authentication using custom UsernameTokenManager class.....

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

Ollie - 15 Nov 2004 15:39 GMT

I have been able to authenticate a user account against Active Directory
using the UsernameTokenManager class,
what I would like to do is determine if the account has a certain role and
check this against the web method that is being called.....

I guess what I'm trying to do is authentication then authorisation for a
particular web method, does WSE 2.0 offer anything for authroisation against
a particular security (AD) role? If not does anyone have any good
suggestions?

What I don't want to do is to use the UsernameTokenManager to do implicit
authentication checks and then have to explict role determination in each
web method I want to be able to do this implicitly some how...

Hope that makes sense....

Ollie Riches

Reply to this Message

Ollie - 15 Nov 2004 15:58 GMT

i found this on MSDN

http://msdn.microsoft.com/webservices/default.aspx?pull=/library/en-us/dnwse/htm
l/wssecdrill.asp#ws-securitydrill_topic3

and it gives an example on interigating the windows principal object after
authorisation has been completed but this has to be done from inside the web
method not prior to the actual web method being called. Can't WSE do
authorisation in a similar way to it does authentication?

Ollie

> I have been able to authenticate a user account against Active Directory
> using the UsernameTokenManager class,
[quoted text clipped - 13 lines]
>
> Ollie Riches

Reply to this Message

Martin Kulov - 15 Nov 2004 20:55 GMT

Hello Ollie,

You can apply a policy to your web service in which you can specify the group that the user must belong in order to access the service.

Regards,
Martin Kulov
www.codeattest.com

Reply to this Message

authentication using custom UsernameTokenManager class.....

Free Magazines