nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Cannot access IWOVServices from my service code: 401 Unauthorized

GlenW

I have created a WCF service running under IIS 6 on a 2003 server. This service (among other things) creates workspaces using the IWOVServices web service.

When I test my service on MY development PC, it works fine. When I publish my service to our server, I get a 401 Unauthorized error when I try and use the IWOVServices.

Could someone please advise on what I need to do? I'm assuming that this is a security/access/credentials issue. Below is my code.

Any help would be grealy appreciated.

Sincerely,
Glen Wolinsky

----------------------------------------------------

Dim workspaces(0) As IWOV_SVC.NewWorkspace
workspaces(0) = wsToCreate

Try
Dim inMsg As New IWOV_SVC.CreateWorkspacesInput
inMsg.DestinationDatabase = DMSSGlobals.DBName
inMsg.Workspaces = workspaces

Dim wsServices = New IWOV_SVC.IWOVServices
wsServices.Credentials = System.Net.CredentialCache.DefaultCredentials
Dim outMsg As IWOV_SVC.CreateWorkspacesOutput = wsServices.CreateWorkspaces(inMsg)

Catch ex As Exception
Throw New FaultException(Of ProcessingFault)(New ProcessingFault("Error during workspace creation: " & ex.Message))

End Try

Find more posts tagged with

Comments

dabird

This error means that your service account does not have access to the WorkSite repository via trusted login. In your dev environment, you were probably running under your login. Check that the account your service is running under in your production server is a domain account that can perform trusted login to WorkSite.

GlenW

My service is running as a web service, NOT a Windows service. How do I make my web service reach out to IWOVServices using a specific account?

dabird

Then you need to create explicit credentials w/username and password.

The following code is courtesy of MSDN (http://msdn.microsoft.com/en-us/library/system.net.networkcredential.aspx)


Dim myCred As New NetworkCredential(SecurelyStoredUserName, SecurelyStoredPassword, SecurelyStoredDomain)
Dim wsServices = New IWOV_SVC.IWOVServices
wsServices.Credentials = myCred

GlenW

Thank you. That did the trick. I hard-coded my own credentials in to my service code and it worked fine.

Another question, though: Does a user have to reside in Worksite's user list or just Active Directory to have access to the IWOVServices functions?

Thanks,
Glen

GlenW

Nevermind. I finally found my problems and they had to do with the account I was using to access 1. the admin functions and 2. the web site.

I know realize that Worksite uses its own list of users seperately from Active Directory.

Thanks to all for your help.

Sincerely,
Glen Wolinsky

dabird

In order for users to access WorkSite content, they must be defined as users in each database to which they should have access. The server supports two login methods: explicit and trusted. To set up accounts for trusted login, one uses DbAdmin, a utility that ships with the DMS. This facilitates user creation and automatically configures trusted login for each account using AD information. To set up accounts for explicit access, one merely creates a virtual user via the Dbadmin UI. With this type of login, the user logs in with credentials assigned in the database, not his domain login.

The IWOV Services require trusted login access. Therefore, you cannot use a virtual user account to access the services. I'd also like to point out that since this is running as a service, the account credentials you're supplying should probably be part of NRTADMIN, so that you have access to all functionality. For security purposes, I'd even create a domain account with locked down priveleges on the network. After all, you're probably just storing the user/password in plain text in your code. What about future maintenance? Do you really want someone else to have access to your account credentials from updating this code?

Regards,
dabird

GlenW

I am using the NRTAdmin credentials in the code. Using my credentials was just a test to try and isolate the problem.

Thanks for your very detailed explanation. Its seems with that information and the other replies, I now have it working quite well. Thanks again.