Re: ... forbidden with client authentication scheme Anonymous



Let us know more details, in particular the binding (basicHttpBinding,
wsHttpBinding, netTcpBinding, etc...) and its attributes. We need to know
where the security check takes place (transport or message) and how the
server/client authenticate.

And, you say the "the error the server gets (...)". Isn't the other way
around?

note: avoid posting to multiple newsgroups please ...

Tiago Halm

<mzarlenga@xxxxxxxxx> wrote in message
news:70e4d74a-a5f7-48b6-b6bc-fafb8ddef0fa@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
I have a client / server written in C#/VS2005 that uses WCF. Each
component exposes a secure (https:) endpoint with WCF. httpcfg was
used to secure the ports with certificates. (Both system use the same
certificate for their endpoints, in case that matters)

The client and server are on different physical systems.

The applications communicate like so:
Request: Client -----> Server's endpoint (
https://172.16.26.30:8283/MyServer
)
Response: Server -----> Client's endpoint (
https://172.16.26.31:40201/MyClient
)

The client works on every system I've tried it ... but one. On that
one system, when the Server tries to respond, the error the server
gets is: The HTTP request was forbidden with client authentication
scheme 'Anonymous'

This appears to be some kind of IIS setup issue on that one client
system.

I believe I've made sure that Anonymous access is enabled: Control
Panel > Administrative Tools > Internet Information Services > Web
Services > right click > Properties > Directory Security >
Authentication and Access Control > Enable Anonymous Access is
checked.

What else could be wrong? What am I missing?

Help!


.



Relevant Pages

  • Re: WCF security advice (and clarification) needed
    ... You, the client, resolve the foo.mycompany.com hostname within your ... TCP/IP) with that ticket as the security token. ... There are two parties participating in a security scenario, the server ... HTTP supports other authentication ...
    (microsoft.public.dotnet.framework.webservices)
  • Re: SSPI Kerberos for delegation
    ... We want the authentication to happen without providing credentials ... But SSPI while authenticating from the client to the server can do mutual ...
    (comp.protocols.kerberos)
  • Re: Aironet 1200/Radius Help Needed
    ... I just fired up a W2003 Advanced Server so that I can take ... >> IAS servers (do I need a separate certificate for the secondary IAS ... >> of authentication since it involves just installing the certificate on ... >between the AP and the client. ...
    (microsoft.public.internet.radius)
  • Re: Windows Authentication, Single sign on and Active Directory
    ... service proxy client fails to connect due to authentication failure and then ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ... The server is always in the domain. ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Outlook -> remote exchange -> always wants a password
    ... I have my server set to use Integrated Windows authentication over SSL. ... almost certainly "break" your existing users if the client setup does not ... Close out of these configuration dialogs, ...
    (microsoft.public.windows.server.sbs)