I am calling /_vti_bin/Lists.asmx op=GetListItems
in SharePoint 2013 using JAX-WS.
If I browse the using the browser at <site>/sites/subsite/subsite/Lists.asmx?wsdl
(Get) it will ask for a username / password.
If I call the same web service in a java app using JAX-WS (Post), it will allow the request and return a list of items (using an anonymous account). I'm expecting the web service to return 401 unauthorized and issue a challenge instead of serving the request.
I've scoured the documentation and we're guessing that the domain account of the host machine is being used as the authenticated user, but we have no proof yet since if we try to browse the SharePoint site using a browser on the same machine, it prompts for a username and password.
We're gonna try to sniff the HTTP traffic via Fiddler and see what's going on and try to see if we can request the IIS logs from SharePoint (we don't administer the SharePoint site).
I'm checking here if any SharePoint experts might have a clue as to what is happening.