IIS Server Security - Web Service Unauthorized access - windows authentication

This is Interesting: Free IT Magazines  
Home > Archive > IIS Server Security > September 2005 > Web Service Unauthorized access - windows authentication





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author Web Service Unauthorized access - windows authentication
TrinityPete

2005-09-19, 6:01 pm

Hi all,

We have just deployed an internal system that consists of a web app and a
set of web services. The web services use a SQL backing store. All are hosted
on the same machine. Windows authentication has been used and anonymous has
been disabled.

However, when we access the web services from the app, we get a 401. Add the
site to either trusted zone or intranet zone and the web service calls work
fine.

Any one know why the access should be unauthorized unless in
trusted/intranet zone. Is there a single setting I should be looking at?

Any help would be greatly appreciated.

Pete.
TrinityPete

2005-09-19, 6:01 pm

I should have also added that we are using impersonation in web config and we
are setting credentials of the web service to
Credentialcache.DefaultCredentials.

Pete

"TrinityPete" wrote:

> Hi all,
>
> We have just deployed an internal system that consists of a web app and a
> set of web services. The web services use a SQL backing store. All are hosted
> on the same machine. Windows authentication has been used and anonymous has
> been disabled.
>
> However, when we access the web services from the app, we get a 401. Add the
> site to either trusted zone or intranet zone and the web service calls work
> fine.
>
> Any one know why the access should be unauthorized unless in
> trusted/intranet zone. Is there a single setting I should be looking at?
>
> Any help would be greatly appreciated.
>
> Pete.

Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com