Re: Problem establishing SSL connection in code-behind

You aren't going to get much useful info from the client side. What do the
logon audit events on the remote server say for both the working case and
the failing case?

Regarding the fact that you get the same results with and without SSL, that
is not surprising as we already ruled out that SSL was the problem in our
previous discussion.

Joe K.

--
Joe Kaplan-MS MVP Directory Services Programming
Co-author of "The .NET Developer's Guide to Directory Services Programming"
http://www.directoryprogramming.net
--
"gnewsgroup" <gnewsgroup@xxxxxxxxx> wrote in message
news:bcd6a652-947e-423a-94fc-04cd3b01cc75@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
On Jan 4, 2:32 pm, "Joe Kaplan"
<joseph.e.kap...@xxxxxxxxxxxxxxxxxxxxxxxx> wrote:
Ok, so what to the logon event audits look like on machine 2 for the
wfetch
operation vs. the HttpWebRequest? Do they both succeed or does one
succeed
and the other fail? Do they both use the same SSP (Kerberos vs. NTLM) or
a
different one?

There is some behavior difference here and the event log is probably the
most useful tool you have available to you to find out what might be
happening. A network sniff won't be too useful with SSL in the mix.

Joe K.

--
Joe Kaplan-MS MVP Directory Services Programming
Co-author of "The .NET Developer's Guide to Directory Services
Programming"http://www.directoryprogramming.net
--



Actually, I did run wfetch on Machine1 to request the hola amigo page
on Machine2.

My web application also sits in Machine1, which attempts to request
the same page on Machine2.

Thank you. Further debugging in VS2005 reveals that the WebException
object's Reponse has a Status of ProtocolError as shown here:

http://farm3.static.flickr.com/2253/2166873110_071d8e4c4f_o.png

A wild guess: Maybe it has to do with the account which the web
application assumes to access the remote website?


.

Relevant Pages

  • Re: Web Single Sign On
    ... Joe Kaplan-MS MVP Directory Services Programming ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ... current Windows credentials to the server, ... This common identity is the user's username used to logon to the ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Changing ADAM user password
    ... Joe Kaplan-MS MVP Directory Services Programming ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ... Running the bind from another W2K3SP1 machine ... support in digest or something like that. ...
    (microsoft.public.windows.server.active_directory)
  • Re: SignOn Problem during Team Foundation WebTest Playback
    ... That sounds likely to me (the query string parameters). ... Joe Kaplan-MS MVP Directory Services Programming ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ...
    (microsoft.public.windows.server.active_directory)
  • Re: ASP.NET 2.0 WindowsTokenRoleProvider Local Groups Broken
    ... Joe Kaplan-MS MVP Directory Services Programming ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ... There is no Group property on the WindowsIdentity object in .NET 2.0, ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Secure SSL with LDAP and AD
    ... Joe Kaplan-MS MVP Directory Services Programming ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ... LDAP over SSL with a third-party certification authority. ... Note that a self signed cert is probably a very poor choice as nothing ...
    (microsoft.public.windows.server.security)