Re: WebDAV and windows authentication?



Henning, thanks again for your help. It seems I will have to use
another API. I looked into WinInet but msdn states that it is not
suited for applications running as services and instead suggests
WinHttp, so my choice fell on that.

Kind regards,
- Jellobiaffra

Henning Krause [MVP - Exchange] skrev:

Hello,

does the IXMLHttpRequest interface even support integrated authentication?
The documentation states: "bstrUser [in, optional]: Name of the user for
authentication. If this parameter is Null ("") or missing and the site
requires authentication, the component displays a logon window."

And the remarks section of the interface states: "Note IXMLHTTPRequest
does not support secure website access. To access a secure website, use the
WinINet API."

So I guess you'll have to use WinInet and parse the response with a
IXMLDomDocument. But be aware, that some exchange properties are not
returned as wellformed xml (they have a local name starting with "0x", which
is not allowed by xml).

Best regards,
Henning Krause

"Jellobiaffra" <greken80@xxxxxxxxxxx> wrote in message
news:1168414048.311184.74520@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Henning, thank you for your response.

I have previously set up the correct access rights (receive as/send as)
for the account. As I said, when I log in using the account/pwd in the
code, it works fine, but this is not my prefered method.

To clarify, previously the same application used ExOLEDB to access the
exchange store, but we are changing to WebDAV so that it won't have to
be installed directly on the server. The app was run as a service on
the exchange server by an account with correct access rights, and could
then access the exchange store without having to log in (no need to
provide account/pwd in the code).

I am not familiar with the concept of integrated security and hence
don't know if it is active. Could you help me out?

Thanks again!


Henning Krause [MVP - Exchange] skrev:

Hello,

if you want to access random mailboxes, you need access to those mailbox
(See http://www.infinitec.de/articles/exchange/grantmailboxaccess.aspx).

For the Windows Authentication: Do you have enabled Integrated Security
on
the Exchange virtual root?

Best regards,
Henning Krause

"Jellobiaffra" <greken80@xxxxxxxxxxx> wrote in message
news:1168351880.162897.277240@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Hello,

I am attempting an application that should access the exchange store
via WebDAV. The application should be able to access a random users
mailbox/calendar/contacts etc using an account that has access rights
to these. The app is written in C++ and uses XMLHttp for communication
with the exchange server.

When I specify the account details (uid/pwd) in XMLHttp.open (..)
everything works fine, but I would like to use windows authentication
instead. The application should be started as a service by an account
that has correct access rights. Can I use windows authentication to
access the exchange store and thus not have to specify uid/pwd when I
open a session to the server?

I have tried but it wont work, I get HTTP 401, access denied as
response from the server. Can this be done? Do I have to do something
special in the code for it to work?


Thanks for any help.



.



Relevant Pages

  • Re: Windows authentication from ASP.net application to Sql Server
    ... | Subject: Re: Windows authentication from ASP.net application to Sql Server ... | server or on the same server with the IIS/ASP.Net? ... Use a single fixed impersonate account, ... | client/server to use restricted kerberos delegation which has critical ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: winnt vs. sql auth
    ... The biggest benefit of using Windows Authentication is the security of the ... account access, then somewhere that account information must be stored. ... the storage of this information is on the very server that is at ... login credentials are transmitted over the network in cleartext. ...
    (microsoft.public.sqlserver.server)
  • RE: ASP.NET and IIS Security
    ... Make sure that the domain account's "Trust this account to delegate ... an application pool using an account local to the server. ... they get directed from the anonymous site to the Windows authentication site. ... If I access via the hostname I get the ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: The address could not be found, (0x80041209 - Cannot Connect to the server. )
    ... Are you using windows authentication on all your IIS boxes. ... > Portal Server 2003: ... > I have also added the domain administrator's user account details to the ...
    (microsoft.public.sharepoint.portalserver)
  • Re: WebDAV and windows authentication?
    ... : Name of the user for authentication. ... exchange store, but we are changing to WebDAV so that it won't have to ... be installed directly on the server. ... the exchange server by an account with correct access rights, ...
    (microsoft.public.exchange.development)