Web Service Windows Authentication

NurettinA · Post by **NurettinA** » Thu Dec 28, 2023 5:59 am

Hello,

We are trying to establish windows authentication for web service but we could not make it. It is keep asking for credentials and after three attempts the web service responses with "Authorization failed. Invalid user name and password."

We are running windows service with domain user.
We set windows authentication mode under Web Service menu Options -> Authentication
We set necessary users with permission within Hostmonitor
Both hostmonitor and web service is running under the same domain. But they are not running in the same server.

Regards,
Nurettin Akhan

KS-Soft · Post by **KS-Soft** » Thu Dec 28, 2023 7:26 am

Both hostmonitor and web service is running under the same domain. But they are not running in the same server.

Quote from the manual

Windows or HostMonitor authentication (priority: Windows authentication)
If remote operator logged on to the domain, web browser will try to get access to Web Service using Windows authentication mechanism (Kerberos). HostMonitor user account with the same name should be set with "HM or Windows authentication" option and both HostMonitor and WebService processes should be started on the same system (domain member).
Otherwise browser will prompt for user name and password and HostMonitor authentication will be used.

Regards
Alex

NurettinA · Post by **NurettinA** » Mon Jan 08, 2024 4:47 am

Hi Alex,

I can place check mark to all of them but it is not working unfortunately.

Alternatively, I tried to start web service as HTTP on the same server with hostmonitor itself and after first credential prompt I received following error:

AcceptSecurityContext failed. The token supplied to the function is invalid.

Regards,
Nurettin Akhan

KS-Soft · Post by **KS-Soft** » Mon Jan 08, 2024 6:05 am

Windows version? System is a domain member?
HostMonitor version? Started as service or application? Using domain account?
Web Service version? Started as service or application? Using domain account?

Regards
Alex

NurettinA · Post by **NurettinA** » Mon Jan 08, 2024 7:11 am

Hi Alex,

HM is Win. 2019, Web service server is 2016.
HM version is 14.10. Running as a service with domain account.
Web service version is 6.02. I tried with both service (using same domain account with HM) and as an application.

Regards,
Nurettin Akhan

KS-Soft · Post by **KS-Soft** » Mon Jan 08, 2024 3:29 pm

HM is Win. 2019, Web service server is 2016.

As we said (me and the manual) - this will never work. You should install both programs on THE SAME system. Not just the same OS version on 2 systems, it should be the same physical or virtual Windows system.
We just retested HostMonitor + Web Service on Windows Server 2019 - it works.

Have you done everything described in the manual?
https://www.ks-soft.net/hostmon.eng/web ... m#kerberos

E.g. you may see this error (AcceptSecurityContext failed. The token supplied to the function is invalid) when you did not setup SPN or did not setup web browser.

Regards
Alex

NurettinA · Post by **NurettinA** » Tue Jan 09, 2024 2:26 am

Hi Alex,

We are using web service as a reverse proxy gateway on different vlan. In our case we will not be able to use windows auth..

We are kindly requesting for development.

Regards,
Nurettin Akhan

KS-Soft · Post by **KS-Soft** » Tue Jan 09, 2024 7:50 am

Its more hard to make such config secure and not many people need such option, not sure we will do this

You may use "normal" HostMonitor authentication or use RCC (Remote Control Console).

Regards
Alex