Re: Web Service, Authentication, Security & Domains
- From: "Joe Kaplan \(MVP - ADSI\)" <joseph.e.kaplan@xxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Mon, 7 Aug 2006 08:55:57 -0500
The easy way to do this is with Basic authentication and SSL.
Unfortunately, that does send the password across the wire (although it is
encrypted with SSL), so if that absolutely cannot happen, then you can't use
that approach.
The problem with using a Kerberos based approach is that the clients must be
able to contact the KDC to get a Kerberos ticket, and generally, you don't
have the KDC hanging out on the public Internet! If you could do that, you
could use IWA/Negotiate auth in IIS and it would work.
My recommendation is to push for Basic/SSL.
Joe K.
--
Joe Kaplan-MS MVP Directory Services Programming
Co-author of "The .NET Developer's Guide to Directory Services Programming"
http://www.directoryprogramming.net
--
"Igor Volkin" <igorvolkin@xxxxxxxxxxxxxxx> wrote in message
news:1154952967.941190.99760@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
kind regards to all.
I'm faced against an implementation problem on which I need some
guidelines and advice.
my client has a Win2k3 domain with ActiveDirectory.
I need to implement two parts of the solution:
a) Web Service that will run on a computer in the client's domain with
access to the AD
b) Windows application that will run on computers which are NOT part of
the client's domain
Windows application will communicate to the Web Service via internet
and perform some tasks that way.
the real problem follows: users that will use Windows application have
AD accounts in the client's domain, but they themselves will use
Windows application on computers OUT of the domain. and my Web Service
must allow Windows application users to authenticate and authorize with
AD, but so that the password (in any form) is NEVER sent across the
wire. data also must be transferred in a secure manner. so I need
something like Kerberos, but that works in my case.
what would be the simplest, yet feasible solution to this problem? does
WSE 3.0 have anything that could help me?
I hope I managed to depict the problem and I apologize for my english
if it's causing any misunderstandings.
tnx in advance
.
- References:
- Web Service, Authentication, Security & Domains
- From: Igor Volkin
- Web Service, Authentication, Security & Domains
- Prev by Date: Web Service, Authentication, Security & Domains
- Next by Date: load CAPICOM Certificate from X509Certificate
- Previous by thread: Web Service, Authentication, Security & Domains
- Next by thread: load CAPICOM Certificate from X509Certificate
- Index(es):
Relevant Pages
|
