 |
 | Home | Contact Us | FAQ | Search & Site Map | Link to Us |
 | Sign In | Join | Other 45 Sites in Network |
.NET Forum / ASP.NET / Web Services / June 2007Kerberos token issue
Hi: i am using a Kerberos ticket for authentication. i run my client application at one machine which is in the same domain as my web services machine. When the client code gets to calling the web service, it fails with the following exception stacktrace: An invalid security token was provided. I have grant the aspnet account the system permission om my machine. The client application run well at my machine when i put web service and web client on the same machine. So should i do some configuration work on client machine when i release client application to others machine? Thanks Hi Napo, What kind of security token are you using to authenticate? Martin Hi Martin: I using Kerberos token. OS: Window2000 Server Thanks > Hi Napo, > > What kind of security token are you using to authenticate? > > Martin I had the same problem and the only way I made it work is with a Domain Account with a Custom Principal Name using SetSPN.exe utility. I reported this issue (does not work WSE 3.0 + XP-SP2 with ASPNET account) to Microsoft-PSS in December 2005 and currently they have no reached any solution about it (how to make it work with ASPNET account). May be WSE 3.0 documentation is wrong. Currently, they passed this issue to WSE 3.0 product group. BTW, with Windows Server 2003 everything works great by default (using Network Services account for IIS process pool). So, to sum up, yes, currently, over Windows XP-SP2, WSE 3.0-Kerberos does not work with ASPNET account. The only way is using a Domain account with a custom pricipal name (using Setspn.exe utility in a DC).  SignatureCESAR DE LA TORRE Software Architect [Microsoft MVP - XML Web Services] [MCSE] [MCT] Renacimiento [Microsoft GOLD Certified Partner] > Hi Martin: > I using Kerberos token. [quoted text clipped - 6 lines] > > > > Martin Hi, I'm trying to get a Kerberos token from a windows 2003 server using C#. Can you guys share your code? Regards, Shankar > I had the same problem and the only way I made it work is with a Domain > Account with a Custom Principal Name using SetSPN.exe utility. I reported [quoted text clipped - 21 lines] > > > > > > Martin Free MagazinesGet these publications absolutely FREE for up to 12 months. There are no hidden fees and no obligation. Simply choose a title, complete the application form and submit it. Read more ...
|
Reply to this Message
|
 Sign In
 Join
 My Latest Posts My Monitored Threads My Blog My Photo Gallery My Profile My Homepage Start New Thread Enable EMail Alerts Rate this Thread
|
©2008 Advenet LLC Privacy Policy - Terms of Use
This website includes both content owned or controlled by Advenet as well as content owned or controlled by third parties.