all groups > sql server connect > october 2007 >
You're in the

sql server connect

group:

Help needed with KERBROS and Native XML Web Services


Help needed with KERBROS and Native XML Web Services Al
10/29/2007 10:36:01 AM
sql server connect: Trying to get Native XML Web Services setup in our test enviroment, and I've
hit a problem.
When the HTTP EndPoint is set to use Integrated Authentication, I can browse
to the endpoint (using IE7 from a seperate PC) and get the WSDL back, but
when I switch the EndPoint to use KERBEROS authentication, I get nothing
returned, and only see a blank page.

All machines are in the same Active Directory domain. Using SQL Server 2005
SP2 on Win2003 Std SP1 on the server, and XP SP2 and IE7 on the PC.
The SQL Server is running under a local domain account, and this account has
been registered for both the MSSQLSvc and HTTP services, as below (the names
have been changed to protect the guilty).

MSSQLSvc/Server1.test.local:1433
MSSQLSvc/Server1:1433
HTTP/Server1.test.local
HTTP/Server1

The EndPoint name has been reserved using sp_reserve_http_namespace, and is
owned by SA. I'll be changing the auditting to log all authentication event.

So, anyone has any ideas or guidance????

Thanks in advance,

RE: Help needed with KERBROS and Native XML Web Services John Bell
10/30/2007 1:47:00 AM
Hi Al

Have you tried AUTHENTICATION=KERBEROS? It sounds like you have run
SetSPN.exe (http://msdn2.microsoft.com/en-us/library/ms178119.aspx)

John

[quoted text, click to view]
RE: Help needed with KERBROS and Native XML Web Services Al
10/30/2007 4:33:00 AM
When I do the
ALTER ENDPOINT <endpoint> AS HTTP (AUTHENTICATION=(KERBEROS)),
I don't get the WSDL. But I have discovered that the endpoint still accepts
and processes calls to the web services on the EndPoint.

When I do
ALTER ENDPOINT <endpoint> AS HTTP (AUTHENTICATION=(INTEGRATED)), I do get
the WSDL.

Could it be that using KERBEROS authentication disables the WSDL discovery?

[quoted text, click to view]
RE: Help needed with KERBROS and Native XML Web Services John Bell
10/30/2007 8:05:01 AM
Hi

I am not sure if this is the case and can't find any documentation to say
so. Have you tried AUTHENTICATION=KERBEROS,NTLM and AUTHENTICATION=NTLM,
KERBEROS to see if there are any differences?

John

[quoted text, click to view]
AddThis Social Bookmark Button