Home | Contact Us | FAQ | Search & Site Map | Link to Us
Sign In | Join | Other 45 Sites in Network
HomeAnnouncementsFree MagazinesWhite PapersSubmit Content
Discussion GroupsASP.NETWindows FormsLanguages.NET FrameworkVisual Studio.NET
Articles.NET FrameworkASP.NETToolsWindows Forms
.NET DirectoryOpen Source ProjectsUser GroupsWeb Resources
Related Topics
Visual Basic 6SQL ServerMS AccessOther DB ProductsMS Server ProductsMore Topics ...

.NET Forum / ASP.NET / Web Services / October 2005

Tip: Looking for answers? Try searching our database.

HELP with custom SecurityContexTokenService!!

Thread view: 
Enable EMail Alerts  Start New Thread
Thread rating: 
machinegon - 02 Oct 2005 17:08 GMT
Hello!
I am trying to use secure conversation with WSE 3,0 to authenticate
services.
Nevertheless this services require to use a UserId to filter only
important information for the user who executes the service.
For this I believe build a custom SecurityContexTokenService so that
before the SCT is issued, add an element in AnyElements Property with
the UserId of my database using the username of a UserNameToken.
I have been doing some tests with the QuickStarts and watching Hongmei
Ge webcast, but I have not idea how to coding a
SecurityContexTokenService because I can't found some sample.  There
are some samples in WSE 2,0 but they are not easy to adapt in WSE 3.0.
If somebody has investigated about the subject and can help me with
some sample or guide me.    

Thanks in advance!
Jon - 03 Oct 2005 00:52 GMT
I'm guessing you are having the same difficulties I had where you are
getting a warning message to use SecurityContectTokenService for your
current WSE 2.0 code that uses
RequestSoapContext.Current.Security.Tokens

I found just using
RequestSoapContext.Current.IdentityToken.Identity.Name
gives me access to the token.

Hope this helps you.

Jon

> Hello!
> I am trying to use secure conversation with WSE 3,0 to authenticate
[quoted text clipped - 12 lines]
>
> Thanks in advance!
machinegon - 03 Oct 2005 16:47 GMT
Thanks Jon

This help me a lot.

But, I still want to know how to add a GUID UserId to the
SecurityContextToken to use it for other operations.

Thanks

> I'm guessing you are having the same difficulties I had where you are
> getting a warning message to use SecurityContectTokenService for your
[quoted text clipped - 25 lines]
> >
> > Thanks in advance!
William Stacey [MVP] - 03 Oct 2005 17:32 GMT
You could probably add the guid to the password field of the UT inside the
SCT on the server side. As the password is not used in the UT of a SCT for
anything IIRC.  Another way would be to use a hashtable for lookup.  Add the
sctID as the key and guid UserID as the value when creating the SCT.  Then
you can always lookup a UserID given a sctID.

Signature

William Stacey [MVP]

> Thanks Jon
>
[quoted text clipped - 34 lines]
>> >
>> > Thanks in advance!

Free Magazines

Get these publications absolutely FREE for up to 12 months. There are no hidden fees and no obligation. Simply choose a title, complete the application form and submit it. Read more ...

Oracle MagazineNetwork ComputingComputer WorldBio-IT WorldeWeekInformation WeekInfosecurity
 
Sign In
Join
My Latest Posts
My Monitored Threads
My Blog
My Photo Gallery
My Profile
My Homepage

Start New Thread
Enable EMail Alerts
Rate this Thread



©2008 Advenet LLC   Privacy Policy - Terms of Use
This website includes both content owned or controlled by Advenet as well as content owned or controlled by third parties.