Re: Anonymous access required for .NET web services?

• Previous message: Hernan de Lahitte: "Debugging Partially Trusted Code"
• In reply to: rgilmore: "Anonymous access required for .NET web services?"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Date: Fri, 26 Mar 2004 09:44:59 -0600

If you are using Windows security in IIS, you need to make sure you are
passing credentials in your proxy client. Check out the credentials
property on your SoapHttpClientProtocol.

Depending on whether you are using Windows Integrated authentication or
Basic, you can use either DefaultCredentials (from the CredentialsCache) or
create a NetworkCredential object with username and password specified.

It is also completely possible to provide the security for your web services
at the message level instead of at the transport level by using technologies
such as WS-Security and Microsoft's Web Services Extensions, but that would
require you to rearchitect your solution.

HTH,

Joe K.

"rgilmore" <anonymous@discussions.microsoft.com> wrote in message
news:A351A3CD-ADB6-44D0-AF26-BBF37E3944AE@microsoft.com...
> Hi,
>
> We have a .NET server application running under IIS. A C#.NET client
running on a workstation communicates with the server using .NET web
services ( .asmx). Some customers have found that if they disable anonymous
access to IIS, the client can no longer communicate with the server. And
some customers are not willing to leave anonymous access enabled, because of
security concerns.
>
> I am relatively new to IIS, I have an apache background. I want to know
if there is anything we can do to work around this problem without changing
our server/client code, such as asking the customer to create a user on the
client and server machine and somehow using that account to access IIS? Not
sure how that would be done.
>
> If we are required to change our code to make this work, what do we need
to do?
>
> thanks
> Robb

• Previous message: Hernan de Lahitte: "Debugging Partially Trusted Code"
• In reply to: rgilmore: "Anonymous access required for .NET web services?"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]