Problem running the Dynamic Resolution on a Windows 2008 with IIS7

Question

Hi,

I am trying the Dynamic Resolution sample on a single box Windows 2008 with IIS7. (not part of a domain)
I manage to consume the first webservice but when the toolkit resolves and accesses the second webservice i get the following error in the ESB Management Portal:


I somewhere read that we need to set the Indentity on the EndPoint as follows:

<

 

identity>

<

 

servicePrincipalName value="spn" />

</

 

identity>

due to some breaking change in 3.5 SP1.

I had to do this in order to consume the ESB.NorthAmericanServices/CustomerOrder.asmx webservice.
Since the toolkit uses dynamic resolution to access the ESB.CanadianServices/SubmitPOService.asmx webservice I cannot specify the identify for the endpoint.

This results in :
System.ServiceModel.Security.MessageSecurityException: The HTTP request is unauthorized with client authentication scheme 'Anonymous'. The authentication header received from the server was 'Negotiate,NTLM'. ---> System.Net.WebException: The remote server returned an error: (401) Unauthorized.
   at System.Net.HttpWebRequest.EndGetResponse(IAsyncResult asyncResult)
   at System.ServiceModel.Channels.HttpChannelFactory.HttpRequestChannel.HttpChannelAsyncRequest.CompleteGetResponse(IAsyncResult result)
   --- End of inner exception stack trace ---
 
Server stack trace:
   at System.ServiceModel.AsyncResult.End[TAsyncResult](IAsyncResult result)
   at System.ServiceModel.Channels.ServiceChannel.SendAsyncResult.End(SendAsyncResult result)
   at System.ServiceModel.Channels.ServiceChannel.EndCall(String action, Object[] outs, IAsyncResult result)
   at System.ServiceModel.Channels.ServiceChannel.EndRequest(IAsyncResult result)
 
Exception rethrown at [0]:
   at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage reqMsg, IMessage retMsg)
   at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData& msgData, Int32 type)
   at System.ServiceModel.Channels.IRequestChannel.EndRequest(IAsyncResult result)
   at Microsoft.BizTalk.Adapter.Wcf.Runtime.WcfClient`2.RequestCallback(IAsyncResult result

Is there a solution for this?

Kind Regards,
Koen

Answer 1

Hi Koen,

The error indicates integrated authentication('Negotiate,NTLM') is required on the second web service and anonymous access isn't allowed. You need either provide appropriate credential in the WS client code to pass the integrated auth or enable anonymous access on the second web service in your IIS7 to resolve the issue.

Thanks.

---

WenJun Zhang
MSDN Subscriber Support in Forum
If you have any feedback on our support, please contact [e-mail]