Single Signon authentication with web services on CS10

Vanderpoel_Rob

Hi there,

I’m wanting to use single signon with windows authentication in my desktop application using webservices. I saw that the LLTreeView C# example includes a single signon option but I can’t get it to work. I have got single signon enabled and working for the browser interface and I’ve verified that les-services is set for Windows Authentication in IIS(6.1 on W2K8 R2) but, when running LLTreeView and selecting single signon I get the following message:

“The requested service, ‘http://vm64ttotcsa/les-services/DocumentManagement.svc’ could not be activated. See the server’s diagnostic trace logs for more information.”

I can’t see anything useful in the connect logs or the les services logs.

I’ve stepped through the code in LLTreeView and can’t really figure out how it’s supposed to work. It’s not clear to me how a valid OTAuthentication object is created as no token is created. If I now try to use CWS authentication with LLTreeView I get the message “The HTTP request is unauthorized with client authentication scheme ‘Anonymous’. The authentication header received from the server was ‘Negotiate,NTLM’.” which indicates that the web service is now looking for NTLM (i.e. single signon) authentication.

Any help with this would be appreciated

Cheers

Rob

Vanderpoel_Rob

Many thanks to Kevin Ji who provided the solution off-forum. As previously discussed here, you need to set the server IP (your web service is running on) to the  CGIHosts, it is under admin.index-> Server Configuration:Configure Security Parameters -> Content Server Client Hosts. You can also do this in opentext.ini. But what Kevin showed is that you also need to add the local host, which I now realise was what Kyle was referring to in his Apr 13 post.

So the value to enter would be something like ::1,::ffff:192.168.1.110 where, as I understand it, ::1 is the IPv6 localhost address.

Somewhere along the way Appu has a link to a document he’s created that covers this as well but I can’t find it just now.