Reply to thread

Message: [QUOTE="Steve B., post: 1894245"] Hi, I'm having difficulties to configure security in a 3 tiers web application. Let's explain the scenario : A. The client computer is running in a domain in which the user is authenticated (domain\theuser). The user call a web application [URL]http://myserveur/myapp[/URL] B. The web application have this entry in the web.config : <identity impersonate="true" /> in order to make the web application run with the rights of the user (I check this in System.Threading.CurrentPrincipal.Identity, which is domain\theuser). C. The web application run in an dedicated application pool which is configured to use a specific user as its identity (domain\serviceaccount). D. The web application query data from another web service on an other web serveur [URL]http://mywsserver/myws/service.asmx[/URL] which also have impersonate="true" configured. The property UseDefaultCredentials of the proxy object is set to true. E. The problem is that the web service see the incoming request runnig as domain\serviceaccount instead of domain\theuser. F. Under the computer account in the AD managment tools, the server that host the web application is configured to allow delegation of security. I don't know I'm wrong, and I would appreciate any help to solve this problem. Steve [/QUOTE]