NTLM Authentication and WSE Security



I'm a complete newbie at security in WSE, so I don't know if this is
simple or impossible. I have written a Windows Service that uses WSE
to expose a web service. I have written a Windows Forms client
application to consume the web service. Those parts were trivial and
are working well.

Now I would like to have the client authenticate to the server using
NTLM. Both pieces (client and server) are running in a Windows domain
environment. If the service were being hosted by IIS, I would know
how to add NTLM authentication, but it's not. Also, I know that IE
can support NTLM authentication transparently, but again my client is
not IE.

Whereas it might be nice to have a login popup if the user is not
already authenticated against the domain, that is not necessary at
this point (a simple failure is sufficient). The basic solution I'm
after simply passes the domain authentication from the client to the
server.

After the server receives the client information, I will also need to
check group membership of the user in question, but I expect that to
be fairly straight forward once the credentials are passed.

Any help, especially a fairly simple example, would be MUCH
appreciated. I need to understand both the server piece and the
client piece, but am having a little trouble knowing where to start.

TIA!
Brad.
.



Relevant Pages

  • RE: Printing from Win9x clients stops
    ... Open Server Management. ... then right-click the name of the computer running Windows Small Business ... >From the client computer: ... The Select Network Component Type ...
    (microsoft.public.windows.server.sbs)
  • RE: Beginners Questions
    ... We do use Windows form on the presentation layer which is on ... terminal server and call web services on the business logic side. ... of using "proxy" authentication on SQL Server. ... > I have written an app with a Windows Forms UI that is deployed to clients ...
    (microsoft.public.dotnet.distributed_apps)
  • Re: WCF security advice (and clarification) needed
    ... You, the client, resolve the foo.mycompany.com hostname within your ... TCP/IP) with that ticket as the security token. ... There are two parties participating in a security scenario, the server ... HTTP supports other authentication ...
    (microsoft.public.dotnet.framework.webservices)
  • RE: Printing from Win9x clients stops
    ... The printers with 9x drivers on the server appeared automatically in the ... > then right-click the name of the computer running Windows Small Business ... > From the client computer: ... The Select Network Component Type ...
    (microsoft.public.windows.server.sbs)
  • Re: after installing KB011829 OWA is not working anymore
    ... Based on my research, after you install hotfix KB911829, I suggest we ... Profile WMI Provider to each client computer that is running Windows Vista ... If you are running the Premium Edition of Windows Small Business Server ...
    (microsoft.public.exchange.connectivity)