Home | Contact Us | FAQ | Search & Site Map | Link to Us
Sign In | Join | Other 45 Sites in Network
HomeAnnouncementsFree MagazinesWhite PapersSubmit Content
Discussion GroupsASP.NETWindows FormsLanguages.NET FrameworkVisual Studio.NET
Articles.NET FrameworkASP.NETToolsWindows Forms
.NET DirectoryOpen Source ProjectsUser GroupsWeb Resources
Related Topics
Visual Basic 6SQL ServerMS AccessOther DB ProductsMS Server ProductsMore Topics ...

.NET Forum / ASP.NET / Web Services / January 2006

Tip: Looking for answers? Try searching our database.

Wse 3.0 authentication against SQL Server or Active Directory

Thread view: 
Enable EMail Alerts  Start New Thread
Thread rating: 
Mo - 26 Jan 2006 00:15 GMT
Hi,

How would I authenticate a SOAP message going to web service against SQL
Server / or Active Directory (using WSE 3.0)

Is this the correct way I am thinking:
a) i.e. Inherit a class from SecurityPolicyAssertion say MyCustomSecurity.
b) Create Custom filters class inherting from
SecureConversationServiceReceiveSecurityFilter and in this filters
ValidateMessageSecurity(....) method invoke code for authenticating againt
SQL Server / or Active Directory.
c) Call the filter in CreateServiceInputfilter override above
d) Declare the extension  MyCustomSecurity in config file.
e) Also this would also require using SetCredential on the client proxy.
Correct?

The above would authenticate each message.

Also  how to use a SecurityContextToken ? What are the step for doing that.
I did not find any sample code for using that.

Will appreciate your help on this.

Thanks,
Mo
Pablo Cibraro - 26 Jan 2006 14:06 GMT
Hi Mo,

You need a custom UsernameTokenManager. There are good examples about this
topic in the security guide for Web services (Microsoft Pattern &
Practices).

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnpag2/html/wssp.asp

Regards,
Pablo Cibraro
http://weblogs.asp.net/cibrax
http://www.lagash.com

> Hi,
>
[quoted text clipped - 22 lines]
> Thanks,
> Mo

Free Magazines

Get these publications absolutely FREE for up to 12 months. There are no hidden fees and no obligation. Simply choose a title, complete the application form and submit it. Read more ...

Oracle MagazineNetwork ComputingComputer WorldBio-IT WorldeWeekInformation WeekInfosecurity
 
Sign In
Join
My Latest Posts
My Monitored Threads
My Blog
My Photo Gallery
My Profile
My Homepage

Start New Thread
Enable EMail Alerts
Rate this Thread



©2008 Advenet LLC   Privacy Policy - Terms of Use
This website includes both content owned or controlled by Advenet as well as content owned or controlled by third parties.