Questions tagged [wcf-security]

Questions related to the authentication and authorization services for Windows Communication Foundation (WCF) applications

Windows Communication Foundation is Microsoft's implementation of the WS-* web service specifications. Its security functionality mainly deals with authentication, authorization and secure over-the-wire transmission of user credentials.

When setting up WCF Security for an application, the following parameters need to be configured:

  • The type of credential required, e.g. NTLM, plaintext, or certificate authentication
  • The security mode: transport mode (e.g. SSL), message mode (SOAP message security), or a combination of both
  • Which endpoint(s) are protected

Once a client successfully connects to an endpoint protected with WCF Security, the server application can examine the security context to determine the identity of the client and to determine its authorizations (which need to be configured separately).

1285 questions
0
votes
1 answer

WCF certificate problem - how do I switch off security for testing purposes?

I'm getting the following error when trying to connect to a WCF web service: WCF web query ... Unhandled Exception: System.ServiceModel.Security.SecurityNegotiationException: The caller was not authenticated by the service. --->…
Contango
  • 76,540
  • 58
  • 260
  • 305
0
votes
0 answers

access to basicHTTP binding through WCF - results in Forbidden

I am trying to access a web service using WCF client application in CS, when trying to access the web method. I am getting the forbidden error. Binding configuration:basicHttpBinding endpoint address=http://xxxxx/yyyy/WebServices/Soap/Query.svc I…
Harsh Mehta
  • 1
  • 1
  • 2
0
votes
1 answer

calling WCF Services hosted on IIS Server with wsHttpBinding having Message security mode from Ios Device

I am calling WCF Service (wsHttpBinding with Message Security mode) from ios device but i am not able to see encrypted request and response . while i am calling service from TestClient i can see request and response is encrypted.i want my request…
sachin
  • 23
  • 6
0
votes
0 answers

WCF changing from Message to Transport security

Currently our services use Message level security, but as we are using Soap UI for testing. After many hours, we discovered that Soap UI is not good with Message level security, something to do with java core I believe. Have tried to unravel the…
gilesrpa
  • 969
  • 1
  • 12
  • 35
0
votes
1 answer

WCF Web service - which is best basicHttpBinding or netTcpBinding

I have gone through several articles, but i want to know the best suited Binding for my project. I have 3 Bulk Sms servers that send sms to customers, As : I have designed a windows form application in which clients enter the mobile numbers and…
Er Mayank
  • 1,017
  • 2
  • 16
  • 39
0
votes
3 answers

WCF Message Level Security using Certificate (X.509) Message Signed and Encrypted

I have a common use case to implement a web service (WCF) and a web client which is consuming this web service. Both Client and Service are sending and receiving Signed and Encrypted messages (Message Level Security). I can have multiple clients…
sezanawa
  • 85
  • 1
  • 7
0
votes
0 answers

Trying to use WebSecurity.CreateUserAndAccount to add to fields to the UserProfile table in Webmatrix

I am trying to add two fields to my UserPofile table in WebMatrix. Everytime I run the code I get this message: Account creation was unsuccessful. Please correct the errors and try again. The username is already in use. But, when I look in the…
0
votes
3 answers

WCF SSL certificate validation error

Trying to get the simple Hello World (via SSL) working but receiving a following error: The remote certificate is invalid according to the validation procedure. The server App.config is:
BreakPhreak
  • 10,940
  • 26
  • 72
  • 108
0
votes
1 answer

Can we apply filters to System.Net WCF tracing log?

I need to filter WCF System.Net trace log. Can we apply XPath filters to System.Net source, the way we apply to messageLogging? My config file system.diagnostics section is as follows:
Purnima Naik
  • 2,393
  • 5
  • 17
  • 25
0
votes
1 answer

How to Secure wcf Services between two application hosted on same machine

enter image description here I am having Two Application. Assume First application name is AAA and second application name is BBB. The Application with name BBB are having wcf services. Now i dont want to my wcf services to application AAA . In…
user3012974
  • 43
  • 2
  • 8
0
votes
1 answer

Choosing a WCF Security Model for background client processes running at multiple domains that call a WCF WS?

I am creating a WCF web service using wsHttpBinding and a corresponding application that calls this web service. The idea behind the application that calls the WS is that it will be installed and run from multiple client sites as a background…
SideFX
  • 839
  • 1
  • 12
  • 34
0
votes
0 answers

WCF Proxy for Service hosted on HTTPS

I have a WCF service that is hosted over HTTPS. My client has to consume this service. While I create my cline tif I use this constructor public MyServiceClient(string endpointConfigurationName, string remoteAddress) : …
sunny
  • 69
  • 1
  • 11
0
votes
0 answers

WCF Routing with Message Signing Results in Encryption Error

I'm experiencing a problem when trying to introduce WCF-Routing into a project containing two target service endpoints which have message security enabled. (Signing only - No encryption) I've set two simple Action based filters which direct to one…
Adam
  • 1
0
votes
1 answer

Help needed to secure my WCF service using Certificate

Hallo all, I am writing service in internet scenario. I have to implement message encryption. I got everything but When I browse this service from IIS I am getting following exception. Server Error in '/MyTestService' Application. Keyset does…
Saghar
  • 693
  • 2
  • 12
  • 24
0
votes
1 answer

I need my custom MembershipProvider to throw an exception on ValidateUser

I created a custom Membership Provider which is now working in production just fine validating my WCF calls. I do have an issue every now and then that for some unknown reason my provider cannot validate the user. In those cases I do not want the…
sebagomez
  • 9,501
  • 7
  • 51
  • 89