Re: Problem with web service credentials

Hello,

I guess you have impersonation turned on in you website and the webservice is on another computer.

In this case, you are using the credential from the client and pass it along to the webservice. This breaks with NTLM authentication.

You have two options then:
- Implement Kerberos authentication (see http://dunnry.com/blog/ConfiguringKerberosDelegation.aspx).
- Turn off Windows authentication and use basic authentication. But you should do this only if you are protecting the website with SSL. Additionally, this will remove the single-sign-on experiences for the end users.

Best regards,
Henning Krause

"Takumi" <Takumi@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:BFDFF37D-50F5-4606-A2FA-2A7E435FD2E0@xxxxxxxxxxxxxxxx
I have a ASP.NET web page that calls a web service on a server with IIS
installed on it. When it calls the web service, it gives a HTTP status 401
error stating that it is unauthorized to call the web service. After
searching the Microsoft Knowledge Base, article ID 811318 describes my exact
problem. However, when I try to implement the stated solution, I still
receive the same error.

Basically if I add the following line of code, it should fix my problem but
it doesn't.

WebService.credentials=system.net.credentialcache.defaultcredentials
(where WebService is a reference to the web service on the server)

I checked the directory security of the web service in IIS and anonymous
access has been turned off and Integrated Windows authentication has been
switched on.

Any help would be greatly appreciated.

Thanks.

.

Relevant Pages

  • Re: Trying to pass NetworkCredential to WebService
    ... authentication. ... ASP.NET's webservice calling code, we need to attach a NetworkCredential to ... application pool different from the ASP.NET ... So this still is a problem because my web service needs to run ...
    (microsoft.public.dotnet.framework.aspnet.webservices)
  • Re: File Upload Web Service
    ... the uploaded files in a web service just the same as a web form. ... I found that the Request.Files collection is accessible in both a web form ... > webservice. ... as for implementing authentication mechanism ...
    (microsoft.public.dotnet.framework.aspnet)
  • RE: User Security?
    ... The authentication is "Integrated Windows Authentication". ... Currently I am trying to access the web service thru IE6. ... you're developing an ASP.NET webservice which hosted ... Microsoft MSDN Online Support Lead ...
    (microsoft.public.dotnet.framework.webservices)
  • Re: Problem with web service credentials
    ... I guess you have impersonation turned on in you website and the webservice ... This breaks with NTLM authentication. ... >I have a ASP.NET web page that calls a web service on a server with IIS ...
    (microsoft.public.dotnet.general)
  • Security design question
    ... Website are hosted in DMZ - subdomain created dmz.companydomain.com ... We have our web farm (3-5 web servers) running under one NT Domain account ... SQL server will be used to host user authentication information and Session ... If the internal web service trust the NT domain account that hosts the web ...
    (microsoft.public.dotnet.framework.aspnet.security)
Loading