WSE910 and 'Root element is missing.'

[Ollie Riches]

I am having trouble with WSE3 and domain authentication\authorisation for a
web service.

When using a the 'NETWORK SERVICE' account for the application pool in IIS
6.0 the web service work perfectly correctly, we are able to call the web
service end point and we can authenticate through our custom WSE
authentication token manager, but when we switch over to a domain service
account we have created to run the application pool we get the following
error:

'WSE910: An error happened during the processing of a response message, and
you can find the error in the inner exception. You can also find the
response message in the Response property.'

The inner exception states:

'Root element is missing.'

The domain account is a member of the IIS work process group on the local
box, it as the required security permissions for the directory where the web
service is installed.

What is very strange is that when this service account was made a domain
admin temporarily the call worked perfectly fine.

So the question is what permissions does WSE3 require so that we can get our
domain service account to work correctly.

Cheers in advanced

Ollie Riches

 

[Wes Shaddix]

I've ran into the same situation. For me, the problem was with the
permissions on the domain account that we were using, even though I had
already ran aspnet_regiis -ga <domain\account>.

Make sure you've ran the above command and manually verify that the domain
account has the permissions outlined at
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnnetsec/html/SecNetHT01.asp

Wes