Re: WSS Web Service Security

From: Aaron (aaron.rh_at_nospamta.macroview.com.au)
Date: 03/16/04 

Date: Wed, 17 Mar 2004 08:40:24 +1100

Hi,

I assume you guys are using basic authentication. Is that true? I can't get
integrated to work in this way.

I have a web service (a DIME receiver currently sitting outside WSS because
I can't get it to work inside without breaking the WSS services). This
service receives a DIME attachment a uploads it to a document library using
WEBDAV. However without defining credentials in the web service I can't get
it to work, ie. I get error 401. This is because my default credentials seem
to always be blank. Creating credentials and then calling WEBDav works fine,
but then I loose the conext of the user loading the document, and therefore
the rights they have to the libraries etc.

I think this is because with integrated the credentials are not sent with
every request once the user is authenticated the first time. Seeing as how
I'm pretty much authenticated to the server when I login, I never get any
default credentials on in the first hop to pass on!

Anyone have any ideas? One thought I had was to put the web service inside
WSS and not have to worry about the second hop at all, but when I add the
webservice extension to the web.config it breaks all the WSS services! While
I don't use these services anyway it seems like a bad idea to have them
broken!

Thanks,

Aaron.

"FredrikT" <anonymous@discussions.microsoft.com> wrote in message
news:5ce101c40079$c8e8f690$a101280a@phx.gbl...
> Yes, I didn't give the credentials. It is working now
>
> >-----Ursprungligt meddelande-----
> >When I'm referencing the ws in VIsual Studio, I am
> >prompted to give my crendentials, which I do
> successfully.
> >But I get the error when running the app that is
> consuming
> >the web service. I don't give any credentials in the code,
> >maybe that is what I have to do?
> >
> >>-----Ursprungligt meddelande-----
> >>Are you passing the credentials properly?
> >>
> >>Also is this coming up when you are trying to reference
> >the service in
> >>Visual Studio or when running the app that is consuming
> >the service.
> >>
> >>"FredrikT" <anonymous@discussions.microsoft.com> wrote
> in
> >message
> >>news:576601c4006f$b9e37d00$a401280a@phx.gbl...
> >>> Hi,
> >>>
> >>>
> >>> I'm trying to consume a WSS Web Service. I have
> >>> successfully done this on my local server, but when
> >trying
> >>> on another server, I get 401 access denied. I am admin
> >on
> >>> that WSS site. Could you set specific access for web
> >>> services in WSS or what could be the problem? COuld
> >anyone
> >>> with access to that server consume its web services?
> >>
> >>
> >>.
> >>
> >.
> >

Relevant Pages

  • Re: <identity impersonat=> problems.
    ... I have a web service configured with Anonymous access disabled. ... if I change the element and add the "username" ... that the web service authentication use, ... Probably because you cannot impersonate and delegate the encrypted credentials (authenticated via ...
    (microsoft.public.dotnet.security)
  • Re: Pass through credentials to web service
    ... It is the double-hop' limitation of NTLM authentication. ... application server, the server cannot then use those credentials to ... >I have a client application that calls a web service. ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Anonymous and integrated authentication for Web service
    ... Can you tell me where to look for information on how to create a .net client ... I tried changing values in the UseDefaultCredentials and Credentials ... Given this are you saying they both can call the same web service? ... Integrated Windows authentication ...
    (microsoft.public.inetserver.iis.security)
  • Re: Windows Authentication Web Services WinForms
    ... I need to call a Web Service that returns me HTML-formatted data. ... This WebService expects a SessionID added to the URL along with my username and domain name. ... I can acces all the Web services except the second flavour of the authentication one. ... > application, these are usually the Windows credentials (user name, password, ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: Passing user credintials from a web page to a web service.
    ... If you're using Basic authentication the username is available via HttpContext.Current.User.Identity and the password is in some server variable. ... Using .Net/ASP 1.1 on a server using integrated authentication-- I have a web page that will collect some data from the user, call a web service to get additional data, and then merge and format the data back to the user's browser. ... But I want the web service to authenticate with the user's credentials, not the credentials of IIS serving the aspx page. ...
    (microsoft.public.dotnet.framework.aspnet)