Enable Double - Hop Delegation In IIS7 Windows 2008

Dec 2, 2010

my ASP.NET web application uses windows authentication on our intranet. I want it to be able to make a server-side http request to another server on the same domain that also requires windows authentication. I've followed the instructions on temporarily impersonating the authenticated user when making the additional request here: [URL] Using code like this:

using System.Security.Principal;
// Obtain the authenticated user's Identity
WindowsIdentity winId = (WindowsIdentity)HttpContext.Current.User.Identity;
WindowsImpersonationContext ctx = null;
try
{
// Start impersonating
ctx = winId.Impersonate();
// Now impersonating
// Access resources using the identity of the authenticated user
var request = WebRequest.Create("http://intranet/secureapp");
request.Credentials = CredentialCache.DefaultCredentials;
var response = request.GetResponse();
using (var streamReader = new StreamReader(response.GetResponseStream()))
{
Response.Write(streamReader.ReadToEnd());
}
}
// Prevent exceptions from propagating
catch
{
}
finally
{
// Revert impersonation
if (ctx != null)
ctx.Undo();
}
// Back to running under the default ASP.NET process identity

But, unfortunately, I always get a 401 unauthorized error. Do I need to configure our webserver with active directory to allow it to delegate the autenticated user (could be any one of about 200 users, so don't want to have to do anything 200 times :))? If so, can anyone tell me how to do this?

View 1 Replies


Similar Messages:

Security :: Double Hop Delegation - Can't Get The Web Service To Run Under The Callers Context

Sep 3, 2010

I have an ASP.NET 2.0 web app which calls a one way web method on a web service. This web method contacts remote servers and pulls back config information to confirm the state of new server builds (settings etc) and inserts the collected data into a SQL database. The web app is supposed to pass through the callers kerberos ticket to the web service and then again to the newly built server which is being checked, all via impersonation and delegation using the calling users administrator privileges.

The trouble is, I just can't get the web service to run under the callers context. I have the SPN's set up, delegation turned on in the active directory objects for the computer running the web app and service and the worker process domain user service account. I have windows authentication on and impersonation set to true in both the web app and service's web.config, integrated authentication in IIS, and IE settings are all ok. All has been checked out and passes the tests in DelegConfig, but it still won't work.

It appears that any data that's is written to the database is written under the context of the web pool service account, and not the calling users, plus along with the fact that I get access denied messages when trying to collect data from the server says impersonation isn't working. Also, is it possible to run the checks under the calling users context, but write to the database with the web pool identity service account without specifying the user details in the web config?? I am working in a secure environment and we must user windows based accounts only, no SQL accounts.

View 1 Replies

Security :: Double Hop Impersonation - Protocol Transitioning And Constrained Delegation In 4

Nov 10, 2010

I want to use IIS impersonation to connecto to a SQL server database as the user who is currently accessing a website. This is for auditing and security reasons. I've done some reading and discovered that because the SQL Server is on a sepearate physical server I need to enable Protocol Transitioning and Constrained delegation for the server that's running IIS. This is the article that I found. [URL] I didn't realise at the time I first read it but this article has the following header. Retired Content

This content is outdated and is no longer being maintained. It is provided as a courtesy for individuals who are still using these technologies. This page may contain URLs that were valid when originally published, but now link to sites or pages that no longer exist. What I want to know is, does the information in the article still apply, if I want to impersonate the user all the way to the SQL Server, do i still need Constrained Delegation or has this been implemented in some other way for ASP.NET 4?

View 1 Replies

Configuration :: 4.0 Web Form Routing With IIS7 (windows Server 2008)?

Nov 17, 2010

I have web app written in .net 4.0 using url routing. It works fine in the development environment in VS 2010.But It's not working after publishing to iis7. on remote server i'm getting error HTTP Error 404.0 - Not FoundThe resource you are looking for has been removed, had its name changed, or is temporarily unavailable. I tried in virtual directory and it's not working.[URL]

View 1 Replies

Increase Size Of File Upload (Windows 2008 / IIS7)

Jan 20, 2014

I am trying to increase the size of file upload for my ASP.NET app.. (Windows 2008 Enterprise + IIS 7)

What I have done in web.config:

<system.webServer>
<security>
<requestFiltering allowDoubleEscaping="true">
<requestLimits maxAllowedContentLength="100000000" />
</requestFiltering>
</security>
</system.webServer>

View 5 Replies

Crystal Reports :: Error In Crystal Report When Using Windows Server 2008 R2 And IIS7?

May 29, 2010

Runtime Error Description: An application error occurred on the server. The current custom error settings for this application prevent the details of the application error from being viewed remotely (for security reasons). It could, however, be viewed by browsers running on the local server machine. Details: To enable the details of this specific error message to be viewable on remote machines, please create a tag within a "web.config" configuration file located in the root directory of the current web application. This tag should then have its "mode" attribute set to "Off". Notes: The current error page you are seeing can be replaced by a custom error page by modifying the "defaultRedirect" attribute of the application's configuration tag to point to a custom error page URL. ----------------------------------- This error will be display when I am try to show the Crystal Report. Can anybody tell me what Property I have to ser in Windows Server 2008 R2 or in IIS7???

View 1 Replies

Installation :: Not Able To Browse VS2008 Aspx Pages From IIS7.0, Windows Server 2008 Production Server?

Jan 11, 2011

I am working on the migration of the server. Our new server is Windows server 2008 with IIS7.0 I have a great difficulty in browsing the pages hosted in virtual directories. I have followed the proper steps of creating a virtual directories and converting them into applications. But when i try to browsing the pages of the virtual directory, i get the 404 error. Note: The .Net Framework 4.0 is installed on the server and the web applications which i am trying to configure in the virtual directories are developed in Visual Studio 3.0. Even the http://localhost also don't work.

View 9 Replies

How To Enable Https Website From IIS7.5

Mar 24, 2011

I just moved our website to a new server(windows 2008, IIS7.5). this website needs to do post to an outside https website to get the data back, but

it deesn't work. when i put the https: website on the IE address bar, it failed. I am wondering what setting i need to change to enable https: website to go through on the server?

View 1 Replies

Security :: IIS7 And Windows Authentication?

Mar 24, 2010

I have an application that ran fine on a Win 2003 box using windows authentication. After installing the app on a 32-bit Windows Server 2008 box the users are now prompted for domain credentials every time they call the site. I went into IIS manager for IIS7 and disabled anonymous authentication and enabled windows authentication. What do I need to do here for the user to not be prompted for the credentials?

View 5 Replies

VS 2008 Difference Between Double And Decimal Data Types?

Nov 3, 2010

The biggest difference between double and decimal is that double is a floating point variable type whereas decimal is a fixed point variable .What it means?? Please Explain the abovePoint with Example.According to me both are used to store the folating numbers,then whats the difference between two?

View 1 Replies

Usage Of SQL Express From Microsoft Windows Server 2008 R2 Enterprise Edition (64-bit) To Windows

Oct 11, 2010

Microsoft Visual Studio 2010 was being used along with SQL Express for website development on the Operating System, Windows Server 2008 R2 Enterprise Edition of Intel Xeon CPU @ 2.13 GHz (2 Processors) containing 12 GB RAM with 64-bit Operating System. Website was developed along with the databases of SQL Express with the help of Visual Studio. Whether the developed website along with the databases may be used on the Operating System, Windows 7 of 64-bit? The website will used within Intranet. Which Operating System and configuration to be used for the Intranet Website?

View 1 Replies

Configuration :: Web.config Not Agreeing With Windows Server 2008 SP2 Or Windows 7

Mar 8, 2010

I've installed IIS for Windows Server 2008 SP2 and Windows 7. In both instances, I can't get even the simplest of ASP.net scripts to work (note: I'm ftping the published files from Visual Web Dev 2008 Express on XP):

------------------------------------LOCAL MESSAGE---------------------------------------------

Configuration Error

Description: An error occurred during the processing of a configuration file required to service this request. Please review the specific error details below and modify your configuration file appropriately.

Parser Error Message: It is an error to use a section registered as allowDefinition='MachineToApplication' beyond application level. This error can be caused by a virtual directory not being configured as an application in IIS.

Source Error

[Code]....

Line 36: ASP.NET to identify an incoming user.Line 37: -->Line 38:
<authentication mode="Windows"/>Line 39: <!--Line 40: The <customErrors> section enables configuration
Source File: C:inetpubwwwroot estweb.config Line: 38


------------------------------------REMOTE MESSAGE-------------------------------------------

Runtime Error

Description: An application error occurred on the server. The current custom error settings for this application prevent the details of the application error from being viewed remotely (for security reasons). It could, however, be viewed by browsers running on the local server machine.

Details: To enable the details of this specific error message to be viewable on remote machines, please create a

<customErrors> tag within a "web.config" configuration file
located in the root directory of the current web application. This
<customErrors> tag should then have its "mode" attribute set to
"Off".

[Code]....

<!-- Web.Config Configuration File --><configuration> <system.web> <customErrors mode="Off"/> </system.web></configuration>

Notes: The current error page you are seeing can be replaced by a custom error page by modifying the "defaultRedirect" attribute of the application's <customErrors> configuration tag to point to a custom error page URL.

[Code]....

<!-- Web.Config Configuration File --><configuration> <system.web> <customErrors mode="RemoteOnly" defaultRedirect="mycustompage.htm"/> </system.web></configuration>

Can anyone tell me what I'm doing wrong here in the web.config file? This is killing me.

View 5 Replies

Installation :: Windows Azure & Windows Server 2008 R2 Not Working?

Mar 17, 2011

I just downloaded and installled the Microsoft Windows Azure SDK yesterday for the first time and I am having issues running the application as I all I am getting is 503 errors. I run Windows Server 2008 R2 on my development machine and even tested it on another co-workers 2008 R2 and couldn't even compile the application. He got this error instead "A problem occurred while trying to set the "References" parameter for the IDE's in-process compiler. Error HRESULT E_FAIL has been returned from a call to a COM component."

From within my Windows Server 2008 R2 Hyper-V Virtual Windows 7 x86 enviroment, I was able to successfully build and run the Windows Azure SDK and it even showed the base ASP.NET application.So my question is, does the Windows Azure SDK for Visual Studio 2010 w/ Visual Studio 2010 SP 1 installed not work under Microsoft Server 2008 R2?

View 1 Replies

Visual Studio :: Will Not Allow IIS7.5 Debugging On Windows 7

Jul 16, 2010

Older machine (2 years), Visual Studio 2008 SP1, Windows 7.

Error message when trying to open previously created mvc2 web app on IIS through Open Web site > Local IIS

"Unable to open the Web site "htpp://localhost/websitename" To access local IIS Web sites you must install the following IIS components:"

(no items on list)

then the open in admin mode notice.

I have tried everything I have found on the internet for 3 days.

View 3 Replies

Crystal Reports :: XI For VS.NET On IIS7 With Windows Authentication?

Feb 10, 2010

I've got an ASP.NET web app that uses Crystal Reports XI Release 2 (Service Pack 4 + Fix Pack 4.1), and when I use Windows Authentication, the report still passes the application pool identity to the database instead of the user's identity. Every other portionof the program sends the user's identity (checked using SQL profiler). I know I've gotten this working on a client's windows 2008 server before, but I don't have access to that machine to make a comparison with the one I'm working on. I'm pretty sure it's an IIS configuration issue, but I can't seem to find the thing that's causing the Crystal reports to behave differently from the rest of the application.

View 2 Replies

Installation :: Set IIS7 On Windows 7 To Defaults Settings?

Nov 4, 2010

I am trying to run a website on iis7, it was working fine untill i tryed to install isapi rewrit on iis7. when i go to localhost i get the 404 message and when i type localhost/Default.aspx i get the default page but the css is not applyed to the page. i tryed to uninstall /install iis but the settings remain the same. how can i install iis with default settings.

i was following this instructions.

[URL]

View 3 Replies

Security :: Setting Up Windows Authentication In Windows 2008 RC2?

Sep 8, 2010

We have a working version of application (Intranet) with uses Windows Authentication deployed in Windows 2003. The application uses HttpContext.Current.User.Identity.Name to get the logged-in user. Here impersonate is turned off.Right now, we are move to Windows 2008 RC2 where this Windows Authentication problem arised. I have Digest Authentication and Windows Authentication enabled. And also I have enabled Anonymous Authentication enabled to avoid the Login dialog of IIS in the end-user IE. Now I am getting HttpContext.Current.User.Identity.Name as Empty. When I impersonate using username and password, I am used to login using that user but all the users uses the same user to login.Does any has solution for this?Deployment Server - Windows 2008 RC2 (IIS 7.5)Development - Windows 7 (IIS 7.5)I am new to IIS 7.5. Please give me a solution

View 3 Replies

Security :: How To Enable Integrated Windows Authentication

Nov 2, 2010

In my masterpage application i have "Integrated windows authentication" enabled and it works fine for Active Directory Users. but i have created some users in my aspnetdb and i want few users to login and use my application. But for created users in aspnetdb i can getting "windows login screen". means when users not on active directory try to access application instead of getting login page, they get windows auth login popup.

View 1 Replies

Enable Windows User Access Using .net 2003?

Jan 28, 2010

This below code I am calling from asp.net page. it is giving error when I am executing UserObj.SetInfo().

My environemnt: asp .net 2003

My Objective: to enable windows user ids threw asp.net application with admin rights
---------------------------------------------------------------

Error Message : General access denied error

--------------------------------------------------------------

web.config file:
<?xml version="1.0" encoding="utf-8" ?>
<configuration>[code]....

View 2 Replies

IIS7, Windows Authentication, This Feature Has Been Locked Or Read Only?

Jul 30, 2010

I have a website deployed on IIS 7 . And want one of my pages authenticated by windows authentication. But While trying this I am getting error "This feature has been locked or Read Only".

View 1 Replies

WCF / ASMX :: Enable Integrated Windows Authentication On Web Service?

Feb 9, 2011

I have just started building an asp.net web service with visual studio 2005. However whenever i try and run the site i get this message, saying "debugging failed because integrated windows authentication is not enabled". I am at a loss of how to correct this problem.

View 1 Replies

SQL Reporting :: Does SSRS/VS2008 On Windows 7 Require IIS7 Install?

May 5, 2010

Here is what I need to know about SSRS/VS2008:

View 5 Replies

Can Use Windows Integrated Auth & Anonymous After Jakarta Redirect On IIS7

Jun 7, 2010

I have an application we bought that I need to integrate, and it uses jakarta connection to get to the application from IIS.So, the basic operation is

View 1 Replies

Visual Studio :: 2008 Design Mode Hangs On Windows 2008 Server?

Mar 28, 2010

I have looked at all the posts I can find on this problem and tried everything I can think of, but still the problem persists. I am getting really sick of it.was working fine for the last year until an update to MS Office 2007 caused a lot of problems (automatic update). After checking posts here, I removed it completely. No change. I then tried all the things I could find on other posts, also no change. Today, I removed VS and the Web Authoring Component and re-installed. Still no go.

Does anyone have a fix for this problem. It seems that it has been around a long time, but is still giving problems. I even saw one suggestion to reformat the drive! You've got to be joking!

View 4 Replies

Installation :: Windows 7 Compatibility With Visual Studio 2010 / 2008 And SQL Server 2008

Oct 11, 2010

I am looking at developing using Visual Studio 2010/2008 and SQL Server 2008 on Windows 7. Should I be able to do this on Windows 7 Professional, or do you need Windows 7 Ultimate?

View 2 Replies







Copyrights 2005-15 www.BigResource.com, All rights reserved