I need help with using Integrated Security to an Oracle DB from a Web Service

From: TMarkham1 (TMarkham1@aol.com)
Date: 08/25/02 

From: "TMarkham1" <TMarkham1@aol.com>
Date: Sat, 24 Aug 2002 18:17:41 -0500

OK, here's the deal. I would like to use Integrated Security (Windows
Security) when connecting to an Oracle database from an XML Web Service. Any
suggestions on how to do this would be greatly appreciated!

My current setup includes 3 computers. All computers are in the same Windows
Domain.

"Machine A" is our Oracle Database server. It is running Windows 2000 Server
and Oracle 8i.

"Machine B" is a PC running Windows 2000 Professional with IIS running on
it. It also has the Microsoft Oracle Managed Data Provider and the Oracle 8i
client installed and it hosts the XML Web Service.

"Machine C" is a PC running Windows 2000 Professional. It is running a .Net
Windows Application that references an XML Web Service on "Machine B".

 I was successful in connecting to the Oracle database (using Integrated
Security) from a small Windows Application I built and ran from "Machine B"
(not using the Web Service), so I know the Oracle Database is setup
correctly to perform this function. I setup "Machine B" to use Windows
Authentication, and it validates access to the Web Service methods prefectly
(I can actually return information from a method that doesn't access the
Oracle Database).

The problem I am having occurs when the XML Web Service accesses the Oracle
Database after a domain user authenticates with the XML Web Service. The Web
Service is attempting to access the Oracle database using the "ASPNET" user
account, and therefore it fails.

How do I get the Web Service to pass the credentials of the authenticated
domain user to the Oracle database instead of using "ASPNET"? Is this even
possible? Or, am I opening up a can of worms with this one?

Relevant Pages

  • I need help with using Integrated Security to an Oracle DB from a Web Service
    ... Security (Windows ... >"Machine A" is our Oracle Database server. ... >client installed and it hosts the XML Web Service. ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: ADFS Development Issues
    ... One thing to keep in mind is that if a website is protected by ADFS V1, ... site to be automatically authenticated by our windows application so ... like a web service proxy. ... generated on the server. ...
    (microsoft.public.windows.server.active_directory)
  • Re: ADFS Development Issues
    ... site to be automatically authenticated by our windows application so ... based on redirects and possibly uses forms-based authentication to collect ... web service proxies don't handle this type of thing ... the server based on how it needs to work. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Dynamically Change URL of web service
    ... Microsoft MVP - Windows Client ... > client apps will use the exact same web service, ... What this does is put an entry in the config file, ... >>> How can I dynamically change this when the client app loads. ...
    (microsoft.public.dotnet.framework.windowsforms)
  • RE: Web Service Security
    ... You could encrypt or hash your ... As far as web service authentication/authorisation is concerned you would be ... WSE does a pretty good job of abstracting away most of the ... a windows domain account). ...
    (microsoft.public.dotnet.framework.webservices)