web service authentication?

[Walter Sobchak]

I have 2 computers (my working computer and one server).
My application is communicating to the server. I made a user account
with same user name and password like the account that is running the
program, and configured dcom permissions.
Anyway that works, but what I want is to transfer that application to a
web service. Now when I use integrated authentication in IIS I get
access denied.
How can I set the service so it authenticates to the remote server as a
currently logged in user?

Thanks for any sugestions.

 

[Walter Sobchak]

I have 2 computers (my working computer and one server).
My application is communicating to the server. I made a user account
with same user name and password like the account that is running the
program, and configured dcom permissions.
Anyway that works, but what I want is to transfer that application to a
web service. Now when I use integrated authentication in IIS I get
access denied.
How can I set the service so it authenticates to the remote server as a
currently logged in user?

Thanks for any sugestions.

I found out it only works in IE.

 

[Peter Bromberg [C# MVP]]

Generally speaking, it's best to handle webservice authentication at the
message level and not base it on specific OS. This is in keeping with the WS*
standards.
WCF Webservices provide the infrastructure to do this with .NET.
-- Peter
Site: http://www.eggheadcafe.com
UnBlog: http://petesbloggerama.blogspot.com
MetaFinder: http://www.blogmetafinder.com

 

[Nicholas Paldino [.NET/C# MVP]]

Walter,

Can you give a few more details about your app? What technology are you
using for the remote calls? How are you configuring the proxy that is
making the calls to the service? Your post was a little vague, at best, and
it's very difficult to tell exactly what the problem is from your post.

Also, you responded that it only works in IE, which makes sense for
sites authenticated against Windows credentials. If you want it to work in
another browser, then you are better off using some other form of
credentials over an HTTPS connection (because you don't want to transfer
credentials in clear text).