wse vs "windows integrated"

Discussion in 'ASP .Net Security' started by yonido@gmail.com, Feb 19, 2006.

  1. Guest

    hello,

    i would like to implement a secure web service based on the active
    directory, without using HTTPS / SSL, using the Kerberos mechanism.

    As documentation mentions - Checking "Windows Integrated" & attaching
    CredentialCache.DefaultCredentails to the web service will suffice
    (will use the kerberos mechanism).

    On the other hand, lots of articles mentions that i must use WSE2.0 and
    MANUALLY add the token.
    examples:
    - http://www.codeproject.com/cs/webservices/SecurityTokens.asp
    - http://www.15seconds.com/issue/040602.htm

    is "Windows Integrated" enough?

    thanks.
     
    , Feb 19, 2006
    #1
    1. Advertising

  2. Hello,

    WSE is transport independent, so you can build Web Services via raw TCP or
    even SMTP if you like. In this case you must attach the Kerberos token
    yourself. .NET Web Services (.ASMX files) hosted by the IIS rely on the HTTP
    protocol instead. In this case, Kerberos authentication is done on the HTTP
    Level, and not on the SOAP level, so using
    CredentialCache.DefaultCredentials is sufficient.

    Greetings,
    Henning Krause

    <> wrote in message
    news:...
    > hello,
    >
    > i would like to implement a secure web service based on the active
    > directory, without using HTTPS / SSL, using the Kerberos mechanism.
    >
    > As documentation mentions - Checking "Windows Integrated" & attaching
    > CredentialCache.DefaultCredentails to the web service will suffice
    > (will use the kerberos mechanism).
    >
    > On the other hand, lots of articles mentions that i must use WSE2.0 and
    > MANUALLY add the token.
    > examples:
    > - http://www.codeproject.com/cs/webservices/SecurityTokens.asp
    > - http://www.15seconds.com/issue/040602.htm
    >
    > is "Windows Integrated" enough?
    >
    > thanks.
    >
     
    Henning Krause [MVP], Feb 19, 2006
    #2
    1. Advertising

Want to reply to this thread or ask your own question?

It takes just 2 minutes to sign up (and it's free!). Just click the sign up button to choose a username and then you can ask your own questions on the forum.
Similar Threads
  1. STom
    Replies:
    0
    Views:
    330
  2. Carlos Fersura

    HttpHandler and Windows Integrated Security

    Carlos Fersura, Oct 29, 2003, in forum: ASP .Net
    Replies:
    0
    Views:
    443
    Carlos Fersura
    Oct 29, 2003
  3. NWx
    Replies:
    4
    Views:
    1,980
  4. Mohamed Zaki
    Replies:
    1
    Views:
    404
    M. Zeeshan Mustafa
    Jun 29, 2004
  5. jadher
    Replies:
    1
    Views:
    3,622
    William F. Robertson, Jr.
    Oct 11, 2004
Loading...

Share This Page