Re: 401 While Accessing Web Service

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance



On Apr 29, 4:11 pm, "Nirosh" <Nir...@xxxxxxxx> wrote:
You need to get the web service configure into a another web site, then you
can remove the integrated authentication just for that web site.. then your
web service will be vulnerable, so to improve security use the WSE..

just converting the project to 2005 and enable wse won't do any good. as the
webservice is still having integrated security..

--
L.W.C. Nirosh"Ben" <benm5...@xxxxxxxxx> wrote in message

news:4878e99d-ef98-41e8-aaf5-faafd1238f3a@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
On Apr 29, 3:32 pm, "Nirosh" <Nir...@xxxxxxxx> wrote:





I am not sure whether this is the only way.. When you say it worked with
C++
and now is not working with aspx/c# web site, that is interesting..

The WSE 3.0 should work fine with framework 3.0/3.5. But if you want it to
work with VSS 2008 IDE then you need to trick it.

e.g.:-http://devlicio.us/blogs/derik_whittaker/archive/2008/04/03/wse-3-0-s...
But I din't do this.. so please do it with extra care..

--
L.W.C. Nirosh

"Ben" <benm5...@xxxxxxxxx> wrote in message

news:d424f374-f2ae-4691-bfa5-a2186116e223@xxxxxxxxxxxxxxxxxxxxxxxxxxxxx
On Apr 29, 3:03 pm, "Nirosh" <Nir...@xxxxxxxx> wrote:

okay, check WSE (Web Service Enhancement) to see how to improve the web
service security..

to avoid the dependacy with integrated authentication, create a new web
site
for your web service, that way it should work fine.

--
L.W.C. Nirosh

"Ben" <benm5...@xxxxxxxxx> wrote in message

news:693f7c2e-35f2-4ace-b6d5-fb427b2547e6@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
On Apr 29, 2:30 pm, "Nirosh" <Nir...@xxxxxxxx> wrote:

http://www.dotnetbips.com/articles/dbd724e9-78f0-4a05-adfb-190d151103....

check this and see..

--
L.W.C. Nirosh"Ben" <benm5...@xxxxxxxxx> wrote in message

news:b5138c67-4566-4595-84a2-336f6a582d1e@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

I'm trying to access a c# web service from a web form.

I set up the web reference proxy object as follows:

proxy.PreAuthenticate = true;
proxy.Credentials = CredentialCache.DefaultCredentials;

but i get a 401 error. If I switch the IIS website from Integrated
Windows Auth to Anonymous, it works... but i want it to use windows
security.

my web.config of the web form is set to imperonsate the logged on
user, and i verified that's working by checking that
this.User.Identity.Name is my domain user (which has access to the
web
service).

Any ideas what i'm doing wrong? (btw, the web service is SSL if that
makes a difference).

Thanks!- Hide quoted text -

- Show quoted text -

thanks,
anyway to do it without using web form authentication?

the crazy thing is that if i fire up my web form from Visual Studio it
works just fine and can access the web service, but if i publish it to
another server and try from there I get the 401 (the site i'm
publishing to is using 'intergrated windows auth') .- Hide quoted text -

- Show quoted text -

I'm using VS2008... is there WSE for that version? i can only find it
for VS2005?

is this the only way? i made C# web services before that were hosted
on an IIS site with intergrated windows auth, but the client side was C
++ and i was able to pass current nt credentials without a problem....
this is my first attempt where the client side is another c# web page.-
Hide quoted text -

- Show quoted text -

I switched the project to VS2005 just to test and enabled WSE 3.0
support -- is there any additional settings i need to change since it
still throws the same error...- Hide quoted text -

- Show quoted text -

so are u saying I cannot use integrated security on a WS?

btw, it works fine if my client is a C# windows form (instead of a web
form)... so I think this shows the WS is okay... it's just there's
something i'm missing on the web form to make it work... but
everywhere i read i see they just say to set the Credentials param and
i did that already.
.



Relevant Pages

  • WSE 3.0 UsernameOverTransport Problem
    ... I am fairly new to WSE, in general, however I have read several ... working on integrating WSE 3.0 into an web service. ... expected but not present in the security header of the incoming ... the the server side does in fact see a security header, ...
    (microsoft.public.dotnet.framework.webservices.enhancements)
  • Re: 401 While Accessing Web Service
    ... The WSE 3.0 should work fine with framework 3.0/3.5. ... for your web service, that way it should work fine. ... Windows Auth to Anonymous, it works... ... on an IIS site with intergrated windows auth, but the client side was C ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: WSE 3.0 UsernameOverTransport Problem
    ... Usually WSE throws that exception when the WSE extension is not configured ... Server side: usernameOverTransport and requireActionHeader ... working on integrating WSE 3.0 into an web service. ... expected but not present in the security header of the incoming ...
    (microsoft.public.dotnet.framework.webservices.enhancements)
  • Re: WSE 3.0 UsernameOverTransport Problem
    ... Which WSE policies are you using on the client and the service? ... working on integrating WSE 3.0 into an web service. ... expected but not present in the security header of the incoming ...
    (microsoft.public.dotnet.framework.webservices.enhancements)
  • Re: Web Services Security
    ... I read about WSE 2.0, but I am still confused as to what method I should be ... using to implement security for the web service. ... I have a web service on production which is used by "n" number of clients, ... > encrypting the XML using XML Dsig, ...
    (microsoft.public.dotnet.framework.aspnet.webservices)