all groups > dotnet web services enhancements > december 2004 >
You're in the

dotnet web services enhancements

group:

AuthenticateToken and AD


Re: AuthenticateToken and AD Martin Kulov
12/4/2004 2:36:57 AM
dotnet web services enhancements:
Hi Rob,

Just send the UsernameToken with password in plain text. On the server side use policy to define the Windows group, that should have access to your web service, in format DOMAIN\Group.

HTH,

Martin Kulov
www.codeattest.com

AuthenticateToken and AD Rob Thomson
12/4/2004 8:03:49 AM
Environment(W2k, WS2, .Net 1.1,c#)
Program(SmatClient, WebServices)

Hi
I am overriding the AuthenticateToken method to authenticate a user. All the
examples of this I have seen check the password against xml, databases etc.
I want to authenticate against AD. I have tried the Winapi LogonUser, but
this gives me access denied, due to security settings in W2k. I am passing
in a UserNameToken on the client side to the Security.Tokens.Add. Maybe Im
missing something, but if you could point in the right direction


Many thanks

Re: AuthenticateToken and AD nealboy
12/4/2004 7:39:23 PM
Hi Rob
If you want Web Services authenticate against AD you don't need override
the AuthenticateToken method in server side.
You should just send your password in plaintext and WSE will do
everything OK.
"Rob Thomson" <new@rjtt64.plus.com> дÈëÓʼþ
news:%23SpBFgd2EHA.2016@TK2MSFTNGP15.phx.gbl...
[quoted text, click to view]

Re: AuthenticateToken and AD Softwaremaker
12/4/2004 8:43:04 PM
In case, you want to encrypt the username token so that your password cannot
be viewed, try this:

http://www.softwaremaker.net/blog/PermaLink,guid,43d85031-3e0b-48a7-bdd7-1f49932db40a.aspx

hth.
--
Thank you.

Regards,
Softwaremaker

==================================


[quoted text, click to view]
side use policy to define the Windows group, that should have access to your
web service, in format DOMAIN\Group.
[quoted text, click to view]

Re: AuthenticateToken and AD Yedu
3/28/2005 1:29:04 PM
nealboy,
I am doing a web service authentication by passing the UserNameToken in the
soap header, but in my Web Method the Thread.CurrentPrincipal is empty. The
authentication is against the AD.
My thought is that it is authenticating but the Thread.CurrentPrincipal is
empty, I know this fact because if i pass Invalid UserName, it throws an
exception.

Please Help.

Thanks
Yedu.

[quoted text, click to view]
AddThis Social Bookmark Button