User authentication

[Peter Schmitz]

Hi,

I just created my first web service, and now I want to restrict the clients,
that can connect to it. It would be best, if the validation was based on the
current user that uses the client application. But, how can my client
application (that consumes the web service) make use of the current user
credentials to connect to the web service?

Thanks for any help,

Peter

[richlm]

In your web.config you must incude:
<identity impersonate="true"/>

There should already be something like this by default:
<authentication mode="Windows"/>

And in IIS you must disable anonymous access for the site/folder containing
your web service, and ensure that windows authentication is enabled.

This of course assumes your clients are windows-authenticated - if not
you'll need to look at WSE.

[richlm]

In your web.config you must incude:
<identity impersonate="true"/>

There should already be something like this by default:
<authentication mode="Windows"/>

And in IIS you must disable anonymous access for the site/folder containing
your web service, and ensure that windows authentication is enabled.

This of course assumes your clients are windows-authenticated - if not
you'll need to look at WSE.