[NRTSession ][TrustedLogin ] The handle is invalid

On system1, Web Service has been installed.
In this Web Service, LoginToWorkSite webmethod is specified.
Here TrustedLogin2(AccessToken) method of IManage.IManSession object is used to login as Trusted login to WorkSite.

WebConfig details

authentication mode="Windows"
trust level="Full"
identity impersonate="true"

Configuration:
Anonymous access is unchecked.
Integrated Windows Authentication is checked.
--------------------------------------------

On system2, Web Application has been installed.
In this Web app, LoginToWorkSite method is called and AccessToken is passed to the LoginToWorkSite webmethod of WebService.

Using below given code, Logged-in AccessToken is retrieved.
Dim AccessToken As Long = 0
AccessToken = System.Security.Principal.WindowsIdentity.GetCurrent().Token.ToInt32

WebConfig details

authentication mode="Windows"
trust level="Full"
identity impersonate="true"

add key="WebService.LoginService" value="http://system1/WebRS/LoginService.asmx"

Configuration:
Anonymous access is unchecked.
Integrated Windows Authentication is checked.

Web Service access system1 web service url is specified in WebConfig XML.

From Web Application, Window logged in user Accesstoken is passed as input parameter (data type long) to LoginToWorkSite webmethod of Web Service.

--------------------------------------------

Problem:
Using IE, Web Application url is accessed.
When user tries to login using Trusted Login, it fails exception is [NRTSession ][TrustedLogin ] The handle is invalid.

We get Exception in Web Service web method LoginToWorkSite, when TrustedLogin2(AccessToken) is used.

But normal username & password login works fine.

We have tried with every possible configuration, still Trusted login never works.

Note:
If Web Service and Web Application are installed on same machine say System 1.
Both Trusted Login and normal username & password login works fine without any error.

We have set up WorkSite Web application, it works fine with Trusted login.

We are not sure whether that is problem with IManage.IManSession TrustedLogin2() or with Configuration settings both in Web Server and Web application installed on different machines.

Find more posts tagged with

Comments

dabird

I don't believe you are setting up your environment correctly to pass credentials from your web app to your web service. Take TrustedLogin2 out of the picture for a moment. Instead, have your web service respond back with the username that it received in the credentials. I believe this is where your problem is. When everything is on the same box with the appropriate web.config settings, this will work because the .net framework just automatically sets everything up for you based on the currently-logged-on user.

Setting up IWA for web services is beyond the scope of this discussion. However, I did run across a few articles that may help you.

How to: Configure an XML Web Service for Windows Authentication

Security and Web Services

Implementing NTLM Authentication for your ASP.NET Web Services

Once you know that your authentication is working correctly from the browser to your web app to your web service only then should you put back the call to TrustedLogin2. As I mentioned in my previous post, TrustedLogin2 will work with a valid token as demonstrated by WorkSite Web.

Regards,
dabird

Migrateduser

Jagan

What is the Authentication scheme you have set up on the IIS box? e.g. Basic / Integrated ( NTLM or Kerberos?) It appears that you are suffering from what we call "Double hop" of authentication - In typical scenerio Windows server donot /can not passs the authentication token from one machine to another. The only way it works is by either using Kerberos or Basic/Digest Authentication. The later one is less secured. For more security you may want to consider the Keberos

Thanks
Sheetal
Founder/Principal Engineer
www.docstree.com
"Enabling firms in adapting SharePoint MOSS 2007"

dabird

One more thing: You've never explained why you are setting up your own web service. Did you know that WorkSite Web has quite a few web services available? Perhaps our web services already perform the operations that you want to do. All you would have to do is consume our services inside your app. (You would still have to sort out the authentication issue on your own, though.)

If you have WorkSite Web 8.2 or later, you can go to http://server1/worksite/services/iwovservices.asmx to review the web services. We also have a comprehensive guide on the WorkSite Web installation disk and you can find a webcast showcasing our web services on DevNet.

Hope this helps!
dabird