Sharepoint QueryService (search.asmx) access and authentication issue

Question

I am attempting to use the Sharepoint QueryService (_vti_bin/search.asmx) installed on server hosted in our organization.  I have created the service proxy in my Visual Studio 2005 solution and wrote the C# code to communicate with the QueryService.  When I make a simple call, I receive the error "Attempted to perform an unauthorized operation".  I have verified that the IIS virtual directory settings on the Sharepoint service app is set as Anonymous Authentication = Disabled and Windows Authentication = Enabled.  My proxy call code looks like this:

SearchService.QueryService _service = new ConsoleApplication1.SearchService.QueryService();
_service.UseDefaultCredentials = true;
 
string _xml = _service.Status();

Help is greatly appreciated.  Thank you.

 

---

Scott Bland

Answer 1

Hi Scott,

 

Thanks for your post.

When you call the web service, you should set the Credentials property in your code.

// Create a QueryService object.

QueryService.QueryService queryService = new QueryService.QueryService();

 

// Set authentication credentials.

NetworkCredential networkCredential =

CredentialCache.DefaultCredentials.GetCredential(new

Uri(queryService.Url), "NTLM");

queryService.Credentials = networkCredential;

 

if you will call the web service in another SharePoint, you have to set the “URL” property for the web service.

 

http://msdn.microsoft.com/en-us/library/bb852171.aspx

http://www.dotnetmafia.com/blogs/dotnettipoftheday/archive/2008/07/17/how-to-query-search-using-the-web-service.aspx

Answer 2

Thanks.  I gave it a try, but same error.   I am pretty sure it's a Sharepoint installation/configuration issue, because my code works when I point to a different installation of Sharepoint 2010 running on a different server.

---

Scott Bland

Answer 3

The problem turned out to be very basic.  Permissions were not granted to "authenticated user" in any of the Sharepoint permission groups.  Once I added "authenticated user" to the Viewers group, everything worked perfectly.

---

Scott Bland

Answer 4

My fix is to add the user to the viewers group.