WebService returns HTTP/1.1 401 Unauthorized

[Sebastian K.]

Hi all.

I am trying to get data from a 3rd party webservice. It seems the
webservice is running on an iis server. Fiddler shows me:

"Server: Microsoft-IIS/6.0
X-AspNet-Version: 2.0.50727
X-Powered-By: ASP.NET"

Fiddler shows furthermore:

"Access is denied.

Description: An error occurred while accessing the resources required
to serve this request. This may have been caused by an incorrect user
name and/or password.

Error message 401.1: Logon credentials were not recognized. Make sure
you are providing the correct user name and password. Otherwise,
contact the Web server's administrator for help."

If i paste the webservice url into my browser there is a prompting
dialog for username and password. With my login data everything works
fine and i can see the wsdl.

Now, here my code how i try to access the webservice:

myCredentials = new
System.ServiceModel.Description.ClientCredentials( );
myCredentials.UserName.UserName = "myUser";
myCredentials.UserName.Password = "myPass";

WSClient myWSClient = new WSClient();
myWSClient.ClientCredentials.UserName.UserName =
myCredentials.UserName.UserName;
myWSClient.ClientCredentials.UserName.Password =
myCredentials.UserName.Password;

WSDataResponse myWSDataResponse = new WSDataResponse();
myWSDataResponse.CultureCode = "de-DE";

WSDataRequest myWSDataRequest = new WSDataRequest();
myWSDataRequest.CultureCode = "de-DE";

myWSDataResponse = myWSClient.GetWSData(myWSDataRequest);
WSDataDictionary[] myWSDataDictionary =
myWSDataResponse.WSDataDictionary;

It is the first time i work with WebServices. I dont know if you need
more informationen. Can somebody help me to find a solution for this?

Greetz
Sebastian

[Mr. Arnold]

"Sebastian K." <gi*****@web.dewrote in message
news:r6********************************@4ax.com...

Hi all.

I am trying to get data from a 3rd party webservice. It seems the
webservice is running on an iis server. Fiddler shows me:

You contact the 3rd party vendor and you talk to them about your issues.
It's their Web server and Web service.

[Sebastian K.]

Yes, thats right... But at first i wanted to check if i have done some
mistakes. Any other suggestions?

Greetz
Sebastian

>
"Sebastian K." <gi*****@web.dewrote in message
news:r6********************************@4ax.com.. .

>Hi all.

I am trying to get data from a 3rd party webservice. It seems the
webservice is running on an iis server. Fiddler shows me:

You contact the 3rd party vendor and you talk to them about your issues.
It's their Web server and Web service.

[Mr. Arnold]

"Sebastian K." <gi*****@web.dewrote in message
news:8p********************************@4ax.com...

Yes, thats right... But at first i wanted to check if i have done some
mistakes. Any other suggestions?

Go to the horse's mouth, ask the 3rd party vendor for support and let them
tell you what is wrong with your code. There is nothing wrong in doing that,
and most likely it's going to solve your problem quickly.

[Sebastian K.]

>Go to the horse's mouth, ask the 3rd party vendor for support and let them

>tell you what is wrong with your code. There is nothing wrong in doing that,
and most likely it's going to solve your problem quickly.

Hey, i already know your opinion, thank you... But maybe the
webservice provider cant help me, and then?!?... You dont have to
answer if you wont help.

Is there maybe someone who could help?

Greetz
Sebastian

[Peter Bradley]

Sebastian K. wrote:

>
Hey, i already know your opinion, thank you... But maybe the
webservice provider cant help me, and then?!?... You dont have to
answer if you wont help.

I can't help, I'm afraid, because I have a very similar issue.

The difficulty arises where (as in my case and possibly in yours) you
are trying to connect to a 3rd party Web service that is not written
using the .NET Framework and/or the Visual Studio WSE plugin.

It is worth talking to them, though. In my case I'm in almost constant
touch, but there's not much they can do because they don't know anything
about .NET.

You might be able to help me, though. How did you get Fiddler to return
anything useful to you? I get some stuff back, but nothing that looks
like the message on the line, or any kind of XML.

Could it be because I have to make an HTTPS connection? Does Fiddler
not work so well in those circumstances?

Cheers

Peter

[Sebastian K.]

>You might be able to help me, though. How did you get Fiddler to return

>anything useful to you? I get some stuff back, but nothing that looks
like the message on the line, or any kind of XML.

Could it be because I have to make an HTTPS connection? Does Fiddler
not work so well in those circumstances?

Hi Peter.

Fiddler should capture HTTPS Traffic too, there is an extra option
under Rules to hide these traffic. But i havent tested it yet with
https connections (maybe there is a faq on the fiddler homepage).

During the test with my Client Application fiddler was started and
captured all traffic. Then i have clicked on the specific web session
(left panel) and on the right panel you should click on Sessions
Inspector (Tabs: Headers and TextView)

Hope i could help so far.

Greetz
Sebastian

[Mr. Arnold]

"Sebastian K." <gi*****@web.dewrote in message
news:pv********************************@4ax.com...

Go to the horse's mouth, ask the 3rd party vendor for support and let
them
tell you what is wrong with your code. There is nothing wrong in doing
that,
and most likely it's going to solve your problem quickly.

Hey, i already know your opinion, thank you... But maybe the
webservice provider cant help me, and then?!?... You dont have to
answer if you wont help.

Is there maybe someone who could help?

If the Web Service provider can't help with the authentication problem, then
no one is going to help you. And you have serious problems.

You can lead a horse to water, but you can't make the horse drink. It's the
3rd party vendor's Web server and its Web service. I bet they don't have any
problems in making contact.

For all you know, maybe the Web Service needs SOAP Authentication. It's
seems that you might be sending a plain text User-ID and PSW that anyone can
spoof on the wire. Most Web service providers use SOAP Authentication to
encrypt the User-ID and PSW. Maybe, that's your problem if you have never
talked to the 3rd party vendor on how to make contact.

With my first WEB service contact using a 3rd party vendor, you had better
bet that
I got on the phone with the provider that gave me all I needed to make
contact, and what I needed to do in code to make the contact when I
couldn't.

I got on the phone with a developer.

[Mr. Arnold]

"Sebastian K." <gi*****@web.dewrote in message
news:pv********************************@4ax.com...

Go to the horse's mouth, ask the 3rd party vendor for support and let
them
tell you what is wrong with your code. There is nothing wrong in doing
that,
and most likely it's going to solve your problem quickly.

Hey, i already know your opinion, thank you... But maybe the
webservice provider cant help me, and then?!?... You dont have to
answer if you wont help.

Is there maybe someone who could help?

If the Web Service provider can't help with the authentication problem, then
no one is going to help you. And you have serious problems. You are shooting
blanks here, if you think someone here is actually going to solve the
problem for you.

You can lead a horse to water, but you can't make the horse drink. It's the
3rd party vendor's Web Server and its Web service. I bet they don't have any
problems in making contact.

For all you know, maybe the Web Service needs SOAP Authentication. With my
first WEB service contact using a 3rd party vendor, you had better bet that
I got on the phone with the provider that gave me all I needed to make
contact and what I needed to do in code to make the contact when I couldn't.
I got on the phone with a developer.

You don't actually think someone here that knows nothing about the 3rd party
vendor is going to give you a solution?

[Peter Bradley]

Sebastian K. wrote:

Hi Peter.

Fiddler should capture HTTPS Traffic too, there is an extra option
under Rules to hide these traffic. But i havent tested it yet with
https connections (maybe there is a faq on the fiddler homepage).

During the test with my Client Application fiddler was started and
captured all traffic. Then i have clicked on the specific web session
(left panel) and on the right panel you should click on Sessions
Inspector (Tabs: Headers and TextView)

Hope i could help so far.

Greetz
Sebastian

Thanks Sebastian,

Yeah. I've done all that.

What I really need to get is the XML output that is being sent, so that
I can check that it's correct. But it doesn't look as though I can do
that. FWIW, in the Text View, I get:

This is a HTTPS CONNECT Tunnel. Secure traffic flows through this
connection.

Secure Protocol: Tls
Cipher: Rc4 128bits
Hash Algorithm: Md5 128bits
Key Exchange: RsaSign 1024bits

== Client Certificate ==========
None.

== Server Certificate ==========
[Subject]
CN=secure.heservices.slc.co.uk, OU=ICT, O=Student Loans Company Ltd,
L=Glasgow, S=Lanarkshire, C=GB

[Issuer]
OU=www.verisign.com/CPS Incorp.by Ref. LIABILITY LTD.(c)97 VeriSign,
OU=VeriSign International Server CA - Class 3, OU="VeriSign, Inc.",
O=VeriSign Trust Network

[Serial Number]
2CDBCC4713E7909EA0BBEE7B8FB44C2F

[Not Before]
04/06/2008 01:00:00

[Not After]
06/06/2010 00:59:59

[Thumbprint]
C9B6874E5863777DFE0874683351B305AA827329

That doesn't mean a lot to me, and isn't what I need. I really need to
see that message that is going up the wire.

Oh well!
Peter