Re: calling WSS web services from Web Application

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Aaron (aaron.rh_at_nospamta.macroview.com.au)
Date: 03/16/04


Date: Wed, 17 Mar 2004 08:46:58 +1100

John,

This is (I think) exactly the problem I have!! Nice to know you're not
alone. I think the reason is that NTLM does not send credentials everytime,
only the first time. So once your authenticated, which probably happens
before you even call the web service you don't get the credentials passed to
the service, hence you can't flow them on to any additional hops.

I can't see any way around this at the moment, other that not using NTLM,
ie. basic, or creating credentials in the service to pass to the second
hop/web service in WSS.

I'd love to know if you get it sorted out. I'll post anything I can find out
here. I'm planning to spend all day working on this (again)...

Aaron.

"John Q Public" <asdf@asdf.edu> wrote in message
news:OzIzYLuCEHA.2628@TK2MSFTNGP11.phx.gbl...
> I can succesfully call WSS web services from a console application and a
> windows application (.Net)
>
> However, I get 401.1 errors when invoking web service methods like from a
> .net web application.
>
> checking the security event logs, it seems that either
>
> a) when making soap calls from a web app, NTLM authentication is not sent
> b) or it is sent, but for some reason, the user is changed to the local
ISUR
> account on the WSS server.
>
> Both my calling application and the WSS server are set to integrated and
> anonymous is turned off.
>
> I'm no windows security experts, so maybe I'm missing the obvious (NTLM is
> not sent from a web app).
>
> thanks
>
>
>
>
>



Relevant Pages

  • Using NTLM authentication with WSE web service client proxy
    ... How I could use NTLM authentication with WSE web service client proxy? ... I set the credentials property of the proxy by ...
    (microsoft.public.dotnet.framework.webservices.enhancements)
  • Re: HttpWebRequest and 401
    ... Linux machines do not support NTLM natively (though Mozilla *was* ... >> I think you're confusing authentication types. ... This class would make a call to the>>>protected site with the user's credentials on behalf of the user. ... I understand auth types, NTLM works well for> windows domain acounts, what about other OSes? ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Windows authentication for web service client??
    ... If you are posting to WEBDAV it is my understanding that you cannot use Integrated authentication since you HAVE to pass it the username and the password in the network credentials. ... I must put together a sample example, but for some reason the users credentials are lost when making the WebDAV request. ... web service is running ASPNET account. ...
    (microsoft.public.dotnet.framework.aspnet.webservices)
  • Re: Calling Web Service that calls other Web Service with Windows Authentication
    ... You are passing credentials (by ... services - then you do not need to pass token remotely and windows can ... Given a windows application client that's calling a web service (using ...
    (microsoft.public.dotnet.framework.aspnet.webservices)
  • Passing credentials from ASP.NET website to webservice
    ... I have a problem with passing the default credentials from an ASP.NET web ... The EMM web applications access the MSCRM ... Web services which is part of the MS CRM server setup. ... since both the EMM web application and the web service reside on the same IIS ...
    (microsoft.public.inetserver.iis.security)