Home | Contact Us | FAQ | Search & Site Map | Link to Us
Sign In | Join | Other 45 Sites in Network
HomeAnnouncementsFree MagazinesWhite PapersSubmit Content
Discussion GroupsASP.NETWindows FormsLanguages.NET FrameworkVisual Studio.NET
Articles.NET FrameworkASP.NETToolsWindows Forms
.NET DirectoryOpen Source ProjectsUser GroupsWeb Resources
Related Topics
Visual Basic 6SQL ServerMS AccessOther DB ProductsMS Server ProductsMore Topics ...

.NET Forum / ASP.NET / Web Services / June 2004

Tip: Looking for answers? Try searching our database.

Error using WSE2.0 with Custom UsernameTokenManager

Thread view: 
Enable EMail Alerts  Start New Thread
Thread rating: 
Jim - 24 Jun 2004 00:17 GMT
I use WSE2.0 with a custom UsernameTokenManager (inherited from the default) for webservice authentication. The username and password are retrieved from a database in my overrided AuthenticateToken function as shown in Handon Lab A (PasswordOption is SendHashed). My project is running perfect on my local machine where I referenced my webservice on localhost. But the error is occurred whenever I move my webservice to my remote web server which is also running the WSE2.0. The error is "
Exception Type: System.Web.Services.Protocols.SoapHeaderException

Code: http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xs
d:InvalidSecurity


Detail: NULL

Message: An error was discovered processing the <Security> header

TargetSite: System.Object[] ReadResponse(System.Web.Services.Protocols.SoapClientMessage, System.Net.WebResponse, System.IO.Stream, Boolean)

HelpLink: NULL

Source: System.Web.Services"

Somebody know what is the problem of that? and How to figure it?

Thanks!
ByronKim - 24 Jun 2004 06:05 GMT
Set detailed error at your server side configuration

<microsoft.web.services2>
   <diagnostics>
     <detailedErrors enabled="true" />
   </diagnostics>
 </microsoft.web.services2>

and try to get full detailed error would be easier to troubleshoot.

thanks
Byron KIM

 I use WSE2.0 with a custom UsernameTokenManager (inherited from the default) for webservice authentication. The username and password are retrieved from a database in my overrided AuthenticateToken function as shown in Handon Lab A (PasswordOption is SendHashed). My project is running perfect on my local machine where I referenced my webservice on localhost. But the error is occurred whenever I move my webservice to my remote web server which is also running the WSE2.0. The error is "
 Exception Type: System.Web.Services.Protocols.SoapHeaderException

 Code: http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xs
d:InvalidSecurity


 Detail: NULL

 Message: An error was discovered processing the <Security> header

 TargetSite: System.Object[] ReadResponse(System.Web.Services.Protocols.SoapClientMessage, System.Net.WebResponse, System.IO.Stream, Boolean)

 HelpLink: NULL

 Source: System.Web.Services"

 Somebody know what is the problem of that? and How to figure it?

 Thanks!
Jim - 25 Jun 2004 04:49 GMT
Thanks Byron!  When I set <detailedErrors enabled="true" />, I get more
useful error message and it turns out a bug of this WSE 2.0 which can not be
used when the server machine time is faster than my client machine. It cause
a "System.Exception: Creation time in the timestamp can not be in the
future".

So I have to adjust my server machine time to be a little be late, say 5
minutes than normal. Is there any other way to figure out this problem?
Thanks!

Jim, Y

Set detailed error at your server side configuration

<microsoft.web.services2>
   <diagnostics>
     <detailedErrors enabled="true" />
   </diagnostics>
 </microsoft.web.services2>

and try to get full detailed error would be easier to troubleshoot.

thanks
Byron KIM

I use WSE2.0 with a custom UsernameTokenManager (inherited from the default)
for webservice authentication. The username and password are retrieved from
a database in my overrided AuthenticateToken function as shown in Handon Lab
A (PasswordOption is SendHashed). My project is running perfect on my local
machine where I referenced my webservice on localhost. But the error is
occurred whenever I move my webservice to my remote web server which is also
running the WSE2.0. The error is "
Exception Type: System.Web.Services.Protocols.SoapHeaderException
Code:
http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xs
d:InvalidSecurity

Detail: NULL
Message: An error was discovered processing the <Security> header
TargetSite: System.Object[]
ReadResponse(System.Web.Services.Protocols.SoapClientMessage,
System.Net.WebResponse, System.IO.Stream, Boolean)
HelpLink: NULL
Source: System.Web.Services"
Somebody know what is the problem of that? and How to figure it?

Thanks!
Byron Kim - 25 Jun 2004 18:56 GMT
You can increase the value of timeToleranceInSeconds

/configuration/microsoft.web.services2/security/timeToleranceInSeconds

Please add this in both client config and server config
thanks

bckim

> Thanks Byron!  When I set <detailedErrors enabled="true" />, I get more
> useful error message and it turns out a bug of this WSE 2.0 which can not be
[quoted text clipped - 30 lines]
> Exception Type: System.Web.Services.Protocols.SoapHeaderException
> Code:

http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xs
d:InvalidSecurity

> Detail: NULL
> Message: An error was discovered processing the <Security> header
[quoted text clipped - 6 lines]
>
> Thanks!

Rate this thread:







Free Magazines

Get these publications absolutely FREE for up to 12 months. There are no hidden fees and no obligation. Simply choose a title, complete the application form and submit it. Read more ...

Oracle MagazineNetwork ComputingComputer WorldBio-IT WorldeWeekInformation WeekInfosecurity
 
Sign In
Join
My Latest Posts
My Monitored Threads
My Blog
My Photo Gallery
My Profile
My Homepage

Start New Thread
Enable EMail Alerts
Rate this Thread



©2008 Advenet LLC   Privacy Policy - Terms of Use
This website includes both content owned or controlled by Advenet as well as content owned or controlled by third parties.