Double number of calls when Basic Authentication?

From: Joe H (jharri_at_hotmail.com)
Date: 05/26/04 

Date: Wed, 26 May 2004 07:17:16 -0500

I have a web service that is set to use Basic Authentication (for users
outside the firewall). They are coming in over SSL. It uses Integrated
Authentication for internal users.

For the users who are requesting service with Basic Authentication, there is
a VB.Net client application which is using the NetworkCredential to pass the
authentication information to the web service.

However, the sequence of events that seems to always happen is:

1. client sends request
2. service responds with 401
3. client sends request again, this time including the authentication
information (user, password, domain)

So, in my IIS logs, there is a duplicate entry for each call to the web
service. The first log entry has a user value of " - " (this entry also has
the 401 code returned), and the second log entry has the correct user name.
I am certain that this is affecting overall performance of the web service.

What do I need to do in order to eliminate this "round-trip" from happening?

Thanks,
Joe

Relevant Pages

  • WSE 2.0 error: Requested registry access is not allowed
    ... authentication. ... either for web service and client. ...
    (microsoft.public.dotnet.framework.webservices.enhancements)
  • Security, WebServices
    ... We are implementing authentication and authorization in an n-tier ... created a security web service that wraps azman with a few methods such ... the client and the middle tier. ... Client sets credentials on and invokes BusinessLogicService ...
    (microsoft.public.dotnet.security)
  • RE: Form Security and WebService
    ... it has to do with the fact that you have a membership store in SQL ... that uses windows authentication). ... call the SharePoint web service to provision the user. ...
    (microsoft.public.sharepoint.windowsservices)
  • Re: Problem When Calling Web Method Of Web Service From Pocket PC 2003.
    ... > NTLM Authentication is not supported in the CF. ... > Now that I have changed the Web site and Web Service to use Digest ... >> Alex Feinman ... a Desktop application and a Pocket PC 2003 application. ...
    (microsoft.public.dotnet.framework.compactframework)
  • Re: Problem When Calling Web Method Of Web Service From Pocket PC 2003.
    ... > The CF application will be able to support basic authentication only. ... >> When the Web site and Web Service application are set to allow Anonymous ... >> application and a Pocket PC 2003 application. ... >> Private Sub CallHelloWorld() ...
    (microsoft.public.dotnet.framework.compactframework)