Re: Application pool security



ok, I've found out I need to set credentials on the web proxy


d...@xxxxxxxxxxxx wrote:
hi,

I'm not getting the results I expected when setting up authorization in
my web service. I have a web application that runs under an application
pool identity (with Windows authentication). This application then
calls a web service which is also setup to run under the same
application pool identity (a valid domain account) with Windows
authentication (anonymous user turned off in IIS).

I am getting status 401 unauthorized. At the moment my authorization
section has allow users=* in both the application and the web service.
I was assuming that the application would call the web service under
the Application pool identity and be authorized (as it is a windows
domain account).

If I could get this bit to work I would then change my web service
authorization section to only "allow users=serviceaccount" which will
ensure that only specific web applications will consume it rather than
users being able to get to the data directly.

When I switch the web service to allow anonymous user it works fine but
obviously this doesn't do what I want. Is it because of the way that
the account has been setup by the domain administrators? Could this be
why?

TIA
Phil

.



Relevant Pages

  • Re: Copy file from another server to local server
    ... Account (under Directory Security) for the virtual directory the web service ... I even tried making the Anonymous user for the web service the ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Problem with authentication using DefaultCredentials
    ... you do not actually need any impersonation within ... you will be given the ASPNET proccess account instead of your account. ... to perform the authorization against those. ... The credentials are forward as part of your web service call ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Application pool security
    ... pool identity. ... calls a web service which is also setup to run under the same ... authentication (anonymous user turned off in IIS). ... At the moment my authorization ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • RE: HTTP Protocol Bug ???
    ... If I disable my custom plugin and enable WMS Publishing Points ACL ... Instead with WMS Publishing Points ACL Authorization enabled, ... read access to anonymous user, if I also enable my custom Authorization ...
    (microsoft.public.windowsmedia.server)
  • Re: WebService Windows Authentication ASP.NET 2.0
    ... and if it is granular enough to set the authorization on file basis - use a location element for individual AuthZ settings for the .asmx files. ... I'm not a big fan of using the PrincipalPermission as it generally ... The web service is only ...
    (microsoft.public.dotnet.security)