Calling a webservice using Kerberos

[ALI-R]

I'm writing a webpart which is supposed to connect to a Webserice in our
interanet.I am using "RSService.Credentials =
System.Net.CredentialCache.DefaultCredentials;"to Authenticate to the
webservice.but it dosn't work.why?


I think SharePoint which hosts my webpart authenticate the user requesting
my webpart and because credential lasts only for one connection ,when web
part wants to call webservice there is no credenatial anymore and I get 401
(Unauthorized) Error.I was told to use Kerberos because it flows the user
identity,but I don't know how to use it in this scenario.





Is there somebody who can give me some hints?

Thanks

[Joe Kaplan \(MVP - ADSI\)]

You need to read up on Kerberos delegation. That is what you need to make
this scenario work. You might start here:
[url]http://msdn.microsoft.com/vstudio/using/building/web/default.aspx?pull=/library/en-us/dnnetsec/html/SecNetHT05.asp?FRAME=true#ImplementKerberos[/url]
[url]http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/tkerberr.mspx[/url]

Also, this newsgroup is full of Kerberos delegation posts that you can find
with Google.

Joe K.

"ALI-R" <newbie@microsoft.com> wrote in message
news:eb6QkGy$EHA.3504@TK2MSFTNGP12.phx.gbl...

> I'm writing a webpart which is supposed to connect to a Webserice in our
> interanet.I am using "RSService.Credentials =
> System.Net.CredentialCache.DefaultCredentials;"to Authenticate to the
> webservice.but it dosn't work.why?
>
>
> I think SharePoint which hosts my webpart authenticate the user requesting
> my webpart and because credential lasts only for one connection ,when web
> part wants to call webservice there is no credenatial anymore and I get
> 401
> (Unauthorized) Error.I was told to use Kerberos because it flows the user
> identity,but I don't know how to use it in this scenario.
>
>
>
>
>
> Is there somebody who can give me some hints?
>
> Thanks
>
>
>
>

[Chris Rolon]

As Jow said you need to read up on delegation. Basicalliy you need to enable
the server and the account for delegation. Then the credentials will flow.

Chris Rolon

"Joe Kaplan (MVP - ADSI)" <joseph.e.kaplan@removethis.accenture.com> wrote
in message news:OeohoQy$EHA.2032@tk2msftngp13.phx.gbl...

> You need to read up on Kerberos delegation. That is what you need to make
> this scenario work. You might start here:
>

[url]http://msdn.microsoft.com/vstudio/using/building/web/default.aspx?pull=/library/en-us/dnnetsec/html/SecNetHT05.asp?FRAME=true#ImplementKerberos[/url]

>

[url]http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/tkerberr.mspx[/url]

>
> Also, this newsgroup is full of Kerberos delegation posts that you can

find

> with Google.
>
> Joe K.
>
> "ALI-R" <newbie@microsoft.com> wrote in message
> news:eb6QkGy$EHA.3504@TK2MSFTNGP12.phx.gbl...

> > I'm writing a webpart which is supposed to connect to a Webserice in our
> > interanet.I am using "RSService.Credentials =
> > System.Net.CredentialCache.DefaultCredentials;"to Authenticate to the
> > webservice.but it dosn't work.why?
> >
> >
> > I think SharePoint which hosts my webpart authenticate the user

requesting

> > my webpart and because credential lasts only for one connection ,when

web

> > part wants to call webservice there is no credenatial anymore and I get
> > 401
> > (Unauthorized) Error.I was told to use Kerberos because it flows the

user

> > identity,but I don't know how to use it in this scenario.
> >
> >
> >
> >
> >
> > Is there somebody who can give me some hints?
> >
> > Thanks
> >
> >
> >
> >

>
>