All, I want to implement a custom UsernameTokenManager because I need to store our user credentials in a SQL database. I understand how I do this but I have one question. I want to store a hashed version of the user's password along with a salt value. When I authenticate the user I will ...more >>

Fellas, In a bit of a bind here, would appreciate any help / pointers I can get. I am in the midst of writing up some demo utility to send a Soap Message to a listening TCP Client. I am not using the higher level abstractions such as a SoapClient. Instead I am *punishing myself* by using the...more >>

Hi, Are there any good examples of outsourcing authentication and authorization in a web service using WSE 2.0? Is it possible to outsource these while also using declaritive policy? Would this be done in a cutom TokenManager? I need to outsource to AccessManager which has it's own ldap. ...more >>

Hi, The WSE 2.0 Hands-On-Lab is really great and I have been through all of the examples. It's really a great learning tool! I have also been attending the interop-month webcasts and think that it is interesting that one of the things that is stressed is to not use a dataset since it isn...more >>

I created a sample WSE Service using the DIME image example in the WSE SDK. I am basically trying to send an image using DIME attachments. I am calling the web service from a Win Form control that I have embedded in an ASP.NET web form. For some reason, when I try to instantiate the WSE Servi...more >>

Hi everyone, I think the Hand On Lab is great. Everything looks fine after running through it. But now I have 2 problems that I cannot solve: 1) I tried to replace Server Private.pfx and Server Public.cer with my own cerificates generated by makecert.exe, but I keep getting the "bad key" excep...more >>

I have some special logic I would like to perform to make sure we accept a certain certificate in my webservice. The X509SecurityTokenManager.AuthenticateToken method has no return value so I was wondering what is the proper thing to do when the certificate is not accepted by the WebService? ...more >>

I have a SOAP Server (C#) implemented as a console application. This application is then hosted by a Windows Service (C++). The service starts the different applications including my SOAP server using function CreateProcess (Platform SDK). I ensure that the service and my server is running...more >>

A client and I worked for 2 days on a WSE issue where the URI specified in the policy was all lowercase. The final soap exception being dealt with before we got it running was that the current policy did not match the original policy. The client was making the call to the secured service w...more >>

Dear Experts: I am using the new Microsoft Web Services Enhancements (WSE) to send SOAP messages from a client to a web service. How can I get identifying information of the sender (aka transmitter, aka originator, aka requestor) of the web request? By comparison, for a completely differe...more >>

Hi, I am not able to run the code in lab A After. I would have thought that this would execute. I get an error ...SecurityFault: THe signature or decryption was invalid... Has anyone else seen this error? Perhaps I have something setup incorrectly? thanks in Advance!! Bill ...more >>

Hello, I need to connect to: A Web Service developed using WSE and implementing WS-Security with a UserName Token. From: A VB6.0 Application without the possibility to use the .NET FrameWork (I'm not allowed to install it on Production Environment). Because of this I can't ...more >>

I have written a simple Windows form that consumes a number of web services. I would like to see the raw XML of the requests and responses. I've installed WSE 2.0, and added the following lines in my application configuration file: <configuration> <configSections> <section name="micr...more >>

I would like to make use of WSE filters directly bypassing standard pipeline processing mechanizm. In other words I have a payload in a form of raw XML and would like to apply some filters' processig power onto it. I tried this: // 1.create SoapEnvelope SoapEnvelope se = new SoapEnvelope()...more >>

How can I set the Xml Qualified Name for a SoapException fault in an Orchestration? thanks, craig ...more >>

I am struggling with some web application X509 signing issues, but was finally able to get everything working by setting the web application impersonate value to "myuseraccount." Since the key we have to use for signing is installed under the "myuseraccount" Personal store and not exportable, I...more >>

Hi, I am using the ms reporting services webservice to supply reports to my winforms client. I would like to set up an intermediate server that takes requests from the winform client and routes them to the reporting services webservice. From the documentation it looks like ws-addressing wil...more >>

I have a problem running 2 webservices next to each other. The first web service runs the technology preview version of WSE2.0 The second web service runs the WSE2.0 sp1. Both WebServices authenticate SOAP-calls using a custom UsernameTokenManager Somehow after a while all SOAP-calls that...more >>

After I set up WSE2, I ran the sample of "Kerberos" in the folder QuickStart. I got an exception System.Security.SecurityException: The Kerberos credential handle could not be acquired. The AcquireCredentialsHandle call returned the following error code.... I use Win2k professinal system unde...more >>

When I use WSE2 to secure soap messages, I add "<trace enabled="true" input="inputTrace.config" output="outputTrace.config"/>" to the web.config file of Webservices. Thus the soap messages are put down in the two files of "inputTrace.config" and "outputTrace.config". Then I use XmlT...more >>

Hello, After Implementing WSE between my website and WebService uing secure conversation my system is 30 times slower. System works at very good speed without WSE 2.0 Security Implementation Any Ideas? Thank you SQL ...more >>

Hi guys, I am trying to request a CustomXMLSecurityToken from a web application. <code> SecurityToken token = new UsernameToken("xxx", "yyy", PasswordOption.SendPlainText ); SecurityTokenServiceClient client = new SecurityTokenServiceClient(new Uri("http://host/folder/CustomXMLTokenSe...more >>

I am using IDE generated proxy with WebServicesClientProtocol as a base class (which means using WSE and its pipeline). Before invoking web service I get Pipeline object from this proxy and clear all InputFilters collection. When I trace what is actually sent I still see Soap headers enjected i...more >>

Hi I have been using the UsernameSigningCode console sample supplied with WSE 2.0 SP2 and managed to get it working with ease. Based on the code from console sample, I created a similar windows forms client and got that working easily too. My problem is when I call web methods asynchronousl...more >>

The SoapHttpRouter has extension method to process the request and response envelopes via protected virtual Uri ProcessRequestMessage(SoapEnvelope message) and protected virtual void ProcessResponseMessage(SoapEnvelope message) However, it does not appear to have the same ho...more >>

you can easily grab the wsdl from the service. i have a code snippet here: http://www.leastprivilege.com/PermaLink.aspx?guid=c555fa0a-6af3-4b7e-8f31-c692903e2fd8 Dominick Baier - DevelopMentor www.leastprivilege.com nntp://news.microsoft.com/microsoft.public.dotnet.framework.webservi...more >>

I am pretty much a complete newbie to WSE, though I have worked quite a bit with web services under IIS. I'm trying to create a web service that returns a typed dataset. The server piece of this appears to be fine (it compiles and runs :-), but when I run WseWsdl2 against it, I get "SchemaVali...more >>

I have a situation in which I must intercept all SOAP and HTTP traffic, forward the requests to an existing legacy application and perform some additional processing logic. I extended the SoapHttpRouter and use a simple naming algorithm to determine the URI to forward to. This works very well ...more >>

Hi guys, I tried the example how to create my own XmlSecurityToken. I thinks it is not correct at all but I can compile it. I want to add the token to the soap context. <code> CustomXmlToken token = new CustomXmlToken(); SoapContext context = serviceProxy.RequestSoapContext; context.Secur...more >>

Hi, I have created a secure Web Service via WSE with the use of WS-Policy. The service have been test using a .Net Console application and everything works. However, the Web Service needs to be called from a VB6 application (running on Win2K/XP). I re-created the client console applicatio...more >>

Hi, I set the token.Principal and Thread.CurrentPrincipal to CustomPrincipal in my CustomUsernameTokenManager.AuthenticateToken method. When i try accessing the same in my WebMethod, i'm able to access the CustomPrincipal only through the token.Principal variable. When i try with Thread.Cur...more >>

I have a standard WSE 2.0 file attachment upload/download application on my localhost which works perfectly. However, when I install the application on my Live Webserver and run it, an Exception occurs on line 3 "Object reference not set to an instance of an object." This is referring to t...more >>

Today I tried to set the value of this attribute to a value for which my organisation has defined semantics only to find that in WSE2 it appears to be a Read Only property ! E.g. env.Context.Addressing.RelatesTo.RelationshipType = "frg:someValue"; Last year I had a conversation with Her...more >>

Hello, I have a Webmethod === [WebMethod] public void SaveDataset(DataSet ds) { return; } ==== I call this webmethod from a client, passing a DataSet with an ForeignKeyConstraint like this: === DataSet ds = new DataSet("NewDataSet"); DataTable table1 = new DataTable("mast...more >>

When you encrypt the SoapEnvelope using a UsernameToken, what key is being used for the encryption? How is the key and IV being calculated? I would think it must be something derived from username and password in the token or what as no prior session key is negotiated? tia EncryptedData e...more >>

I would like to use WSE 2.0 for signing and encrypting Web service messages using X.509 certificates. It appears that my only options when doing this are to tell my Web service to look for certificates in either the LocalMachine or CurrentUser stores that Windows provides. If I would like to i...more >>

It seems you can require a token (i.e. UsernameToken) via policy (xml file) or code with a manual enumeration of the tokens and checking roles. Would it not be easier to just use an Attribute of some sort at the top of the web service method(s) you want to require UsernameToken attached with an ...more >>

Hi! When I change TimeZone (emulating a user on the other side of the globe) my webservice returns following exception: Microsoft.Web.Services2.Security.SecurityFault Message: "Message Expired" InnerException.Message: "At least one timestamp has expired." Any idea how to make the web se...more >>

Can someone give me direction on where to get, purchase, procure a certificate (x.509) that will allow me to digitally sign a soap message? I have successfuly tested using the test certificate that came with the WSE 2.0 SP2. Now needing an authorized one. When I go to a CA (Verisign),...more >>

The Nonce's are different at client and at server (inside the derived UTM) as shown with: string n = Convert.ToBase64String(token.Nonce); Console.WriteLine("Nonce:"+n); What gives? How do you retrieve the same Nonce bytes that the client UT set inside a UTM? TIA -- William Stacey...more >>

Hello, I am doing some research into NONCE values and my google searches have caused me some confusion. Does WSE 2 cache and trace NONCE element values ? From Chris Keyser's blog here, it seems like it does. <quote from="ChrisKeyserBlog"> The good news is that now I did get a complete to...more >>

Sorry for this new thread but I can't answer in the thread from yesterday. I don't know why... I changed the webconfig. There is now: <code from web.config> <securityTokenManager type="MyNamespace.CustomUsernameTokenManager, MyNamespace" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oa...more >>

Hi, I get the following exception when my program is invoking a webservice function: ********************************************** System.Xml.XmlException: The root element is missing. at System.Xml.XmlTextReader.Read() at Microsoft.Web.Services.XmlSkipDTDReader.Read() at System.Xml....more >>

Hello I have a windows application (desktop) wich called Web Services. I must use WSE. WSE will be installed on the server side. Should be anything installed on the client side? Thanks, Ruslan ...more >>

Hi guys, I tried to follow the example for securing a webservice with a UsernameToken (http://msdn.microsoft.com/library/en-us/wse/html/cf2b92f2-2338-4af9-89c1-38fe0eab7730.asp). I have a class CustomUsernameTokenManager derived from UsernameTokenManager with a function AuthenticateToken(Usern...more >>

Hi everyone, Is there anyway that NTLM authentication can be used with WSE 2.0 (short of writing a custom token and so forth)? Unfortunately, we cannot use Kerberos as our client does not use it, and won't completely roll Kerberos out until end '06. Thanks, Brian ...more >>

All, I'm trying to test my web service. I can browse to the site and see the available methods, but when I attempt to Invoke one of them I get "Internal Server Error" returned to the browser. I am running WSE 2.0 Service Pack 2. Any help would be greatly appreciated. Thanks Mike ...more >>

In a wse tcp config using SoapClient and SoapService. Want to add UsernameToken at client and send to service. Service will use derived UsernameTokenManager to verify token. Can not seem to get this to work. All examples seem to lean toward a web.config and ASP config instead of TCP, so not ...more >>

Hi, I have a doctored VBS/ASP classic apllication whcih consumes a WSE proxy expossed through COM, correctly marshalled for interoperability. It uses inetinfo.exe.config in order for the IIS 5.0 to pull the WSE config information. This works correctly. In order test this a .Net WinForms te...more >>

All, We run a Java-based (Axis with WSS4J) webservice and we have both Java and ..NET (C#) clients. While encryption is no problem for all client-server combinations we have problems with signature validation from C# requests. The strange thing is that we have a MS-box with the C#-client wh...more >>