security token could not be authenticated or authorized

[salmonen]

exception code
http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd%3AFailedAuthentication

inner exception error
WSE3003: The certificate's trust chain could not be verified. Please check if the certificate has been properly installed in the Trusted People Certificate store. Or you might want to set allowTestRoot configuration section to true if this is a test certificate.

the input trace fragment at Microsoft.Web.Services3.Security.Tokens.SecurityTokenManager.LoadBinarySecurityToken(XmlElement element) at Microsoft.Web.Services3.Security.Tokens.SecurityTokenManager.GetTokenFromXml(XmlElement element) at Microsoft.Web.Services3.Security.Security.LoadToken(XmlElement element, SecurityConfiguration configuration, Int32& tokenCount) at Microsoft.Web.Services3.Security.Security.LoadXml(XmlElement element) at Microsoft.Web.Services3.Security.Security.CreateFrom(SoapEnvelope envelope, String localActor, String serviceActor) at Microsoft.Web.Services3.Security.ReceiveSecurityFilter.ProcessMessage(SoapEnvelope envelope) at Microsoft.Web.Services3.Pipeline.ProcessInputMessage(SoapEnvelope envelope)

我的程序是个web service，就叫myservice， 它还去调用另外一个https的用于验证的web service，叫STS service， 它会返回token给my service。 但是老出现这个错误，而且我已经把allowTestToot改为true，还是出现这个错误。 而且用户名密码也没问题。最奇怪的是有的机器可以正常运行，有的机器就不行。 谁能帮我解决下？非常感谢。。。。

[dresdenwind]

我也遇到一个类似的问题。 我觉得我遇到的问题在于 SOAP REQUEST 的内容不够规范， 不知楼主有没有什么点子？

见：

http://topic.csdn.net/u/20090909/17/d961a690-afac-4ffc-a375-da6856c031a9.html?19946

[zhongjiekangping]

返回 token 是用来做authentication , 用户名密码 也是用来authentication, 也就是身份验证

, 两种方式而已