Velocity Reviews - Computer Hardware Reviews

Velocity Reviews > Newsgroups > Programming > ASP .Net > ASP .Net Security > wse vs "windows integrated"

Reply
Thread Tools

wse vs "windows integrated"

 
 
yonido@gmail.com
Guest
Posts: n/a
 
      02-19-2006
hello,

i would like to implement a secure web service based on the active
directory, without using HTTPS / SSL, using the Kerberos mechanism.

As documentation mentions - Checking "Windows Integrated" & attaching
CredentialCache.DefaultCredentails to the web service will suffice
(will use the kerberos mechanism).

On the other hand, lots of articles mentions that i must use WSE2.0 and
MANUALLY add the token.
examples:
- http://www.codeproject.com/cs/webser...rityTokens.asp
- http://www.15seconds.com/issue/040602.htm

is "Windows Integrated" enough?

thanks.

 
Reply With Quote
 
 
 
 
Henning Krause [MVP]
Guest
Posts: n/a
 
      02-19-2006
Hello,

WSE is transport independent, so you can build Web Services via raw TCP or
even SMTP if you like. In this case you must attach the Kerberos token
yourself. .NET Web Services (.ASMX files) hosted by the IIS rely on the HTTP
protocol instead. In this case, Kerberos authentication is done on the HTTP
Level, and not on the SOAP level, so using
CredentialCache.DefaultCredentials is sufficient.

Greetings,
Henning Krause

<(E-Mail Removed)> wrote in message
news:(E-Mail Removed) ups.com...
> hello,
>
> i would like to implement a secure web service based on the active
> directory, without using HTTPS / SSL, using the Kerberos mechanism.
>
> As documentation mentions - Checking "Windows Integrated" & attaching
> CredentialCache.DefaultCredentails to the web service will suffice
> (will use the kerberos mechanism).
>
> On the other hand, lots of articles mentions that i must use WSE2.0 and
> MANUALLY add the token.
> examples:
> - http://www.codeproject.com/cs/webser...rityTokens.asp
> - http://www.15seconds.com/issue/040602.htm
>
> is "Windows Integrated" enough?
>
> thanks.
>



 
Reply With Quote
 
 
 
Reply

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
XML Signature with WSE 1.0 =?Utf-8?B?c3M=?= ASP .Net 2 04-07-2005 07:11 AM
WSE 2.0 Kerberostoken creation on IIS 5.0/win2k fails Shikari Shambu ASP .Net 0 12-29-2004 10:42 PM
WSE 2.0, ASP.NET, Kerberos Token on IIS 5.0 Win 2k Shikari Shambu ASP .Net 0 12-29-2004 05:16 PM
Interceptor, HttpModule, WSE oliver.wulff@zurich.ch ASP .Net 0 01-27-2004 05:57 AM
WSE coverage Chris Pettingill MCSD 9 11-02-2003 08:53 PM



Advertisments