defaultcredentials - double hop? way around this?

Discussion in 'ASP .Net Web Services' started by Justin Rich, Sep 4, 2007.

  1. Justin Rich

    Justin Rich Guest

    So im trying to make a web service that exposes powershell and some remote
    registry stuff so im trying to secure this now and im having some problems.

    The DefaultCredentials always comes back blank. what i found was most often
    the cuase was not having impersonate on, which isnt the issue here. I have
    the two entries in the web.config and the settings in IIS and if i use a
    WindowsIdentity.GetCurrent().name it comes back correctly. so the asp app is
    fine.

    from what i can tell a "double hop" is causing this and the solution is to
    modify the delegation rights of the user account or machine. unfortuantely i
    dont have access to do that so i need to find a way around this.

    In the end both the web app and web service will be on the same site which i
    have tried, and i still get the security problem. If i host them both from
    my local machine and run it from the local machine, it works just fine. If i
    try to access the app from a remote system to my local system i have a
    security problem with the registry calls with in the web service (the double
    hop isnt the issue here, it just isnt using the passed creds...


    basically i have a big of a security mess and im starting to get really
    lost.. what i would like to accomplish is to have a web service that exposes
    a couple of methods (two of them are powershell invokes and one is a
    OpenRemoteBaseKey)

    Ideally what i would like to happen is have the windows creds from the user
    be passed to the web app, which then passes them to the web service, which
    then uses them to make the required calls.

    Any Advice would be greatly apprecatied.

    Thanks
    Justin
     
    Justin Rich, Sep 4, 2007
    #1
    1. Advertising

Want to reply to this thread or ask your own question?

It takes just 2 minutes to sign up (and it's free!). Just click the sign up button to choose a username and then you can ask your own questions on the forum.
Similar Threads
  1. Ken Schaefer

    Re: Windows Auth -- double hop issue??

    Ken Schaefer, Apr 7, 2004, in forum: ASP .Net
    Replies:
    0
    Views:
    3,085
    Ken Schaefer
    Apr 7, 2004
  2. - Steve -

    Double Hop Issues

    - Steve -, Jun 28, 2004, in forum: ASP .Net
    Replies:
    2
    Views:
    791
    - Steve -
    Jun 28, 2004
  3. Jim Corey

    Can BackImageUrl cause a double hop?

    Jim Corey, Jul 27, 2004, in forum: ASP .Net
    Replies:
    2
    Views:
    341
    Jim Corey
    Jul 27, 2004
  4. Sharon

    Double hop reloaded

    Sharon, Mar 30, 2005, in forum: ASP .Net
    Replies:
    6
    Views:
    617
    Sharon
    Mar 31, 2005
  5. Sydex
    Replies:
    12
    Views:
    6,575
    Victor Bazarov
    Feb 17, 2005
Loading...

Share This Page