Hi Martin,
Yes I send UsernameToken to client and password send (either plain text or
hash) I still get these error. I look at Hand-On Lab web service security
from Microsoft that show me how to use custom usernameTokenManager. But I
need to set up in web.config.
Is there any method that i can use custom usernameTokenManager or anyother
method to overwrite this authentication process at runtime rather than setup
in config file , so I can authenticate by myself rather than using default
one which is authenticating against domain\machines.
Thanks.
TV
> Hello tv,
>
> Are you sending UsernameToken from the client? If you send the password in plain text you need to create an account for this user in Windows. The
authentication when you use password in plain text is against the
domain\machine accounts.
> Regards,
>
[quoted text clipped - 3 lines]
> MCAD Charter Member
> MCSD.NET Early Achiever
Dilip Krishnan - 10 Dec 2004 01:48 GMT
Hello VT,
By default you need to send username of the format DOMAIN\user because
WSE supports windows auth by default. Otherwise you can send a username and
create a custom username token manager to retrieve the pwd from whatever
source (SQL, AD/AD etc) you wish, based on the username. Then you need to
configure wse to use this username manager. Something like the example below.
<configuration>
<microsoft.web.services2>
<security>
<securityTokenManager qname="wsse:UsernameToken" type="CustomSecurityNamespace.CustomSecurityClass,
AssemblyName"
xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"/>
</security>
</microsoft.web.services2>
</configuration>
You;re probably getting this error cos' yr username is not in the windows
format.
HTH
Regards,
Dilip Krishnan
MCAD, MCSD.net
dkrishnan at geniant dot com
> Hi Martin,
> Yes I send UsernameToken to client and password send (either plain
[quoted text clipped - 29 lines]
>> MCAD Charter Member
>> MCSD.NET Early Achiever