IIS 7.5 site using impersonation does not have permissions to access Sharepoint web services -
IIS 7.5 site using impersonation does not have permissions to access Sharepoint web services -
edit updated new information
i've been trying configure asp.net site utilize windows authentication impersonation, , utilize phone call sharepoint 2010 web services.
i've enabled impersonation , windows authentication on site, , given in "classic" .net 4.0 app pool identity. display user logged in. when site run server, works fine - user impersonated correctly. tried several user accounts (but local admins...). can upload file sharepoint records "created by" "modified by" site user (and not app pool identity). situation want.
when run client machine, fails. page loaded, seems fail when tries access sharepoint lists service 401 unauthorised. farther inquiries have shown me next info sharepoint weblogs when calling list.asmx service:
2012-01-12 22:42:52 10.197.104.208 post /iain/cesa/_vti_bin/lists.asmx - 80 - 10.143.16.141 mozilla/4.0+(compatible;+msie+6.0;+ms+web+services+client+protocol+4.0.30319.239) 401 0 0 13 2012-01-12 22:42:52 10.197.104.208 post /iain/cesa/_vti_bin/lists.asmx - 80 - 10.143.16.141 mozilla/4.0+(compatible;+msie+6.0;+ms+web+services+client+protocol+4.0.30319.239) 401 1 2148074254 3 2012-01-12 22:42:52 10.197.104.208 post /iain/cesa/_vti_bin/lists.asmx - 80 - 10.143.16.141 mozilla/4.0+(compatible;+msie+6.0;+ms+web+services+client+protocol+4.0.30319.239) 401 1 5 1
from: http://support.microsoft.com/kb/969060 know that: "the win32 status of "2148074254" (also defined -2146893042 / 0x8009030e / sec_e_no_credentials) means "no credentials available in security package." in other words, client has not sent credentials."
this looks web site not passing impersonated credentials sharepoint site. there way of solving this? because works server i'm sure can work, i'm @ wits end trying find solution.
this caused windows authentication using ntlm rather kerberos (i thought using kerberos...).
i'm looking getting kerberos configured, big task. in meatime have moved site , hosted on same sharepoint web front end end web services contacting. there double hop, no need deleaged credentials, , works :)
sharepoint-2010 permissions iis-7.5
Comments
Post a Comment