FIX: Web Services Methods Fail When Invoked from Digest Authenticated Applications (318062)

MORE INFORMATION

Steps to Reproduce Behavior

1. Open Notepad and copy the following code to create a Test.asmx file:

   <%@ WebService Language="c#" class="AuthVarsService" %>
   using System;
   using System.Web;
   using System.Web.Services;
   using System.Security.Principal;
   
   public class AuthVarsService : WebService {
   
       [WebMethod]
       public String GetValue() 
      {
   	String _MyString="";
   
   	WindowsImpersonationContext ctx = ((WindowsIdentity)Context.User.Identity).Impersonate();
   
   	_MyString  += "{Request.IsAuthenticated = " + Context.Request.IsAuthenticated + "}<br>";
   	_MyString  += "{AUTH_TYPE = " + Context.Request.ServerVariables["AUTH_TYPE"]  + "}<br>";
   	_MyString  += "{AUTH_USER = " + Context.Request.ServerVariables["AUTH_USER"]  + "}<br>";
   	_MyString  += "{AUTH_PASSWORD = " + Context.Request.ServerVariables["AUTH_PASSWORD"]  + "}<br>";
   	_MyString  += "{LOGON_USER = " + Context.Request.ServerVariables["LOGON_USER"]  + "}<br>";
   	_MyString  += "{REMOTE_USER = " + Context.Request.ServerVariables["REMOTE_USER"]  + "}<br>";
   	_MyString += "{Context.User.Identity.Name =" + Context.User.Identity.Name + "}<br>";
   	_MyString += "{Context.User.Identity.AuthenticationType =" + Context.User.Identity.AuthenticationType  + "}<br>";
   
   	_MyString += "{WindowsIdentity.GetCurrent().Name =" + System.Security.Principal.WindowsIdentity.GetCurrent().Name + "}" ;
   
   	return _MyString;
      }
   
   }
   					

2. Create a virtual directory named App in IIS, and copy the Test.asmx page to its root directory.
3. Right-click the App virtual directory in IIS, and then click Properties.
4. Click the Directory Security tab.
5. Under Anonymous Access and Authentication Control, click Edit.
6. Request the page with the following URL:

   http://localhost/app/test.asmx/GetValue

7. Make sure that only Digest authentication for Windows domain servers is selected.
8. Provide valid logon credentials for Digest authentication.
   
   NOTE: Digest authentication requires Active Directory.