WSE 3.0 UsernameToken exception

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

Nicolas Mousson - 18 Sep 2006 17:23 GMT

I'm trying to secure my WS with the usernameForCertificateSecurity turnkey
assertion. I configured the client and the server according to the Web
Service Security Patterns and practices.

When I test my application, I always have the same error (seen in the events
logs) :
System.Web.Services.Protocols.SoapHeaderException:
Microsoft.Web.Services3.Security.SecurityFault: The security token could not
be authenticated or authorized
at
Microsoft.Web.Services3.Security.Tokens.UsernameTokenManager.OnLogonUserFailed(UsernameToken token)
at
Microsoft.Web.Services3.Security.Tokens.UsernameTokenManager.AuthenticateToken(UsernameToken token)
at
Microsoft.Web.Services3.Security.Tokens.UsernameTokenManager.VerifyToken(SecurityToken token)
...

On the server hand, I have a CustomUsernameTokenManager to validate
credentials against a SQL Server database. I have verified that this custom
UsernameTokenManager is instanciated at run-time : it's OK. But the overriden
method "AuthenticateToken" is never called... and the error says "The
security token could not be authenticated or authorized"...

Any idea ?

Thanks

Reply to this Message

Pablo Cibraro [MVP] - 19 Sep 2006 15:12 GMT

Hi,

At first glance, it seems like you did not configure the custom
UsernameToken manager in the configuration file.
Do you have something like this in your configuration file ?

<microsoft.web.services3>
<security>
<securityTokenManager>
<add type="CustomUsernameTokenManager, MyAssembly"
namespace="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"
localName="UsernameToken" />
</securityTokenManager>
</security>
</microsoft.web.services3>

Regards,
Pablo Cibraro
http://weblogs.asp.net/cibrax

> I'm trying to secure my WS with the usernameForCertificateSecurity turnkey
> assertion. I configured the client and the server according to the Web
[quoted text clipped - 29 lines]
>
> Thanks

Reply to this Message

Nicolas Mousson - 19 Sep 2006 17:37 GMT

Hi Pablo,

Yes, I have had this configuration in my configuration file.
Infact, I have re-generated the different configuration files according to
the WS 3.0 documentation. And now it works ! Maybe I forgot something the
first time...

Thanks,
Nicolas

> Hi,
>
[quoted text clipped - 49 lines]
> >
> > Thanks

Reply to this Message

WSE 3.0 UsernameToken exception

Free Magazines