473,407 Members | 2,546 Online
Bytes | Software Development & Data Engineering Community
Post Job

Home Posts Topics Members FAQ

Join Bytes to post your question to a community of 473,407 software developers and data experts.

Security setting help required in web.config file.

Hi All,

We have the following scenerio.
Machine 1: webservice is deployed in this machine.
Machine 2: UserControl is deployed in this machine.

Case 1:
Now my requirement is a person from Machine 3 types
(http://servername(machine 2)/myusercontrol.aspx.

In this sceneraio i am getting error user not authenticated.

We are using Windows authicated and Windows2003 server.

Case2:
But if i access using (http://localhost(machine2)/myusercontrol.aspx..
I gets the required result.

Can anybody plzz let me know what i am doing wrong in Case1.

This is a urgernt project requiremnet..
Any help is quite appreciated.

Thx in advance.
Robin
Nov 18 '05 #1
1 1315
Hi Robin:

I assume when you get user not authenticated this is on the call from
machine1 to the webservice on machine2? Are you trying to impersonate
the client on the web service call to machine 1?

There is a one hop limit on NTLM credentials, unless you enable
Kerberos delegation. The user's credentials make one hop from the
browser on machine3 to the web server on machine2. The web server
cannot use these credentials to make a second hop to machine1.

There are a couple solutions (at least):

1) Kerberos delegation
2) Running ASP.NET on the web server under a domain account or local
account synchronized with the web service machine.

I hvae an article with some more details. Even thought the article
focuses on SSRS it is applicable to other services.:

Authentication, Role-based Security, and SQL Reporting Services Web
Services
http://www.odetocode.com/Articles/216.aspx

HTH,

--
Scott
http://www.OdeToCode.com

On 24 Aug 2004 22:14:41 -0700, pa*********@yahoo.com (Robin Patra)
wrote:
Hi All,

We have the following scenerio.
Machine 1: webservice is deployed in this machine.
Machine 2: UserControl is deployed in this machine.

Case 1:
Now my requirement is a person from Machine 3 types
(http://servername(machine 2)/myusercontrol.aspx.

In this sceneraio i am getting error user not authenticated.

We are using Windows authicated and Windows2003 server.

Case2:
But if i access using (http://localhost(machine2)/myusercontrol.aspx..
I gets the required result.

Can anybody plzz let me know what i am doing wrong in Case1.

This is a urgernt project requiremnet..
Any help is quite appreciated.

Thx in advance.
Robin


Nov 18 '05 #2

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

2
by: Joseph Geretz | last post by:
I'm having a credentialing problem in my web application. Actually, I don't think this is an IIS security issue, since I'm able to access the page I'm requesting. However, the executing page itself...
29
by: Patrick | last post by:
I have the following code, which regardless which works fine and logs to the EventViewer regardless of whether <processModel/> section of machine.config is set to username="SYSTEM" or "machine" ...
1
by: Steve B. | last post by:
Hi, I've build an application based on some Web Services. Web Services are separated across some asmx files, according the business service it provides. In each web service, there are some...
2
by: John Kotuby | last post by:
Hello all, Note: This is the full version of a Post that I inadvertently sent before it was complete. About a year ago I wrote a VB.NET 2003 solution that consists of a number of assemblies...
3
by: Asaf | last post by:
Hello, I have created a web service name "TestWS" and published it to my SBS2003 server that uses IIS6 as a web server. I have set NO anonymous access to TestWS virtual directory and I have...
6
by: David++ | last post by:
Hi folks, So I have implemented a Web service which provides several Web Methods. Before the client can use the WebMethods they must first be authenticated and authorized i.e. they login, obtain...
2
by: Budhi Saputra Prasetya | last post by:
Hi, I managed to create a Windows Form Control and put it on my ASP .NET page. I have done the suggestion that is provided by modifying the security settings. From the stack trace, I would...
8
by: =?Utf-8?B?TWFuanJlZSBHYXJn?= | last post by:
Hi, I created a web service and hosted it in Windows Services. It is working fine. Now I am trying to implement the X509 certificates for message layer security. But it is throwing the following...
2
by: Ken Fine | last post by:
I want to add the security question and answer security feature to the ChangePassword control. I am aware that this functionality is built into the PasswordRecovery tool. I have implemented the...
5
by: Henry Stock | last post by:
I am trying to understand the following error: Any thing you can tell me about this is appreciated. Security Exception Description: The application attempted to perform an operation not allowed...
0
by: Charles Arthur | last post by:
How do i turn on java script on a villaon, callus and itel keypad mobile phone
0
by: emmanuelkatto | last post by:
Hi All, I am Emmanuel katto from Uganda. I want to ask what challenges you've faced while migrating a website to cloud. Please let me know. Thanks! Emmanuel
0
BarryA
by: BarryA | last post by:
What are the essential steps and strategies outlined in the Data Structures and Algorithms (DSA) roadmap for aspiring data scientists? How can individuals effectively utilize this roadmap to progress...
1
by: nemocccc | last post by:
hello, everyone, I want to develop a software for my android phone for daily needs, any suggestions?
0
Oralloy
by: Oralloy | last post by:
Hello folks, I am unable to find appropriate documentation on the type promotion of bit-fields when using the generalised comparison operator "<=>". The problem is that using the GNU compilers,...
0
jinu1996
by: jinu1996 | last post by:
In today's digital age, having a compelling online presence is paramount for businesses aiming to thrive in a competitive landscape. At the heart of this digital strategy lies an intricately woven...
0
by: Hystou | last post by:
Overview: Windows 11 and 10 have less user interface control over operating system update behaviour than previous versions of Windows. In Windows 11 and 10, there is no way to turn off the Windows...
0
tracyyun
by: tracyyun | last post by:
Dear forum friends, With the development of smart home technology, a variety of wireless communication protocols have appeared on the market, such as Zigbee, Z-Wave, Wi-Fi, Bluetooth, etc. Each...
0
isladogs
by: isladogs | last post by:
The next Access Europe User Group meeting will be on Wednesday 1 May 2024 starting at 18:00 UK time (6PM UTC+1) and finishing by 19:30 (7.30PM). In this session, we are pleased to welcome a new...

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.