Authenticating a Web Service

Question

We are deploying our ASP.NET 3.5 app to a production server for beta testing.

Each page is secured using SSL.

On our homepage (default.aspx) we have web services which populate flash objects.

I am getting an error:

The HTTP request is unauthorized with client authentication scheme 'Anonymous'. The authentication header received from the server was 'Negotiate,NTLM'.

Also, when using firefox, receive the Windows Login pop up screen.

Does anyone have any clue what or why this is happening?

Much thanks!

Answer 1

Sounds like IIS isn't configured for anonymous access.

If you believe you have it setup correctly (sounds like it isn't), then you might try troubleshooting your connection with Wfetch.

Answer 2

IIS is setup for Anonymous Access.

Anyone else?

Answer 3

I would think that the request from Flash to the secure web services doesn't have credentials or that the secure certificate in the response can't be validated.

Probably both.

So in flash there will probably need to be some code like:

request.Username = "xyz"
request.Password = "***"

or something similar

In .net there is a way to manually override the validation of a certificate for the request. I'm not sure how you would do that in Flash.

I'll update this if I find a sample for the .net way.