RE: Web Services CERT

2008-08-22 Thread Dave Watts
 We are creating a web service (CFC / WSDL) on a box and when 
 I attempt to access it via browser, I am prompted to login (network).
 We have to lock down alot of items and was wondering if we 
 installed a CERT on the box, would we be able to access the 
 Web Service w/o the login?
 
 The CFC functions just fine, I have tested it to ensure they 
 are no errors present. The error when registering via CF Admin is:
 Error creating web service. Please check the web service 
 name and/or url.
 
 That is basically what the error reads. Thus lead me to run 
 the CFC locally and found the login issue. I can not pass the 
 username/password via CFInvoke tag as other people externally 
 would be accessing the Web Service.

How you can access the web service is entirely controlled by the
configuration of the server hosting the web service. But, I don't understand
the part about why you can't pass the username and password. Will the
external people connect outside of your app? If so, they'll need usernames
and passwords, or you'll have to have the authentication turned off.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/

Fig Leaf Software provides the highest caliber vendor-authorized
instruction at our training centers in Washington DC, Atlanta,
Chicago, Baltimore, Northern Virginia, or on-site at your location.
Visit http://training.figleaf.com/ for more information!

~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to 
date
Get the Free Trial
http://ad.doubleclick.net/clk;203748912;27390454;j

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:311421
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


Re: Web Services CERT

2008-08-22 Thread Randy Adkins
Well the web service is on an Intranet but will be accesible by other
servers within the agency.
According to the docs (other developer is no longer here), the cfinvoke
command was not utilizing the username/pass auth method.

The server has Anonymous Access turned off since it is internal.

I can call it directly but when setting it up in CFADMIN, it throws the
error mentioned previously.

So I am at a loss right now. (Still learning all the security meassures and
locked down items).



On 8/22/08, Dave Watts [EMAIL PROTECTED] wrote:

  We are creating a web service (CFC / WSDL) on a box and when
  I attempt to access it via browser, I am prompted to login (network).
  We have to lock down alot of items and was wondering if we
  installed a CERT on the box, would we be able to access the
  Web Service w/o the login?
 
  The CFC functions just fine, I have tested it to ensure they
  are no errors present. The error when registering via CF Admin is:
  Error creating web service. Please check the web service
  name and/or url.
 
  That is basically what the error reads. Thus lead me to run
  the CFC locally and found the login issue. I can not pass the
  username/password via CFInvoke tag as other people externally
  would be accessing the Web Service.

 How you can access the web service is entirely controlled by the
 configuration of the server hosting the web service. But, I don't
 understand
 the part about why you can't pass the username and password. Will the
 external people connect outside of your app? If so, they'll need usernames
 and passwords, or you'll have to have the authentication turned off.

 Dave Watts, CTO, Fig Leaf Software
 http://www.figleaf.com/

 Fig Leaf Software provides the highest caliber vendor-authorized
 instruction at our training centers in Washington DC, Atlanta,
 Chicago, Baltimore, Northern Virginia, or on-site at your location.
 Visit http://training.figleaf.com/ for more information!

 

~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to 
date
Get the Free Trial
http://ad.doubleclick.net/clk;203748912;27390454;j

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:311423
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4


RE: Web Services CERT

2008-08-22 Thread Dave Watts
 Well the web service is on an Intranet but will be accesible 
 by other servers within the agency.
 According to the docs (other developer is no longer here), 
 the cfinvoke command was not utilizing the username/pass auth method.
 
 The server has Anonymous Access turned off since it is internal.
 
 I can call it directly but when setting it up in CFADMIN, it 
 throws the error mentioned previously.

If your web service uses web server authentication in IIS, you'll need to
provide a username and password in CFINVOKE or when you register the service
in the CF Admin.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/

Fig Leaf Software provides the highest caliber vendor-authorized
instruction at our training centers in Washington DC, Atlanta,
Chicago, Baltimore, Northern Virginia, or on-site at your location.
Visit http://training.figleaf.com/ for more information!

~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to 
date
Get the Free Trial
http://ad.doubleclick.net/clk;203748912;27390454;j

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:311424
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4


Re: Web Services CERT

2008-08-22 Thread Randy Adkins
If I provide it within the CFAdmin when registering, the account has to
reside on the domain I know.
Have to find out if we have a default account for this specific use.


On 8/22/08, Dave Watts [EMAIL PROTECTED] wrote:

  Well the web service is on an Intranet but will be accesible
  by other servers within the agency.
  According to the docs (other developer is no longer here),
  the cfinvoke command was not utilizing the username/pass auth method.
 
  The server has Anonymous Access turned off since it is internal.
 
  I can call it directly but when setting it up in CFADMIN, it
  throws the error mentioned previously.

 If your web service uses web server authentication in IIS, you'll need to
 provide a username and password in CFINVOKE or when you register the
 service
 in the CF Admin.

 Dave Watts, CTO, Fig Leaf Software
 http://www.figleaf.com/

 Fig Leaf Software provides the highest caliber vendor-authorized
 instruction at our training centers in Washington DC, Atlanta,
 Chicago, Baltimore, Northern Virginia, or on-site at your location.
 Visit http://training.figleaf.com/ for more information!

 

~|
Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to 
date
Get the Free Trial
http://ad.doubleclick.net/clk;203748912;27390454;j

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:311427
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4