Re: Forms Authentication - Reporting Services Web Service integration

From: Ramadass (anonymous_at_discussions.micorsoft.com)
Date: 12/29/04


Date: Wed, 29 Dec 2004 16:00:44 -0600

The credentials in the CredentialCache and the Principal objects are not
directly compatible( at least i couldnt get my Principal to translate into
Network credentials). What you could do is use security features in the web
service. If you are using WSE 2.0, then you could send the username and
password via the username token and validate the user at the reporting
service, using these credentials.
Hope this helps
Ramadass

"Paul Keegstra" <PaulKeegstra@discussions.microsoft.com> wrote in message
news:54CC434B-AE9F-4159-8876-20FC10FB0360@microsoft.com...
> I am working on an asp.net application which requires forms authentication
as
> the method for authenticating the web application using the underlying
Active
> Directory as the user store.
>
> I have created my Forms Authentication process using the methods described
> in some MSDN samples and that works just great.
>
> The question/issue I have is this process results in the creation of a
forms
> authentication ticket and setting of the Context.User to a GenericPricipal
> object. Now, another part of the application needs to run reports that
are
> defined in SQL Server Reporting Services by integrating the solution via
the
> reporting services web service (vs. a URL link).
>
> In my code to invoke the web service, I have to set the credentials on the
> reporting services web service object to something other than
> system.net.credentialcache.defaultcredentials or I end up with the
> credentials from the aspnet service account. I've tried setting <identity
> impersonate="true" /> in my web.config but that didn't do it. I can get
it
> working if I set my credentials to a new instance of the network
credentials
> class:
>
> rs.credentials = new
> system.net.NetworkCredentials("username","password","domain").
>
> Unfortunately, I can only seem to make this work by hardcoding the
username,
> password, and domain.
>
> Is there any way to map a GenericPrincipal instance's properties to create
a
> valid NetworkCredentials instance? That seems to be the solution I need,
but
> I can't retrieve the password from the GenericPrincipal nor can I get it
from
> the FormsAuthenticationTicket (unless you have some suggestion in that
> regard).
>
> I would appreciate any suggestions.
>
> --
> Paul



Relevant Pages

  • Re: cached login credentials
    ... , it takes longer to investigate an attack and clean up after it than it does simply to nuke-and-pave, flatten-and-rebuild, whatever. ... then over time through precision monitoring of network ... Anything that does an interactive logon will store cached credentials, ... > domain admin account credentials), is a credential cached anywhere for> the ...
    (microsoft.public.windowsxp.security_admin)
  • Re: cached login credentials
    ... administrator accounts is a good mitigation. ... then over time through precision monitoring of network ... you have a way to limit exposure to this sort of expanded attack originating ... Anything that does an interactive logon will store cached credentials, ...
    (microsoft.public.windowsxp.security_admin)
  • Re: How do you wintrolls...
    ... the system will automatically log in with those credentials from then on. ... account credentials, exactly what files do you think he wants to access? ... When Vista asks you if a newly discovered network is 'Public' or 'Private', this is one of the things it is doing. ... I have not found any necessary functionality in the menu bar; as far as I can see the only the functions that are in the menu bar are the greybeard switch for the old-style status bar and, oddly, the 'Invert Selection' command- which strictly speaking can always by done manually. ...
    (comp.sys.mac.advocacy)
  • Re: Cant use WM6 to access network shares
    ... Can get to about any other share on the network. ... about cannot find or no permissions. ... > to work correctly except connecting to shared folders on my Windows ... > I try to open the share I get prompted for user credentials. ...
    (microsoft.public.pocketpc.wireless)
  • Re: OWA prompts for login multiple times when accessing over secon
    ... does OWA support access via IP address on external ... Secondary network adapter connected to external network. ... I am prompted for login credentials multiple times. ...
    (microsoft.public.exchange.admin)