Hi,
I need to develop a secure Web Service that requires a username and
password. One of the requirements is that the WS supports Windows
Authentication, meaning accepts the username and password the client used to
log on to Windows. The WS then needs to see which Active Directory roles
the user belongs to and allow the user (or not) to perform specific tasks
with the WS.
Can anyone please point me in the right direction as to the
technologies/SDKs I need to use? Specifically:
a) Client: How to gather the current login information and use it to
authenticate against my WS.
b) WS: How to authenticate the user against Active Directory?
Thanks in advance!
6  3975 
If your web service is running in the intranet, than you have to configure
the directory security for the web service in IIS with integrated windows
authentication (only) and have in the web.config the <authentication
mode="Windows" /> and <identity impersonate="true" />. This way you force the
web service to run in the security context of the calling user and you can
cast the Identity property of the User to WindowsIdentity.
"Jimmy" wrote: Hi,
I need to develop a secure Web Service that requires a username and
password. One of the requirements is that the WS supports Windows
Authentication, meaning accepts the username and password the client used to
log on to Windows. The WS then needs to see which Active Directory roles
the user belongs to and allow the user (or not) to perform specific tasks
with the WS.
Can anyone please point me in the right direction as to the
technologies/SDKs I need to use? Specifically:
a) Client: How to gather the current login information and use it to
authenticate against my WS.
b) WS: How to authenticate the user against Active Directory?
Thanks in advance!
Thanks for your reply.
How do I access the user information from within the Web Service class?
Thanks!
"GCR" <GC*@discussions.microsoft.com> wrote in message
news:56**********************************@microsof t.com... If your web service is running in the intranet, than you have to configure
the directory security for the web service in IIS with integrated windows
authentication (only) and have in the web.config the <authentication
mode="Windows" /> and <identity impersonate="true" />. This way you force
the
web service to run in the security context of the calling user and you can
cast the Identity property of the User to WindowsIdentity.
"Jimmy" wrote:
Hi,
I need to develop a secure Web Service that requires a username and
password. One of the requirements is that the WS supports Windows
Authentication, meaning accepts the username and password the client used
to
log on to Windows. The WS then needs to see which Active Directory roles
the user belongs to and allow the user (or not) to perform specific tasks
with the WS.
Can anyone please point me in the right direction as to the
technologies/SDKs I need to use? Specifically:
a) Client: How to gather the current login information and use it to
authenticate against my WS.
b) WS: How to authenticate the user against Active Directory?
Thanks in advance!
Over the HttpContext.User property, that provides programmatic access to the
properties and methods of the IPrincipal interface. When you use Windows
authentication, the IPrincipal is an WindowsPrincipal and over
WindowsPrincipal.IsInRole method you can check the membership of the user in
a Windows group.
"Jimmy" wrote: Thanks for your reply.
How do I access the user information from within the Web Service class?
Thanks!
"GCR" <GC*@discussions.microsoft.com> wrote in message
news:56**********************************@microsof t.com... If your web service is running in the intranet, than you have to configure
the directory security for the web service in IIS with integrated windows
authentication (only) and have in the web.config the <authentication
mode="Windows" /> and <identity impersonate="true" />. This way you force
the
web service to run in the security context of the calling user and you can
cast the Identity property of the User to WindowsIdentity.
"Jimmy" wrote:
Hi,
I need to develop a secure Web Service that requires a username and
password. One of the requirements is that the WS supports Windows
Authentication, meaning accepts the username and password the client used
to
log on to Windows. The WS then needs to see which Active Directory roles
the user belongs to and allow the user (or not) to perform specific tasks
with the WS.
Can anyone please point me in the right direction as to the
technologies/SDKs I need to use? Specifically:
a) Client: How to gather the current login information and use it to
authenticate against my WS.
b) WS: How to authenticate the user against Active Directory?
Thanks in advance!
Thanks again.
One more little problem:
I set the properties as you said in WebConfig.ini. Also, I set the website
in IIS to "Integrated Windows Security". But as soon as I remove "allow
anonymous access", I get an "Unauthorized" exception on the client when i
call on a method, even though it is running under an authenticated domain
user.
Help?
Thanks!
"GCR" <GC*@discussions.microsoft.com> wrote in message
news:C4**********************************@microsof t.com... Over the HttpContext.User property, that provides programmatic access to
the
properties and methods of the IPrincipal interface. When you use Windows
authentication, the IPrincipal is an WindowsPrincipal and over
WindowsPrincipal.IsInRole method you can check the membership of the user
in
a Windows group.
"Jimmy" wrote:
Thanks for your reply.
How do I access the user information from within the Web Service class?
Thanks!
"GCR" <GC*@discussions.microsoft.com> wrote in message
news:56**********************************@microsof t.com... > If your web service is running in the intranet, than you have to
> configure
> the directory security for the web service in IIS with integrated
> windows
> authentication (only) and have in the web.config the <authentication
> mode="Windows" /> and <identity impersonate="true" />. This way you
> force
> the
> web service to run in the security context of the calling user and you
> can
> cast the Identity property of the User to WindowsIdentity.
>
> "Jimmy" wrote:
>
>> Hi,
>>
>> I need to develop a secure Web Service that requires a username and
>> password. One of the requirements is that the WS supports Windows
>> Authentication, meaning accepts the username and password the client
>> used
>> to
>> log on to Windows. The WS then needs to see which Active Directory
>> roles
>> the user belongs to and allow the user (or not) to perform specific
>> tasks
>> with the WS.
>>
>> Can anyone please point me in the right direction as to the
>> technologies/SDKs I need to use? Specifically:
>>
>> a) Client: How to gather the current login information and use it to
>> authenticate against my WS.
>> b) WS: How to authenticate the user against Active Directory?
>>
>> Thanks in advance!
>>
>>
>>
Not WebConfig.ini, but web.config - this is the configuration file for
ASP.net applications!!!!!! See following link for further details: http://msdn.microsoft.com/library/de...ewebconfig.asp
"Jimmy" wrote: Thanks again.
One more little problem:
I set the properties as you said in WebConfig.ini. Also, I set the website
in IIS to "Integrated Windows Security". But as soon as I remove "allow
anonymous access", I get an "Unauthorized" exception on the client when i
call on a method, even though it is running under an authenticated domain
user.
Help?
Thanks!
"GCR" <GC*@discussions.microsoft.com> wrote in message
news:C4**********************************@microsof t.com... Over the HttpContext.User property, that provides programmatic access to
the
properties and methods of the IPrincipal interface. When you use Windows
authentication, the IPrincipal is an WindowsPrincipal and over
WindowsPrincipal.IsInRole method you can check the membership of the user
in
a Windows group.
"Jimmy" wrote:
Thanks for your reply.
How do I access the user information from within the Web Service class?
Thanks!
"GCR" <GC*@discussions.microsoft.com> wrote in message
news:56**********************************@microsof t.com...
> If your web service is running in the intranet, than you have to
> configure
> the directory security for the web service in IIS with integrated
> windows
> authentication (only) and have in the web.config the <authentication
> mode="Windows" /> and <identity impersonate="true" />. This way you
> force
> the
> web service to run in the security context of the calling user and you
> can
> cast the Identity property of the User to WindowsIdentity.
>
> "Jimmy" wrote:
>
>> Hi,
>>
>> I need to develop a secure Web Service that requires a username and
>> password. One of the requirements is that the WS supports Windows
>> Authentication, meaning accepts the username and password the client
>> used
>> to
>> log on to Windows. The WS then needs to see which Active Directory
>> roles
>> the user belongs to and allow the user (or not) to perform specific
>> tasks
>> with the WS.
>>
>> Can anyone please point me in the right direction as to the
>> technologies/SDKs I need to use? Specifically:
>>
>> a) Client: How to gather the current login information and use it to
>> authenticate against my WS.
>> b) WS: How to authenticate the user against Active Directory?
>>
>> Thanks in advance!
>>
>>
>>
OK, I got it. I forgot to assign default credentials. Thanks for your
help!
"Jimmy" <NoSpam> wrote in message
news:uZ***************@TK2MSFTNGP14.phx.gbl... Thanks again.
One more little problem:
I set the properties as you said in WebConfig.ini. Also, I set the
website in IIS to "Integrated Windows Security". But as soon as I remove
"allow anonymous access", I get an "Unauthorized" exception on the client
when i call on a method, even though it is running under an authenticated
domain user.
Help?
Thanks!
"GCR" <GC*@discussions.microsoft.com> wrote in message
news:C4**********************************@microsof t.com... Over the HttpContext.User property, that provides programmatic access to
the
properties and methods of the IPrincipal interface. When you use Windows
authentication, the IPrincipal is an WindowsPrincipal and over
WindowsPrincipal.IsInRole method you can check the membership of the user
in
a Windows group.
"Jimmy" wrote:
Thanks for your reply.
How do I access the user information from within the Web Service class?
Thanks!
"GCR" <GC*@discussions.microsoft.com> wrote in message
news:56**********************************@microsof t.com...
> If your web service is running in the intranet, than you have to
> configure
> the directory security for the web service in IIS with integrated
> windows
> authentication (only) and have in the web.config the <authentication
> mode="Windows" /> and <identity impersonate="true" />. This way you
> force
> the
> web service to run in the security context of the calling user and you
> can
> cast the Identity property of the User to WindowsIdentity.
>
> "Jimmy" wrote:
>
>> Hi,
>>
>> I need to develop a secure Web Service that requires a username and
>> password. One of the requirements is that the WS supports Windows
>> Authentication, meaning accepts the username and password the client
>> used
>> to
>> log on to Windows. The WS then needs to see which Active Directory
>> roles
>> the user belongs to and allow the user (or not) to perform specific
>> tasks
>> with the WS.
>>
>> Can anyone please point me in the right direction as to the
>> technologies/SDKs I need to use? Specifically:
>>
>> a) Client: How to gather the current login information and use it to
>> authenticate against my WS.
>> b) WS: How to authenticate the user against Active Directory?
>>
>> Thanks in advance!
>>
>>
>>
This thread has been closed and replies have been disabled. Please start a new discussion. Similar topics
by: Bob Everland |
last post by:
I have an application that is ISAPI and the only way to
secure it is through NT permissions. I need to have a way
to login to windows authentication so that when I get to
the ISAPI application no...
|
by: sherkozmo |
last post by:
I have my SQL 7.0 server set for Mixed security. I see now (finally)
the advantages of having windows authentication security for windows
groups.
I do most of my developing in Access Projects...
|
by: Mark |
last post by:
When our staff are logged into a computer on our domain, they're still
prompted for their domain login and password to get into our ASP.NET
application in Internet Explorer when using Windows...
|
by: Andrew |
last post by:
Hey all,
I would like to preface my question by stating I am still learning ASP.net
and while I am confident in the basics and foundation, the more advanced
stuff is still a challenge. Ok....
|
by: pberna |
last post by:
Dear all,
I built a Web Form application to start and stop a Windows Service remotely.
I successful tested the application on Windows 2000 server + IIS. I must
include the ASPNET user
to the...
|
by: Kevin Yu |
last post by:
is it possible to for user to click a logout button to logout and when the
user want to get into the system again, the user have to login again?
Kevin
|
by: Nils Magnus Englund |
last post by:
Hello,
I am having trouble using Integrated Windows Authentication between our
intranet server and our database server, both of which are on our local
domain.
Windows authentication works for...
|
by: Hriday |
last post by:
Hi there, Please help me..It is urgent
This is Hriday, working on windows authentication with
Active Directory...
My requirment is when a user sends a request to my web
Applicatoin I want to...
|
by: Alice Wong |
last post by:
I am setting up my Web ASP.net application to connect to Sql server using
windows authentication.
I set up IIS to have integrated windows authenication and sql to allow
Windows authentication....
|
by: Preben Zacho |
last post by:
Hi there
The scenario I got is this: I have created a Windows application in VS and I
want to deploy it to another machine running Windows Vista. Since I have no
control over this other machine,...
|
by: taylorcarr |
last post by:
A Canon printer is a smart device known for being advanced, efficient, and reliable. It is designed for home, office, and hybrid workspace use and can also be used for a variety of purposes. However,...
|
by: ryjfgjl |
last post by:
If we have dozens or hundreds of excel to import into the database, if we use the excel import function provided by database editors such as navicat, it will be extremely tedious and time-consuming...
|
by: ryjfgjl |
last post by:
In our work, we often receive Excel tables with data in the same format. If we want to analyze these data, it can be difficult to analyze them because the data is spread across multiple Excel files...
|
by: BarryA |
last post by:
What are the essential steps and strategies outlined in the Data Structures and Algorithms (DSA) roadmap for aspiring data scientists? How can individuals effectively utilize this roadmap to progress...
|
by: nemocccc |
last post by:
hello, everyone, I want to develop a software for my android phone for daily needs, any suggestions?
|
by: Sonnysonu |
last post by:
This is the data of csv file
1 2 3
1 2 3
1 2 3
1 2 3
2 3
2 3
3
the lengths should be different i have to store the data by column-wise with in the specific length.
suppose the i have to...
|
by: Hystou |
last post by:
There are some requirements for setting up RAID:
1. The motherboard and BIOS support RAID configuration.
2. The motherboard has 2 or more available SATA protocol SSD/HDD slots (including MSATA, M.2...
|
by: marktang |
last post by:
ONU (Optical Network Unit) is one of the key components for providing high-speed Internet services. Its primary function is to act as an endpoint device located at the user's premises. However,...
|
by: jinu1996 |
last post by:
In today's digital age, having a compelling online presence is paramount for businesses aiming to thrive in a competitive landscape. At the heart of this digital strategy lies an intricately woven...
| |
