WebService Authentication

[IsValidUN]

Can IIS6 suport both Anonymous and integrated authentication on the same service?
By this I mean can it use crentials (integrated widows) when they are present, but if they don't exist allow for an anonymous connection (service would run under a predefined account).

[kenobewan]

Can IIS6 suport both Anonymous and integrated authentication on the same service?
By this I mean can it use crentials (integrated widows) when they are present, but if they don't exist allow for an anonymous connection (service would run under a predefined account).

Yes they can coexist. This is used where there is a need to apply authentication in one section specified in a config file. Anonymous can be treated as certain account permissions or they can be further defined running under the application pool. A web service would normally run under forms authentication I would have thought?

[IsValidUN]

So do you mean it is simply a matter of setting the configuration properties in web.config?

Do you have an example of this or know where I can find one?

I have set IIS for:
Enable Anonymous and Integrated Authentication, what more would be needed?

I know I've read somewhere that if anonymous is enabled then the credentails are not evaluated?


Thanks

[kenobewan]

So do you mean it is simply a matter of setting the configuration properties in web.config?

Do you have an example of this or know where I can find one?

I have set IIS for:
Enable Anonymous and Integrated Authentication, what more would be needed?

I know I've read somewhere that if anonymous is enabled then the credentails are not evaluated?


Thanks

You can set up authentication in web.config. If you are using asp.net you can further define this using membership and profiles. Alternatively you could use your authentication with in conjunction with, for eg, a network service account to restrict the default permissions. If you search the site and google, you will find articles on setting up these things. HTH.