| View previous topic :: View next topic |
| Author |
Message |
NurettinA
Joined: 31 Mar 2023
Posts: 8
|
 Posted: Thu Dec 28, 2023 5:59 am Post subject: Web Service Windows Authentication |
 |
|
Hello,
We are trying to establish windows authentication for web service but we could not make it. It is keep asking for credentials and after three attempts the web service responses with "Authorization failed. Invalid user name and password."
We are running windows service with domain user.
We set windows authentication mode under Web Service menu Options -> Authentication
We set necessary users with permission within Hostmonitor
Both hostmonitor and web service is running under the same domain. But they are not running in the same server.
Regards,
Nurettin Akhan |
|
| Back to top |
|
 |
KS-Soft
Joined: 03 Apr 2002
Posts: 12795
Location: USA
|
| Posted: Thu Dec 28, 2023 7:26 am Post subject: |
|
|
| Quote: | | Both hostmonitor and web service is running under the same domain. But they are not running in the same server. |
Quote from the manual
Windows or HostMonitor authentication (priority: Windows authentication)
If remote operator logged on to the domain, web browser will try to get access to Web Service using Windows authentication mechanism (Kerberos). HostMonitor user account with the same name should be set with "HM or Windows authentication" option and both HostMonitor and WebService processes should be started on the same system (domain member).
Otherwise browser will prompt for user name and password and HostMonitor authentication will be used.
Regards
Alex |
|
| Back to top |
|
|
NurettinA
Joined: 31 Mar 2023
Posts: 8
|
| Posted: Mon Jan 08, 2024 4:47 am Post subject: |
|
|
Hi Alex,
I can place check mark to all of them but it is not working unfortunately.
Alternatively, I tried to start web service as HTTP on the same server with hostmonitor itself and after first credential prompt I received following error:
AcceptSecurityContext failed. The token supplied to the function is invalid.
Regards,
Nurettin Akhan |
|
| Back to top |
|
|
KS-Soft
Joined: 03 Apr 2002
Posts: 12795
Location: USA
|
| Posted: Mon Jan 08, 2024 6:05 am Post subject: |
|
|
Windows version? System is a domain member?
HostMonitor version? Started as service or application? Using domain account?
Web Service version? Started as service or application? Using domain account?
Regards
Alex |
|
| Back to top |
|
|
NurettinA
Joined: 31 Mar 2023
Posts: 8
|
| Posted: Mon Jan 08, 2024 7:11 am Post subject: |
|
|
Hi Alex,
HM is Win. 2019, Web service server is 2016.
HM version is 14.10. Running as a service with domain account.
Web service version is 6.02. I tried with both service (using same domain account with HM) and as an application.
Regards,
Nurettin Akhan |
|
| Back to top |
|
|
KS-Soft
Joined: 03 Apr 2002
Posts: 12795
Location: USA
|
| Posted: Mon Jan 08, 2024 3:29 pm Post subject: |
|
|
| Quote: | | HM is Win. 2019, Web service server is 2016. |
As we said (me and the manual) - this will never work. You should install both programs on THE SAME system. Not just the same OS version on 2 systems, it should be the same physical or virtual Windows system.
We just retested HostMonitor + Web Service on Windows Server 2019 - it works.
Have you done everything described in the manual?
https://www.ks-soft.net/hostmon.eng/webservice/index.htm#kerberos
E.g. you may see this error (AcceptSecurityContext failed. The token supplied to the function is invalid) when you did not setup SPN or did not setup web browser.
Regards
Alex |
|
| Back to top |
|
|
NurettinA
Joined: 31 Mar 2023
Posts: 8
|
| Posted: Tue Jan 09, 2024 2:26 am Post subject: |
|
|
Hi Alex,
We are using web service as a reverse proxy gateway on different vlan. In our case we will not be able to use windows auth..
We are kindly requesting for development.
Regards,
Nurettin Akhan |
|
| Back to top |
|
|
KS-Soft
Joined: 03 Apr 2002
Posts: 12795
Location: USA
|
| Posted: Tue Jan 09, 2024 7:50 am Post subject: |
|
|
Its more hard to make such config secure and not many people need such option, not sure we will do this 
You may use "normal" HostMonitor authentication or use RCC (Remote Control Console).
Regards
Alex |
|
| Back to top |
|
|
|
FAQ
Search
Memberlist
Usergroups
Register
Profile
Log in
