Need urgent help pleaseeeeeeeeeeeeeee!!!!

[nap]

Hi
I've developed an asp.net application
It accesses project srver 2003 located on remote server
my asp.net application is hosted on my local m/c and it runs very well
by using integreted windows authentication and allows me to logon to
projec tserver from my code
but when i try to run the asp.net app from remote m/c it returns an
error "The remote server returned an error: (401) Unauthorized."
I cheked the URL and the login acc
All are same as the one when i run it from my m/c


I realy donno what changes should I do
Can anybody please help me ????

Thanks
In advance

 

[ckc]

It sounds like you are having the multi hop issues. You credentials did not
get forwarded from iis to the project server. If I am not misstaking, it is
part of the web security to only forward credential only once from a client
to the server. In this case from your browser to iis.

try setting impersonate to truth in your web.config. It should help.

 

[William Raymond [MVP]]

CKC's note is probably true but I could use some more information...

How are you accessing the PDS? Are you using Windows Authentication (using
a user's login ID), logging in with a Windows Service account or using a
Project Server username/password combination?

This is what will help us debug this for you.

In the meantime, here is an article that describes authentication methods
and issues with PDS:

http://msdn.microsoft.com/library/d...3_ta/html/ODC_PJHostingPDSWebApplications.asp

-Bill

 

[nap]

I've Set the Impersonate =True in Web.config file
Let me again explain the whole scenario
Actlually The web app residing on my machine can access the PDS on
remote machine through Windows authentication
But whn Other users try to access the ASP.NET app on my machine ,they
are not able to logon to PDS even if they use the same credentials as i
use on my PC
the flow is Remote machine -> Mylocal machine (whihc hosts the ASP.NEt
web app ->(PDS call) ->PDS machine

What should i d o??????/


Plzzzzzzzzzzzzzzz waiintg for replyyyyyyyyyyyyy

Thanks
in advance

 

[nap]

I've Set the Impersonate =True in Web.config file
Let me again explain the whole scenario
Actlually The web app residing on my machine can access the PDS on
remote machine through Windows authentication
But whn Other users try to access the ASP.NET app on my machine ,they
are not able to logon to PDS even if they use the same credentials as i
use on my PC
the flow is Remote machine -> Mylocal machine (whihc hosts the ASP.NEt
web app ->(PDS call) ->PDS machine

What should i d o??????/


Plzzzzzzzzzzzzzzz waiintg for replyyyyyyyyyyyyy

Thanks
in advance

 

[ckc]

What is your IIS Directory Security setting? Make sure that Integrated
Windows authentication is checked. Also try to disable Anonymous access.

 

[nap]

Hey CKC
I've already checked only windows integreted authentication in IIS
and the anonymus access is disabled
still its not working
Can you please suggesttt me somethiiinnggggggg plzzzzzzzzzzz
its very imp

Thanks

 

[William Raymond [MVP]]

Hi Nap,

We are responding fairly quickly and are asking common questions. You are
not winning too many points with all the long
pppppppplllllllllllllllllzzzzzzzzzzzzzz messages. We are here to help for
free and understand your frustration, but please respect newsgroup edicate.

Okay, to come up with a helpful answer, I think I need to understand one
more thing. When someone logs on to your computer, you say users "are not
able to logon to PDS even if they use the same credentials as i use on my
PC"...

1) Does this mean you have tried logging in and access the PDS app from a
remote machine and it works? If so, have you tried from one of the
non-working user's computers? Basically, I want to know if you can follow
the process the users should and get positive results?

2) How are people logging into your machine? Are they using Terminal
Services or some other method? If there is a front-end to the Windows or
Web app, it would be helpful for you to explain how that works.

3) In the MS Project SDK (found at this website:
http://www.microsoft.com/downloads), there is a tool called PDSTest.NET.
Have you tried hosting this app and seeing if that works? This might give
you some insight into whether it is with your application's design or not
(for example, maybe your app does not account for something that the
PDSTest.net app does).

4) Your description of remote machine->Your machine->server is helpful. Now
describe your applications flow (i.e. user runs Terminal Services->Logs in
with their personal active directory account on the same domain->Runs
executable on my machine->My PDS app requests their username/password->PDS
call made with the requested username/password->Error 'x' from server).

I will check back frequently on your posting and try to help you out. The
reasons for why you are not getting a fast response is because there are
just too many reasons for why you are experiencing this problem.

On another note, I would like to know why people are accessing the
application from your desktop. This is not a good design to have hosted
applications on a personal desktop computer and depending on your computer's
settings, there are other security considerations that need to be take into
consideration. More on that, if needed, after I see your respponse.

-Bill

 

[nap]

Hello William
Let me first apologize!
And thank you for helping me
Okay here are the details
my asp.net aplication when i run it by pressing F5 it runs and works
fine
This application will be hosted on my machine for temporary use
later on it will be moved to one of the sharepoint servers
So in short this application is going to reside on a server as a web
site
For time being consider it will be on my machine only i.e. localhost
And the users will access the application located on my machine from
their machine by using some
url e.g. http://mymachinename/ASpapplication/
So this will open the default page (.aspx) of my application
But here before loading the first page the application is supposed to
populate some drop down lists on the form by retriving some data from
Project server
But since application can not logon to porject server ,those lists are
empty
Default form is seen but the lists are not populated

And if the same application is executed on my machine by using the url
http://localhost/ASpapplication/\
It works fine

I hope this makes a bit sense

let me know if I should explain more properly

Thanks
Nap

 

[William Raymond [MVP]]

Hi Nap,

It would have been helpful to know if the PDS call is attempting to use each
individual's AD account or if it is using a 'service' account of some sort
that you created.

At any rate, it sounds like you are using pass-thru. Assuming also that
your computer has Windows 2003 and IIS installed, it sounds like you are
running into a permissions issue.

Here is what I think the problem is:
The user probably does not have a login on Project Server using their AD
account. If that is the case, the user may not have the appropriate
Security Group/Category set up to perform the same function on their
computer.

I would strongly recommend you run the PDSTest.NET application on their
computer and perform a similar PDS call on their computer to see if this is
not related to their login access in PWA.

Let me know how the test goes. Otherwise, I think you are going to have to
investigate the Event Logs on your PC, the Project Server PC and the IIS
logs on both to see if you can trap when the user is losing their
authentication.

-Bill

 

[Denis Mederake]

When passing through credentials to a web application you have to take care
of some things:

- in the ActiveDirectory the accounts must be allowed to BE delegated
- the account the IIS runs the application with (or the machine account)
must be allowed to delegate credentials
- when invoking a WebService programmatically you must tell the ServiceProxy
to use the users logon. In my C# application for example I must call
WebReferenceObject.Credentials= System.Net.CredentialCache.DefaultCredentials;

According to your post the IIS settings semm to be alright.

I hope that helps