Groups | Blog | Home
all groups > iis security > october 2004 >

iis security : Loosing Windows Auth Credentials Over Multiple Web Services



Ciaran McAuliffe
10/28/2004 9:43:02 AM
Hey,
I am not to sure if this is the right group so please excuse me if it is
not. I have a bit of a tricky problem, here is a quick overview. I have a
website which connects to a webservice, this web service is a front for
access to the Reporting Services Web Service, the middle web service just
provides some simpler functions for creating reports on the fly.

The initial web site is set up to use windows auth and to impersonate. The
middle web service is set up to use windows auth but not to impersonate and
the RS web services is set up to use windows auth and to impersonate. The
initial web site captures the user correctly, but by the time it gets to the
RS web service the user has become "MachineName\ASPNET".

I have been trying to fix this for some time, but I cannot find a way to
successfully transfer the windows auth credentials across the three tiers.
Can anyone help?

Thanks.
Ken Schaefer
10/29/2004 6:58:45 PM
Kerberos and delegation?
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/tkerbdel.mspx

Otherwise, at each layer, in your code, you need to impersonate the calling
user.

Cheers
Ken

"Ciaran McAuliffe" <CiaranMcAuliffe@discussions.microsoft.com> wrote in
message news:57DB1DF2-7BE2-4745-8AB9-835D4115121A@microsoft.com...
[quoted text, click to view]

AddThis Social Bookmark Button