windows authenticated single sign on upload streaming documents with dotnet/les-services/ContentServ

I'm trying to figure out how to upload a file with web services using windows authentication. I've got code that I think should work. I've also tried loading a file with the LLTreeView. In both cases using SSO I get the following error message:

HTTP request streaming cannot be used in conjunction with HTTP authentication. Either disable request streaming or specify anonymous HTTP authentication

Is there anyway to upload a large file to content server if your dotnet web services are all configured for windows authentication.

I was originaly trying to use the HTTPContentHandler.ashx instead of ContentService.svc. I ran into other problems with the content handler, and the ContentService.svc method looked better.

Any help, or suggestions will be greatly appreciated.

Find more posts tagged with

Comments

Appu_Nair1

When posting these kinds of qns it would be beneficial if you posted the environment as they matter very deeply in making your webservices code work.

Version of Content Server CS10 Update ?, LL97.1 SP ,LL9.5 SP ? or even older ? DB ?
Does livelink has Content Server Dir Svcs (Oscript code) or is it working off OTDS integration(Java code running on tomcat)
Is it HTTP or HTTPS
Does this landscape have RCS deployed anywhere which usually happens in a Extended ECM(SAP<->LL) scenario.
Language of your programming which you have indicated .

For the record I have had the treeview soln work with LL9.7.1 with DirSvcs configured.It was not a very easy exercise but at that time I debugged many things wiytth oscript and was able to make it work.I have no experience in CS10 and the new otds integration.

I put my experience and how I made them work in this forum a while back.Many of the tings may have since been corrected by OT I have no idea.

I would start looking at how your webservices call start form your browser into the webserver and into livelink as a end user does.Many times if a end user transcation thru the gui works in a seamless way there is quite a chance that a webservices call can also work.If not there are several debugging options that you have with livelink.It is not easy for either OT nor readers like me who like livelink and its programming avenues to suggest remedies because it is never the same caross two installs.But the technical people reading this form OT usually gives you enough handholding to get the job done

Nathaniel Collier

It is content server 10 with service pack 2. Directory Services and web services are working great except for uploading files. I'm not doing any oscript.

otds is fully functional and I'm not having any problems with it at all.

I think this problem is because wcf doesn't allow streaming with windows authentication. Since the LLTreeView gets the exact same error I'm getting I thought it might be something simple that needs to be changed in the web.config. Currently the binding for ContentService.svc looks like this:

Something about that has to change, because the windows clientCredentialType and the transferMode="Streamed" conflict.

Appu_Nair1

Does this posting from Kyle Swidrwich buy you something?

/*

Enterprise Web Services: Create Document Sample
-----------------------------------------------

To use this sample, you will need to:
1) Add references to your project to the Authentication, ContentService and DocumentManagement services with
     namespaces "Authentication", "ContentService" and "DocumentManagement" respectively.
2) In section #2, set the username/password for the authenticating user
3) In section #3, set the parentID (what container to add it to), name (what to call it) and comment (description) for the document in Content Server
4) In section #4, set the filePath for the document's location on your client machine

NOTE: For file uploads > 4 MB, the app.config file of your project will need to use the "Streaming" transferMode for the ContentService binding with non-HTTP authentication.
       In addition, the server-side web.config file will need the following section in addition to the given <system.serviceModel> configuration:
          <system.web>
            <httpRuntime maxRequestLength="65536" />
          </system.web>
       This will match the maxRequestLength to the maxBufferSize of the ContentService binding of the app.config file.

       Please contact Microsoft for further information on WCF configuration.

*/

https://knowledge.opentext.com/knowledge/cs.dll/16718292/Program.cs.txt?func=doc.Fetch&nodeid=16718292

Nathaniel Collier

The non-HTTP authentication is confusing me a little. If I have the web services set to no authentication and pass content server usernames and passwords everything works.

I need to upload files with windows authentication though. The LLTreeView c# sample sets the ContentService.svc to use transport security and windows authentication. It also has streaming enabled. It gets that error message though if I try to upload a document and choose single sign on authentication.

Nathaniel Collier

I tried something a little different I changed my client side binding for ContentService.svc to the below and got a different more expected error message. "OTDS username and password are required".

That error is because I tried to upload without passing a username, and password and turning off windows authentication. I thought it might work because of the contextid but it didn't.

Still no solution for this, and I'm running out of combinations to try.

Is there any other way to upload files that might work?

---------------------

----------------------

Original Setting I was using is

-----------------------

-----------------------

Nathaniel Collier

If I change "Streamed" to "Buffered" both client app.config and server web.config it will upload a file as the user. I cannot upload very big files though, and I'm wondering what the problems are with doing that vs streaming.

Appu_Nair1

I would not know anything further to help unless I have your setup.You will have to trace the call and figure out who is throwing you out.Try using Fiddler or wisreshar and see responses in/out and see how many entities are passing your webservie queries.

Here's how I see the flow as a user does in GUI just guessing

User clicks livelink URL
Livelink asks OTDS to see if user has creds.
If OTDS was not there livelink's application directory would be IWA so it will have the REMOTE_user unencrypted
OTDS gives token to user and livelink decrypts the token for REMOTE_USER and lets user in or in regular DirSvcs livelink code REMOTE user is obtained again.

Many people fake SSO by using impersonate user in livelink.So if you have a userid/password and that id has 'SA" privs then you could get your windows user environment variable and impersonate the user.Note that at this point everything is done as the "impersonated" user and is fully valid in that sense.I suggest that because I sense your urgency.However if you persist you may be able to narrow it down.

Maybe I am confusing you to no end I will stop perhaps it is something very simple and somebody will tell you how to make it work.

Nathaniel Collier

I've given up on streaming and I'm trying to figure out how to upload large files using any method.

I've now got a binding for the ContentService.svc that looks like this

---------------------------------------------

----------------------------------------------

Nathaniel Collier

I've got a working process now. The client side binding is the same as what I last posted with buffered instead of streaming. On the server side in dotnet/les-services/web.config I added the below xml. Now I'm able to upload large files. I think with wcf and windows authentication this is the best I'm going to achieve.

--------------------------------------------------

<httpRuntime maxRequestLength="65536" />

--------------------------------------------------

Guy_Pomerleau

What is your definition of large files?

Uldis

> 20 GB