nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

access failure : 401 unauthorized

donundeen

Hi,
I'm using C#.net to access the mediabin webservice.

my connection and query code looks like:

//vars:
private string wsdlURl = "http://prodserver/mediabinwebservice/MediaBinServer.asmx?WSDL";
private string strUsername = "prodUser";
private string strPassword = "prodPassword";

service = new MediaBinServer();
Uri u = new Uri(wsdlURl);
CredentialCache cache = new CredentialCache();
cache.Add(u, "Basic", new NetworkCredential(strDomain + "\\" + strUsername, strPassword));
service.Credentials = cache;

MBContainer container = service.GetContainerByPath(collectionName, parentCollectionGuid, false);

in our production environment, this works.

However, in our development env (different values for wsdlURl , strUsername, strPassword), I get a 401 unauthorized error on the service.GetContainerByPath line.

Now, I can use the dev username and password to get access to the web app; at the user/pass popup screen and the following webform user/pass screen, I enter those credentials and get in.

I know mediabin manages permissions in a few different ways (active directory, sql level, metadata field level).
But how does the API access permissions work?

thanks for your time.

Find more posts tagged with

Comments

msrinivas

Can you go to the WSDL page on dev server and make sure that is working properly? Refer to documentation for the basic tests that need to be performed to validate that web services and installed and working correctly.

donundeen

I can get to the wsdl page identified by my wsdlURL var.
http://spmidevap01/mediabinwebservice/MediaBinServer.asmx?WSDL

When I do, I see the wsdl xml file.

if I go to
http://spmidevap01/mediabinwebservice/MediaBinServer.asmx

I see a listing of available methods. Clicking on one of the methods shows me the request and response schemas, with a notice that the test form is only available for requests from the local machine.

Where is the documentation you're referring to? I've checked the MediaBin Asset Server API Guide, and don't see those kinds of instructions, but maybe I'm looking in the wrong place?

msrinivas

Sorry, not the WSDL page. The second one is the correct URL. There should be a few methods that you can invoke. One of them I think is IsAdministrator. Another should be getservername, getcurrentuser (or something similar). You have to invoke them on the server where web services is installed.

If all of them return results as expected then there is a problem somewhere else.

HTH

donundeen

all those methods work, from the server where the webservices are installed.

We're looking now at the webserver config files; I suspect the problem is there.

msrinivas

Are you using AD or LDAP? You might want to check the event viewer/security log to see if there is anything there.

donundeen

using AD.

Checking even viewer security log, I see a listing for every time I tried to access the API.

Logon attempt by: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Logon account: MediaBinDevService
Source Workstation: dist8109
Error Code: 0xC0000064

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

dist8109 is the name of the machine I'm making the call from.

msrinivas

Compare the security settings on the MB web services virtual directory in prod and dev envs. and make sure that they are the same. That is the only thing that I can think of the top of my head.

donundeen

ok, problem solved, and it wasn't anything to do with the webserver configuration.

- in the c# code I was writing, you specify the swdlURL as part of the service initialization:
service = new MediaBinServer();
Uri u = new Uri(wsdlURl);
CredentialCache cache = new CredentialCache();
cache.Add(u, "Basic", new NetworkCredential(strDomain + "\\" + strUsername, strPassword));

- you ALSO include a "WebReference" in your project, which points to the wsdl. Then you put a "using" line that names the webReference. That is what builds the code so you can call the methods in your c# code.

Anyways, I changed the wsdlURl var used in the service initialization,
but i DIDN'T point the WebReference to the new location; the two values were now incompatible with eachother.

Changing the webreference to point to the new wsdl file, fixed my problem.

pretty boneheaded on my part, but in my defense I'll say it sure seems like I should have gotten a warning about that fact, before I got to the 401 unauthorized. But that's a C#.net thing, not MediaBin.

thanks for your time, maybe my lesson will help someone else.