Authentication using Windows Username/Password

Right now, the Livelink we use is set up so that it automatically logs in with the same username and password a user uses to log in to windows. How do you mimic this functionality within an Application - that is, how do you sign in to livelink through the Authentication web service automatically using the windows username/password? I've tried a few thing (extracting ot the username of the currently runnin process, permanently storing the uses username and password on their machines after they use the code once (dangerous, and I'd like them to neve rhave to manually login)). I've seen a few examples of using it on a web based platform but not within an actual c# app.

Thanks in Advance

Find more posts tagged with

Comments

sgrasley

Hi, Jonathon.

To use your Windows credentials you should be able to configure the virtual directory for Enterprise Web Services to use Integrated Windows Authentication so that the Windows user is passed to Livelink for authentication by the Directory Services module. In this case you don't need to retrieve an authentication token; just pass in an empty string in its place.

The Web.config file for the web services needs to be updated to use Windows authentication. Change like like this:

<security mode="None">
<transport clientCredentialType="None"/>
to this:

Once you've done this you can update the Service References in your Visual Studio project to make the necessary changes to your App.config file.

Thanks,

Scott

Jonathon_Riley

Thanks Scott. We changed the web.config file to the changes you said. But I'm not having much luck getting it to work. I set token to an empty string, then what am i supposed to do with it? right now im assigning the token, as an emptry string, to the AuthenticationToken of the OTAuthentication for the services I intend to use. I've tried left the username/password blank. I updated my web service references.

I've gotten two errors. When I attempt to do a serach it either tells me invalid username/password, or sometimes that I'm attempting to access as "Anonymous" and no have the proper permissions to perform the search.

Any ideas on what I'm doing wrong?

sgrasley

Hi, Jonathon.

You're right; I should have said to set the AuthenticationToken of your OTAuthentication object to an empty string. Passing in null to a method instead of an OTAuthentication object seems to work as well.

You don't need to call the AuthenticateUser method on the Authentication service since you don't need an authentication token, so no need to provide any user name or password.

The invalid user name/password error suggests that your request reached Livelink but it did not authenticate your username and password. The anonymous access error suggests that you were unable to connect to the web service at all.

The key thing to look for in your App.config is similar to the Web.config:

<security mode="TransportCredentialOnly">
<transport clientCredentialType="Windows"

Can you post more information about the exceptions you're receiving? Do you have Directory Services configured for Livelink? Do you have a load balancer or anything in place?

thanks,

Scott

Jonathon_Riley

We were actually able to get it to work. Thanks Scott. I just have to more things if you could assist me with.

The program I'm working on logs in properly with the windows credentials. But when i try to change it to log back in under the adminstrator instead of myself (for testing purposes. I do so by hard wiring the username/password and not setting toke = "") I get a "could not login with cookie" Fault exception at the line i try to do the actual serach on. Also theres some other programs I've written that have a login screen. I enter an administrator username and password, but it logs me in under my own credentials. Basically, is there a way to allow windows credentials only when the program doesnt set up a username password, but use normal ogin otherwise?

Also, the time to do a search has increased noticably when you use windows credentials sign in versus a login screen/tokens. I assume that's because it has to pass the Authentication everytime you do a search. Is there anyway to only have to authenticate once?

sgrasley

Hi, Jonathon.

If a request to Livelink goes through an IWA-authenticated virtual directory, the Directory Services module is going to use the Windows credentials for authentication, even if you provide an authentication token. The easiest way to avoid using your Windows credentials is to configure a separate virtual directory that does not have IWA enabled.

In the case of EWS, I think there will be a challenge to point both virtual directories at the same folder on the filesystem since the Web.Config file includes information about the binding security mode, so deploying the web services twice, once for IWA and once for anonymous access might be the easiest thing to do.

Sorry, I don't have a better solution at the moment...

Thanks,

Scott

Jonathon_Riley

Ah alright. I'll see if I can get a 2nd deployment of the webservices.

Thanks alot for the help Scott.

Arun_Vijayakumar

Hi Scott,

I too have same requirement authentication using windows . i have enabled windows authentication method in iis. and installed and configured directory services module. when i modified the lines as you suggested above in web.config under othome\webservices\les-sevices directory i get following error. "server Error in 'les-services' application". please advice.

is there any docuument from opentext to help out on this issue.?

arun.

Kyle_Swidrovich

Hello Arun,

As the exception states in your includederror.JPG:

“Security settings for this service requireWindows Authentication but it is not enabled for the IIS application that hoststhis service.”

Sounds to me like your les-services virtualdirectory isn’t set up for integrated authentication…

-- Kyle

From: eLink Entry:Enterprise Web Services 9.7.1 Forum[mailto:otdnenterprisewebservices971forum@elinkkc.opentext.com]
Sent: Wednesday, November 11, 20098:14 AM
To: eLink Recipient
Subject: Authentication usingWindows Username/Password 2

[Attachments exceeded pre-set sizelimits. Use the links provided to access]

Authentication using Windows Username/Password 2

Posted by arunvijay@supaisystems.com (Vijayakumar, Arun) On 2009/11/11 08:13

Hi Scott,

is there any docuument from opentext to help out on this issue.?

arun.

Attachment Links:

error.JPG (203 KB)

[To post a comment, use the normal reply function]
Topic:	Authentication using Windows Username/Password
Forum:	Enterprise Web Services 9.7.1 Forum
Livelink Server:	knowledge-wlweb01

Arun_Vijayakumar

Hi Kyle,

Thanks for the reply. I am using windows 2003 server. i have enable windows integrated autthentication for whole website. and i am able to acces livelink server using IWS. so enabling iws for iis may not be issue. I tweaked all the services by adding bellow lines. yes i also restrated server.

when i check for exposed webserivce i am getting error as i mentioned in attachment.. can some body please try at your end and tell me what am really missing?

sgrasley

Hi, Arun.

Just to confirm, the virtual directory for the web services has IWA enabled, and all other authentication mechanisms disabled (including Anonymous)?

Thanks,

Scott

Arun_Vijayakumar

Hi Scott,

yes virtual directories for les-services and livelink is under iws. I have removed anonomus login. i am able to acces livelink using iws.

arun

Timothy_Jobin

Good morning,

I am testing the project that Arun is working on (or very similar) and thought I would provide some additional information. The goal of the project is to have an ASPNET web application reach into Livelink using the LES WebServices. This part is working without issue if it is setup to use Livelink Authentication. The application is not working when used in a Livelink with Directory Services/SSO scenario however.

I currently have the ASPNET application hosted directly on the Livelink 9.7.1 server. The server is using NTLM Authentication, synched against an LDAP/Active Directory. When I attempt to connect to the service to perform an action I get back an error of "Invalid Username/Password Specfied".

Are there any changes requires to the LES Services Web.Config file other than altering the binding section to include the Authentication type?
Is there a way of seeing exactly what it is trying to pass to the webservice?
Are there any special tricks or items that need to be considered since this will be running as a web application hosted on a seperate server eventually?

I appreaciate any assistance or comments here. There does not seem to be much documentation on anyone attempting this.

Arun_Vijayakumar

Hi All,

finally i was able to configure and run single sign on both windows and web application using .net livelink webservices. it seems that .net 3.5 sp1 has some issues with end points which livelink webservices dosn't like them. when i rolled back to .net 3.5 it worked fine. i have suggestion when you want to get single sign on using asp.net select "add service references " instead of "web reference".

I thank you all for coming and contributing to this important thread.

Best Regards,

Arun.

sgrasley

Thanks for the update, Arun.

Scott