I am new to WSE... I have read over examples from Microsoft and others, but
I am not able to get WSE to work. My client has an existing database of
users and password that would like a new applicaiton. I can either use
Remoting or Webservices with it. Regular web services work great and I could
use them all day long but using them with WSE I get stuck. I am trying to
take my existing webservice and secure it using the features of WSE such as
usernametokes, message signing, and role based security (there is a table in
the clients database that contains permissions/roles) Does anyone have an
example of how I can do this or any articles that explain it? In theroy it
sounds pretty easy and I saw an example of how to do it months ago, but at
that time I was not using it at all. Also if possible can WSE do 2 way
message signing such as from server -> client and client -> server? I would
use windows authentication with this, but my client insists that we use the
existing database of user accounts.
[MSFT] - 26 Apr 2005 03:16 GMT
Hello,
I don't have a very proper sample on hand. Anyway, I suggest you may begin
with the quick start sample in WSE 2.0, for example, UsernameSigning. You
can first read the file readme.htm in the sample folder and run the
VBscript file to set up virtual folder for the samples, and then open the
samples in VS.NET to see if they can run on your server. If you have
further questions, please feel free to post here.
Luke
Dilip Krishnan - 26 Apr 2005 18:59 GMT
Pretty simple to do this.. Create a subclass of the
UsernameTokenManager.. override the Authenticate method and within that
method try and compare the username and pwd with the one in the
database. If they match return the client supplied pwd as the return.
Else return a predefined pwd that does not match the client supplied pwd.
Another step you need to do is to configure the username token
manager in the web.config.
An example of doing this can be found in [0]
[0] - http://www.devx.com/security/Article/18207/0/page/2
> I am new to WSE... I have read over examples from Microsoft and others, but
> I am not able to get WSE to work. My client has an existing database of
[quoted text clipped - 10 lines]
> use windows authentication with this, but my client insists that we use the
> existing database of user accounts.

Signature
HTH
Regards,
Dilip Krishnan
MCAD, MCSD.net
dilip.krishnan AT apdiya DOT com