SOAP security negotiation

Hi misters, I'm a newbie to WCF and I am trying to run an application web
that calls to a service WCF and I am having a bit of trouble. The client of
service WCF is an application web.

I finally got my service up and running and it is hosted on IIS - WCF
service hosting in IIS.

I get WDSL like this
http://localhost:2121/TINSA.Tareas/service.svc?wsdl, and it's right.

Aftwer I got my service up and running I proceeded to create my proxy
classes with svcutil.exe

svcutil.exe http://localhost:2121/TINSA.Tareas/service.svc?wsdl

and that created the proxy class and another config file which I copied
into application web (rename output.config to web.config).


I try to connect to service from Client application, it fail with exception.
The error message is the following:

SOAP security negotiation with
'http://localhost:2121/TINSA.Tareas/service.svc' for target
'http://localhost:2121/TINSA.Tareas/service.svc' failed


I don't know what happened it.

Any help will be appreciated, thanks in advance.

Greetings.

--
http://www.alhambra-eidos.es/web2005/index.html
www.kiquenet.net

Check this post out:
http://forums.microsoft.com/MSDN/Sho...88288&SiteID=1

Which I'll quote a potential solution from:

<snip>
If you're running your service in a console or winform app (which you are)
then you need to set your UserPrincipalName on your client to the username
running the server. If the service is running as either the System or
NetworkService account then this is not necessary as it will use the default
SPN (host\machine).

The config for this on the client would look something like this:

<endpoint address="http://localhost:8001/dvdcollection/service"
binding="wsHttpBinding" bindingConfiguration="MyWSHttpBinding"
contract="IMyContract" name="MyWSHttpBinding">
<identity>
<userPrincipalName value="smason@redmond.corp.microsoft.com" />
</identity>
</endpoint>

This is not necessary on the local machine as it will use NTLM to
authenticate.
</snip>

Ron

"Alhambra Eidos Kiquenet" wrote:

>
> Hi misters, I'm a newbie to WCF and I am trying to run an application web
> that calls to a service WCF and I am having a bit of trouble. The client of
> service WCF is an application web.
>
> I finally got my service up and running and it is hosted on IIS - WCF
> service hosting in IIS.
>
> I get WDSL like this
> http://localhost:2121/TINSA.Tareas/service.svc?wsdl, and it's right.
>
> Aftwer I got my service up and running I proceeded to create my proxy
> classes with svcutil.exe
>
> svcutil.exe http://localhost:2121/TINSA.Tareas/service.svc?wsdl
>
> and that created the proxy class and another config file which I copied
> into application web (rename output.config to web.config).
>
>
> I try to connect to service from Client application, it fail with exception.
> The error message is the following:
>
> SOAP security negotiation with
> 'http://localhost:2121/TINSA.Tareas/service.svc' for target
> 'http://localhost:2121/TINSA.Tareas/service.svc' failed
>
>
> I don't know what happened it.
>
> Any help will be appreciated, thanks in advance.
>
> Greetings.
>
> --
> http://www.alhambra-eidos.es/web2005/index.html
> www.kiquenet.net
>

Thanks, mister.

Now, it's works fine.

I have commented this line in web.config

<identity>
<userPrincipalName value="user@group..." />
</identity>

I guest if there was problems with KDC (Kerberos)...I'm not expert in
security...

Thanks. Greetings

--
http://www.alhambra-eidos.es/web2005/index.html
www.kiquenet.net



"Ron" wrote:

> Check this post out:
> http://forums.microsoft.com/MSDN/Sho...88288&SiteID=1
>
> Which I'll quote a potential solution from:
>
> <snip>
> If you're running your service in a console or winform app (which you are)
> then you need to set your UserPrincipalName on your client to the username
> running the server. If the service is running as either the System or
> NetworkService account then this is not necessary as it will use the default
> SPN (host\machine).
>
> The config for this on the client would look something like this:
>
> <endpoint address="http://localhost:8001/dvdcollection/service"
> binding="wsHttpBinding" bindingConfiguration="MyWSHttpBinding"
> contract="IMyContract" name="MyWSHttpBinding">
> <identity>
> <userPrincipalName value="smason@redmond.corp.microsoft.com" />
> </identity>
> </endpoint>
>
> This is not necessary on the local machine as it will use NTLM to
> authenticate.
> </snip>
>
> Ron
>
> "Alhambra Eidos Kiquenet" wrote:
>
> >
> > Hi misters, I'm a newbie to WCF and I am trying to run an application web
> > that calls to a service WCF and I am having a bit of trouble. The client of
> > service WCF is an application web.
> >
> > I finally got my service up and running and it is hosted on IIS - WCF
> > service hosting in IIS.
> >
> > I get WDSL like this
> > http://localhost:2121/TINSA.Tareas/service.svc?wsdl, and it's right.
> >
> > Aftwer I got my service up and running I proceeded to create my proxy
> > classes with svcutil.exe
> >
> > svcutil.exe http://localhost:2121/TINSA.Tareas/service.svc?wsdl
> >
> > and that created the proxy class and another config file which I copied
> > into application web (rename output.config to web.config).
> >
> >
> > I try to connect to service from Client application, it fail with exception.
> > The error message is the following:
> >
> > SOAP security negotiation with
> > 'http://localhost:2121/TINSA.Tareas/service.svc' for target
> > 'http://localhost:2121/TINSA.Tareas/service.svc' failed
> >
> >
> > I don't know what happened it.
> >
> > Any help will be appreciated, thanks in advance.
> >
> > Greetings.
> >
> > --
> > http://www.alhambra-eidos.es/web2005/index.html
> > www.kiquenet.net
> >