"Jubin" wrote:

> Hi
> I am using WSE 3.0 and .NET Framework 2.0/VS.NET 2005;
> When I use the Kerberos Token; the following exception is thrown.
>
> "An invalid security token was provided...... unknown user name or bad
> password"
>
> Following are the code/configuration details. Can some one please point out
> what I am doing wrong.
>
> Client App.config
> ------------------
>
>
> <?xml version="1.0" encoding="utf-8"?>
> <configuration>
> <configSections>
> <section name="microsoft.web.services3"
> type="Microsoft.Web.Services3.Configuration.WebServicesConfiguration,
> Microsoft.Web.Services3, Version=3.0.0.0, Culture=neutral,
> PublicKeyToken=31bf3856ad364e35" />
> <sectionGroup name="applicationSettings"
> type="System.Configuration.ApplicationSettingsGroup, System, Version=2.0.0.0,
> Culture=neutral, PublicKeyToken=b77a5c561934e089" >
> <section name="KerberosClient.Properties.Settings"
> type="System.Configuration.ClientSettingsSection, System, Version=2.0.0.0,
> Culture=neutral, PublicKeyToken=b77a5c561934e089" requirePermission="false" />
> </sectionGroup>
> </configSections>
> <microsoft.web.services3>
> <diagnostics>
> <trace enabled="true" input="InputTrace.webinfo"
> output="OutputTrace.webinfo" />
> </diagnostics>
> <policy fileName="wse3policyCache.config" />
> </microsoft.web.services3>
> <applicationSettings>
> <KerberosClient.Properties.Settings>
> <setting name="KerberosClient_localhost_KerberosTokenWebService"
> serializeAs="String">
>
> <value>http://localhost:1226/KerberosService/KerberosTokenWebService.asmx</value>
> </setting>
> </KerberosClient.Properties.Settings>
> </applicationSettings>
> </configuration>
>
>
>
>
>
>
>
> Client wse3policyCache.config
> ------------------------------
>
>
> <policies xmlns="http://schemas.microsoft.com/wse/2005/06/policy">
> <extensions>
> <extension name="kerberosSecurity"
> type="Microsoft.Web.Services3.Design.KerberosAssertion,
> Microsoft.Web.Services3, Version=3.0.0.0, Culture=neutral,
> PublicKeyToken=31bf3856ad364e35" />
> <extension name="requireActionHeader"
> type="Microsoft.Web.Services3.Design.RequireActionHeaderAssertion,
> Microsoft.Web.Services3, Version=3.0.0.0, Culture=neutral,
> PublicKeyToken=31bf3856ad364e35" />
> </extensions>
> <policy name="ClientPolicy">
> <kerberosSecurity establishSecurityContext="false"
> renewExpiredSecurityContext="true" requireSignatureConfirmation="false"
> messageProtectionOrder="SignBeforeEncrypt" requireDerivedKeys="true"
> ttlInSeconds="300">
>
> <protection>
> <request signatureOptions="IncludeAddressing, IncludeTimestamp,
> IncludeSoapBody" encryptBody="true" />
> <response signatureOptions="IncludeAddressing, IncludeTimestamp,
> IncludeSoapBody" encryptBody="true" />
> <fault signatureOptions="IncludeAddressing, IncludeTimestamp,
> IncludeSoapBody" encryptBody="false" />
> </protection>
> </kerberosSecurity>
> <requireActionHeader />
> </policy>
> </policies>
>
>
>
> Client Code
> ------
>
> private void Form1_Load(object sender, EventArgs e)
> {
> try
> {
> string targetPrincipalName = "host/" +
> System.Net.Dns.GetHostName();
> //string targetPrincipalName =
> "host/machine@domain.co.in";// this also doesn't work
>
> KerberosToken kerberosToken = new
> KerberosToken(targetPrincipalName);
>
>
>
> KerberosTokenWebServiceWse kerberosTokenWebServiceWse = new
> KerberosTokenWebServiceWse();
> kerberosTokenWebServiceWse.SetPolicy("ClientPolicy");
>
>
> kerberosTokenWebServiceWse.SetClientCredential<KerberosToken>(kerberosToken);
>
>
> kerberosTokenWebServiceWse.RequestSoapContext.Security.Tokens.Add(kerberosToken);
>
> kerberosTokenWebServiceWse.RequestSoapContext.Security.Elements.Add(new
> MessageSignature(kerberosToken));
>
>
> MessageBox.Show(kerberosTokenWebServiceWse.HelloWorld().ToString());
> }
> catch (ResponseProcessingException ex)
> {
> // throws : An invalid security token was provided......
> unknown user name or bad password exception
> MessageBox.Show(ex.Response.InnerText);
> }
> catch (Exception ex)
> {
> MessageBox.Show(ex.Message + "\r\n\r\n\r\n Inner Exception :
> \r\n" + ex.InnerException);
> }
> }
>
>
>
>
>
>
>
> Service wse3policyCache.config
> -------------------------------
>
> <policies xmlns="http://schemas.microsoft.com/wse/2005/06/policy">
> <extensions>
> <extension name="kerberosSecurity"
> type="Microsoft.Web.Services3.Design.KerberosAssertion,
> Microsoft.Web.Services3, Version=3.0.0.0, Culture=neutral,
> PublicKeyToken=31bf3856ad364e35" />
> <extension name="requireActionHeader"
> type="Microsoft.Web.Services3.Design.RequireActionHeaderAssertion,
> Microsoft.Web.Services3, Version=3.0.0.0, Culture=neutral,
> PublicKeyToken=31bf3856ad364e35" />
> </extensions>
> <policy name="ServicePolicy">
> <kerberosSecurity establishSecurityContext="false"
> renewExpiredSecurityContext="true" requireSignatureConfirmation="false"
> messageProtectionOrder="SignBeforeEncrypt" requireDerivedKeys="true"
> ttlInSeconds="300">
> <protection>
> <request signatureOptions="IncludeAddressing, IncludeTimestamp,
> IncludeSoapBody" encryptBody="true" />
> <response signatureOptions="IncludeAddressing, IncludeTimestamp,
> IncludeSoapBody" encryptBody="true" />
> <fault signatureOptions="IncludeAddressing, IncludeTimestamp,
> IncludeSoapBody" encryptBody="false" />
> </protection>
> </kerberosSecurity>
> <requireActionHeader />
> </policy>
> </policies>
>