Velocity Reviews

Velocity Reviews (http://www.velocityreviews.com/forums/index.php)
-   ASP .Net Security (http://www.velocityreviews.com/forums/f62-asp-net-security.html)
-   -   wse vs "windows integrated" (http://www.velocityreviews.com/forums/t768303-wse-vs-windows-integrated.html)

yonido@gmail.com 02-19-2006 12:56 PM

wse vs "windows integrated"
 
hello,

i would like to implement a secure web service based on the active
directory, without using HTTPS / SSL, using the Kerberos mechanism.

As documentation mentions - Checking "Windows Integrated" & attaching
CredentialCache.DefaultCredentails to the web service will suffice
(will use the kerberos mechanism).

On the other hand, lots of articles mentions that i must use WSE2.0 and
MANUALLY add the token.
examples:
- http://www.codeproject.com/cs/webser...rityTokens.asp
- http://www.15seconds.com/issue/040602.htm

is "Windows Integrated" enough?

thanks.


Henning Krause [MVP] 02-19-2006 01:16 PM

Re: wse vs "windows integrated"
 
Hello,

WSE is transport independent, so you can build Web Services via raw TCP or
even SMTP if you like. In this case you must attach the Kerberos token
yourself. .NET Web Services (.ASMX files) hosted by the IIS rely on the HTTP
protocol instead. In this case, Kerberos authentication is done on the HTTP
Level, and not on the SOAP level, so using
CredentialCache.DefaultCredentials is sufficient.

Greetings,
Henning Krause

<yonido@gmail.com> wrote in message
news:1140353789.102876.32620@g14g2000cwa.googlegro ups.com...
> hello,
>
> i would like to implement a secure web service based on the active
> directory, without using HTTPS / SSL, using the Kerberos mechanism.
>
> As documentation mentions - Checking "Windows Integrated" & attaching
> CredentialCache.DefaultCredentails to the web service will suffice
> (will use the kerberos mechanism).
>
> On the other hand, lots of articles mentions that i must use WSE2.0 and
> MANUALLY add the token.
> examples:
> - http://www.codeproject.com/cs/webser...rityTokens.asp
> - http://www.15seconds.com/issue/040602.htm
>
> is "Windows Integrated" enough?
>
> thanks.
>





All times are GMT. The time now is 08:13 AM.

Powered by vBulletin®. Copyright ©2000 - 2014, vBulletin Solutions, Inc.
SEO by vBSEO ©2010, Crawlability, Inc.