Re: Token assert

Tech-Archive recommends: Speed Up your PC by fixing your registry

From: William Stacey [MVP] (staceywREMOVE_at_mvps.org)
Date: 01/14/05 

Date: Fri, 14 Jan 2005 16:06:43 -0500

I ended up posting some code at my MSN blog
http://spaces.msn.com/members/staceyw
This integrates a few different things I have been blogging about and
posting here, such as:
1) Passing a SendHashed username token and have it verify in custom UTM.
2) Setting the CurrentPrincipal in the UTM to allow std code access security
checks.
3) Sample UserDB and User classes with the pw and verifier encryption logic.
HTH 

-- 
William Stacey, MVP
http://mvp.support.microsoft.com
"William Stacey [MVP]" <staceywREMOVE@mvps.org> wrote in message
news:#OVwMfl#EHA.2076@TK2MSFTNGP15.phx.gbl...
> It seems you can require a token (i.e. UsernameToken) via policy (xml
file)
> or code with a manual enumeration of the tokens and checking roles.  Would
> it not be easier to just use an Attribute of some sort at the top of the
web
> service method(s) you want to require UsernameToken attached with an
> optional "roles" array?  Is that already there and I am not finding it?
tia
>
> -- 
> William Stacey, MVP
> http://mvp.support.microsoft.com
>
>

Relevant Pages

  • WSE402: The message does not conform to the policy it was mapped t
    ... WSE 2 SP3 webservice that is requiring client side certs and username tokens: ... The message does not conform to the policy it was mapped to. ... expression, SoapEnvelope message, EndpointReference endpoint, String action, ...
    (microsoft.public.dotnet.framework.webservices.enhancements)
  • Re: CustomXmlSecurityToken > For WS-Trust
    ... Look at the secureConversation sample which does use a username token. ... > miserably as the Server responds with a SoapFault with a "Server NOT ... > tokens. ... > I noticed that the RST is NOT sent with an Entropy element ...
    (microsoft.public.dotnet.framework.webservices.enhancements)
  • Re: WSE 2.0 - The security token could not be authenticated or authorized
    ... I understand that the Windows Authentication is failing. ... username, localmachine\username but both fail to authenticate. ... > service side WSE tries to validate the tokens in the request. ...
    (microsoft.public.dotnet.framework.webservices.enhancements)
  • Re: Authentication using UsernameToken and PasswordOption.SendNone
    ... how wse goes about the decision making to get the password out of the ... username token that is in hte signature. ... sent in the tokens collection and see that it doesn't have a password and ...
    (microsoft.public.dotnet.framework.webservices.enhancements)
  • Re: New User Encrypting Username Token Issue
    ... The line of code to encrypt the username came right out of the hands on lab ... I am adding the tokens to the token collection first, ...
    (microsoft.public.dotnet.framework.webservices.enhancements)