Re: hashed password and UsernameTokenManager

Hi Phil,
You have to return the original password. You will have to get it from
somewhere, e.g. a database.
WSE computes a hash with the password that you returns and then compares
that hash with the Usernametoken's hash.

Regards,
Pablo Cibraro
http://weblogs.asp.net/cibrax
http://www.lagash.com

"Phil Lee" <phil.lee@xxxxxxxxxxxxxxxxx> wrote in message
news:Or4PeYGEGHA.1508@xxxxxxxxxxxxxxxxxxxxxxx
> Hi,
>
> I'm using WSE3 username/password over certificate - I can implement my own
> (test) UsernameTokenManager like this:
>
> public class MyUsernameTokenManager : UsernameTokenManager
> {
> ...
>
> protected override string AuthenticateToken( UsernameToken token,
> string authenticatedPassword )
> {
> // for clear text passwords
> return token.Password; // This is just for test purposes
>
>
> }
> }
>
> This works fine.
>
> If however I want to send hashed passwords using
> PasswordOption.SendHashed, what do I need to return from
> AuthenticateToken?
> Returning token.PasswordDigest.ToString() doesn't work.
>
> Regards
> Phil Lee
>


.

Relevant Pages

  • Re: Help Urgent, How to get hashed pwd in web service when send in username token as SendHashed
    ... You can find the password hash in the user.PasswordHash property as a byte ... In your web service you should implement a custom UsernameTokenManager that ... > While in web service, i am getting Nothing in that UsernameToken's ... > If send it as SendPlainText, then in my web service, i get a hashed pwd. ...
    (microsoft.public.dotnet.framework.webservices.enhancements)
  • Re: [opensuse] OT: - e-mail problem
    ... On Tue, Jun 10, 2008 at 4:38 PM, Carlos E. R. ... Hash: SHA1 ... Look Phil, you were already given the answer. ...
    (SuSE)
  • Re: Dual-pressure push switch like camera shutter?
    ... On Tue, 3 Jun 2008, Brendan Gillatt wrote: ... Hash: SHA1 ... Phil wrote: ...
    (sci.electronics.components)
  • Re: [opensuse] OT: - e-mail problem
    ... Hash: SHA1 ... Look Phil, you were already given the answer. ... but somehow I'd never seen that term before you mentioned it ...
    (SuSE)
  • Re: PasswordOption.SendNone
    ... implement a UsernameTokenManager which will provide WSE with the password. ... At the server WSE uses a UsernameTokenManager derived class ... > to obtain a password it can hash and compare against the sent ...
    (microsoft.public.dotnet.framework.webservices.enhancements)
Loading