
>same machine. If you were to build all the examples in the article and
>run them on localhost, it works just fine. But when the aspx code is
>running on a different server than the web service, it doesn't work. At
>least I can't get it to work. If I have impersonate set to false, the
>credentials are that of the IIS server running the aspx. If I set
>impersonate to true the credentials are null (the object exists, but all
>the properties are null).
> I'm beginning to thinks this can't be done with integrated security.
>
>Dan
>
>Ken Cox [Microsoft MVP] wrote:
>> Hi Dan,
>>
>> Just checking to see if you'd seen this...
>>
>> HOW TO: Pass Current Credentials to an ASP.NET Web Service
>>
>> http://support.microsoft.com/default.aspx?scid=kb;en-us;813834
>>
>> Ken
>> Microsoft MVP [ASP.NET]
>> Toronto
>>
>> "Dan Higman" <danNews1@xxxxxxxxxxxxxxx> wrote in message
>> news:89WdnUfPWddt187fRVn-tQ@xxxxxxxxxxxxxx
>>
>>> I'm sure this is easy and I'll be embarrassed when I see the answer,
>>> but I just can't figure this one out.
>>> Using .Net/ASP 1.1 on a server using integrated authentication--
>>> I have a web page (.aspx) that will collect some data from the user,
>>> call a web service to get additional data, and then merge and format
>>> the data back to the user's browser. But I want the web service to
>>> authenticate with the user's credentials, not the credentials of IIS
>>> serving the aspx page. What the web service will or will not return
>>> is based on who is making the request.
>>> How do I pass the user's credentials to the web service?
>>>
>>> Sample code, white paper, knowledge base article, any clue will be
>>> welcome. Thanks in advance.
>>>
>>> Dan
>>
>>

.

Relevant Pages

  • Re: Passing user credintials from a web page to a web service.
    ... But when the aspx code is running on a different server than the web service, ... If I have impersonate set to false, the credentials are that of the IIS server running the aspx. ... If I set impersonate to true the credentials are null. ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Windows authentication for web service client??
    ... If you are posting to WEBDAV it is my understanding that you cannot use Integrated authentication since you HAVE to pass it the username and the password in the network credentials. ... I must put together a sample example, but for some reason the users credentials are lost when making the WebDAV request. ... web service is running ASPNET account. ...
    (microsoft.public.dotnet.framework.aspnet.webservices)
  • Re: Passing user credintials from a web page to a web service.
    ... Using .Net/ASP 1.1 on a server using integrated authentication-- ... I have a web page (.aspx) that will collect some data from the user, ... But I want the web service to authenticate ... with the user's credentials, not the credentials of IIS serving the aspx ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Calling Web Service that calls other Web Service with Windows Authentication
    ... You are passing credentials (by ... services - then you do not need to pass token remotely and windows can ... Given a windows application client that's calling a web service (using ...
    (microsoft.public.dotnet.framework.aspnet.webservices)
  • Passing user credintials from a web page to a web service.
    ... Using .Net/ASP 1.1 on a server using integrated authentication-- ... I have a web page (.aspx) that will collect some data from the user, call a web service to get additional data, and then merge and format the data back to the user's browser. ... But I want the web service to authenticate with the user's credentials, not the credentials of IIS serving the aspx page. ...
    (microsoft.public.dotnet.framework.aspnet)
Loading