Re: Application pool security



ok, I've found out I need to set credentials on the web proxy


d...@xxxxxxxxxxxx wrote:
hi,

I'm not getting the results I expected when setting up authorization in
my web service. I have a web application that runs under an application
pool identity (with Windows authentication). This application then
calls a web service which is also setup to run under the same
application pool identity (a valid domain account) with Windows
authentication (anonymous user turned off in IIS).

I am getting status 401 unauthorized. At the moment my authorization
section has allow users=* in both the application and the web service.
I was assuming that the application would call the web service under
the Application pool identity and be authorized (as it is a windows
domain account).

If I could get this bit to work I would then change my web service
authorization section to only "allow users=serviceaccount" which will
ensure that only specific web applications will consume it rather than
users being able to get to the data directly.

When I switch the web service to allow anonymous user it works fine but
obviously this doesn't do what I want. Is it because of the way that
the account has been setup by the domain administrators? Could this be
why?

TIA
Phil

.



Relevant Pages

  • Re: Copy file from another server to local server
    ... Account (under Directory Security) for the virtual directory the web service ... I even tried making the Anonymous user for the web service the ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Problem with authentication using DefaultCredentials
    ... you do not actually need any impersonation within ... you will be given the ASPNET proccess account instead of your account. ... to perform the authorization against those. ... The credentials are forward as part of your web service call ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Application pool security
    ... pool identity. ... calls a web service which is also setup to run under the same ... authentication (anonymous user turned off in IIS). ... At the moment my authorization ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Active Directory authorization
    ... AD should be fine as a source for authentication for your web service. ... The easiest way to use AD for authentication is to just use the transport layer authentication schemes built in to IIS. ... For app level authorization, I'd suggest checking out Microsoft's Authorization Manager framework. ... every applications. ...
    (microsoft.public.windows.server.active_directory)
  • RE: HTTP Protocol Bug ???
    ... If I disable my custom plugin and enable WMS Publishing Points ACL ... Instead with WMS Publishing Points ACL Authorization enabled, ... read access to anonymous user, if I also enable my custom Authorization ...
    (microsoft.public.windowsmedia.server)