Combine windows authetication with WSE 3.0

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

YC - 15 Mar 2006 14:33 GMT

Hi,
I 'm trying to combine windows authentication with WSE 3.0.
I have a client web application and and WSE enabled web service.
I had enabled on both sites to be windows autenticated without annonymous
access.
I can set the proxy credentials to CredetialsCache.DefaultCredentials and
supplying the cuurent loged on windows user. I had combine policy on the with
certificates.
Is this the correct way to perform windows authetictaion? should I use a
username token with each call with teh proxy instead of setting the
credentials property?
Should I implement Kerberos?

Thanks

Yoav

Reply to this Message

Pablo Cibraro - 16 Mar 2006 15:45 GMT

Hi Yoav,

In your case, you are using the security mechanism provided by Http at
transport level.
Kerberos and Username are useful when you want to perform security at
message level.
I recommend you to take a look to the "Web Services security guide"
published by the Patterns & Practices team. That guide is awesome and it
will answer all your questions

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnpag2/html/WSSP.asp

Regards,
Pablo Cibraro
http://weblogs.asp.net/cibrax

> Hi,
> I 'm trying to combine windows authentication with WSE 3.0.
[quoted text clipped - 13 lines]
>
> Yoav

Reply to this Message

YC - 16 Mar 2006 16:03 GMT

Hi,
as usual , Pablo, you've been a great help.

Thanks.

Yoav

> Hi Yoav,
>
[quoted text clipped - 29 lines]
> >
> > Yoav

Reply to this Message

Combine windows authetication with WSE 3.0

Free Magazines