all groups > dotnet web services enhancements > january 2005 >
You're in the

dotnet web services enhancements

group:

WSE 2.0 & NTLM Authentication


WSE 2.0 & NTLM Authentication axion
1/11/2005 7:31:36 PM
dotnet web services enhancements:
Hi everyone,

Is there anyway that NTLM authentication can be used with WSE 2.0 (short of
writing a custom token and so forth)?
Unfortunately, we cannot use Kerberos as our client does not use it, and
won't completely roll Kerberos out until end '06.


Thanks,
Brian

Re: WSE 2.0 & NTLM Authentication Martin Kulov
1/12/2005 1:34:44 AM
Hi Axion,

use UsernameToken with PasswordOption.SendPlainText. WSE will automatically
try to authenticate the user and will try to authorize him depending on the
user group you have chosen in the policy file.

Regards,

--
Martin Kulov
http://www.codeattest.com

MCAD Charter Member
MCSD.NET Early Achiever
MCSD



[quoted text, click to view]
Re: WSE 2.0 & NTLM Authentication axion
1/12/2005 8:42:43 AM
Thanks Martin! :)

[quoted text, click to view]

Re: WSE 2.0 & NTLM Authentication William Stacey [MVP]
1/12/2005 10:55:01 AM
This also means the password is clear over the wire - no?

--
William Stacey, MVP
http://mvp.support.microsoft.com

[quoted text, click to view]
Re: WSE 2.0 & NTLM Authentication Martin Kulov
1/13/2005 12:47:10 AM
That's right.
But you can use SecureConversation to encrypt the entire UsernameToken. You
only need a certificate installed on the server, and the client must know
his public key part.

Regards,

--
Martin Kulov
http://www.codeattest.com

MCAD Charter Member
MCSD.NET Early Achiever
MCSD



[quoted text, click to view]
AddThis Social Bookmark Button