Search results matching tag 'WCF'

WCF - SiteMinder Authentication + Impersonation

victtim — Sat, 19 Dec 2009 05:00:00 GMT

Hi Everyone,

I have a WCF service which provides some information based on the end-user's Windows Login ID. The service exposes an end-point which uses Windows authentication. Subsequently, instead of passing the UserID as a parameter to a operation contract, I can find out who invoked a service operation by looking at the context information as shown below:

WindowsIdentity id = ServiceSecurityContext.Current.WindowsIdentity;

This works fine for Windows Desktop Clients. It also works well for ASP.NET Clients as long as the web app is configured for Windows Authentication AND Impersonation is turned ON.

However, some of the WCF's clients are ASP.NET apps which do NOT use Windows Integrated Authentication. Instead, they use other mechanisms, such as SiteMinder. In these cases, the above code would return the ID under which the web application runs (i.e. ASPNET user account). Subsequently, I cannot get the actual end-user's windows ID.

Could you please provide some advice / guidance as to how to get the user ID. In the ASP.NET app, I can get the userID from the SiteMinder request header ("SM_USER"). Is there a way to pass this information in a secure fashion (similar to how Windows Authentication works)?

Any advice is much appreciated.

Thanks,

Tim

Bing API

chchinmaya — Thu, 17 Dec 2009 05:00:00 GMT

Hi All,

i am new to this functionality could any one give me guidence how to work on bing api......

How to set SecurityMode to Transport? (for WCF REST service via SSL)

darrenwwwa — Fri, 11 Dec 2009 05:00:00 GMT

Before I stared using the Starter Kit, I could set the 'Security' to 'Transport' to allow our webservice to be reached via HTTPS (SSL). Like this:

</security> </binding>

</webHttpBinding>

Now, the config file is empty and everything is being set via attributes on the classes. Current web.config file:

<system.web>
       <compilation debug="true"/>
</system.web>
   <system.serviceModel>
       <serviceHostingEnvironment aspNetCompatibilityEnabled="true"/>

</system.serviceModel>
</configuration>

How do I set the security to Transport using these Attributes?

[ServiceBehavior(IncludeExceptionDetailInFaults = true),
        AspNetCompatibilityRequirements(RequirementsMode = AspNetCompatibilityRequirementsMode.Allowed),
        ServiceContract]
    public partial class Service
    {

        [WebHelp(Comment = "This is my service")]
        [WebInvoke(UriTemplate = "MyService")]
        [OperationContract]
        public OutputClass MyService(MyClass class)
        {

}

Convert a List to a DataTable

pepcoder — Fri, 11 Dec 2009 05:00:00 GMT

private DataTable ToDataTable<T>(List<T> items)
       {

           var tb = new DataTable(typeof(T).Name);

           PropertyInfo[] props = typeof(T).GetProperties(BindingFlags.Public | BindingFlags.Instance);

           foreach (var prop in props)
           {

               tb.Columns.Add(prop.Name, prop.PropertyType);

           }

           foreach (var item in items)
           {

               var values = new object[props.Length];

               for (var i = 0; i < props.Length; i++)
               {

                   values[i] = props[i].GetValue(item, null);

               }

               tb.Rows.Add(values);

           }

           return tb;

       }

I have seen a method like above to convert a generic list to a datatable.Can somebody help me out how can i convert my below generic list to a datatable using the above method.

public List<AsocServiceLayoutField> GetServicesForLayoutFields()

{

//return a list object of AsocServiceLayoutField

}

Please also suggest is there any other solution better than I have mentioned over here..

Thnx in advance

Schema validation & custom serialisation on a WCF REST web service?

darrenwwwa — Tue, 08 Dec 2009 05:00:00 GMT

I am trying to tighten security on a WCF REST webservice.

I would like to validat the XML coming in against a SCHEMA.

I would also like to use a custom deserializer for the incoming message so I can prevent XML Bombs and External Entity Attacks (set a timeout, maxCharactersFromEntity, etc.).

Is this possible? I was hoping I could do this with the new Starter Kit, but I have not yet found how.

The schema validation works great on wsHttpBinding, but not on webHttpBinding.

The November (2009) issue of MSDN magazine has a great article on preventing XML attacks, but I can't figure out how to apply this to the deserialization of the message as our webservice receives it.

Any suggestions?

Thanks!

Re: Passing a list via wcf need help

thinkrajesh — Fri, 04 Dec 2009 05:00:00 GMT

Try this

List<ListingType> lists = client.GetAllListings()); // check if u need to convert this./...

foreach(ListingType type in lists)

{

Console.WriteLine("{0} {1}", type.dataMakeID, type.datanotes); // whatever you want to print...

}

WCF vs ASMX

eddieaks — Tue, 01 Dec 2009 05:00:00 GMT

hi sir/madam,

im just started to learn web services and wcf, and found some articles/blogs differenciate between *.asmx and wcf *.svc. seems wcf has more advantages or enhanced version of *.asmx. does it means wcf exists to replace *.asmx?? dont know which one should i go for.

welcome any comments

regards

want to copy a few files on client computer without actually acknowledging him

victor_vivek — Fri, 27 Nov 2009 05:00:00 GMT

Dear Friends

I am working on Online Test in C#.net and my requirement involves copying some files over client computer without acknowledging him. Means I want to copy some file of size near 200kb on client, these are questions in html format and a single xml file.I want to do this because I want the test takers not to bother about internet connection. If connection goes off still they can continue with their test as the questions has already been copied on his/her computer. I am searching for it for last few days, even a few told its not possible but others told WCF might be helpful. So first of all I want to know is it possible to copy files over client computer ???

2nd Question - I want to know in WCF technology do we need to install something on client computer too, or is it like we have to bother just about server side everything else will bother about itself

Thanks in advance...

Consuming WCF service for development in advance?

mittalpa — Thu, 26 Nov 2009 05:00:00 GMT

Hi
I was asked this question - How do you start consuming a WCF service in advance (read before being implemented/deployed)?

I couldn't think of a very convincing answer and said probably we can generate a proxy and provide some stubs ..etc... you got the idea. Even I was not convinced with myself. The question do make sense as presentation and services are different tiers. One should not be waiting on other in development at least.

Anyways, so I have been thinking since then and need some pointers on this from experts out there. Any suggestions / aproaches?.

Thanks

AJ

Accessing WCF service through SSL

nanite2000 — Thu, 19 Nov 2009 05:00:00 GMT

Hi all,

I have created a WCF service that works fine on localhost, and also works fine when transferred to our live server when served by standard HTTP at:

http://my.domain.com/Service/MyService.svc

The problem is that I want to secure the WCF service using windows authentication over SSL. Is this possible? My WCF service is also served over SSL at:

https://my.domain.com/Service/MyService.svc

I have configured my Web.Config to enable Windows Authentication as follows:

<bindings>
   <wsHttpBinding>
    <binding name="SecureBinding">
     <security mode="Transport">
        <transport clientCredentialType="Windows" />
     </security>
    </binding>
   </wsHttpBinding>
  </bindings>

My service behaviour configuration in Web.Config looks as follows:

<service behaviorConfiguration="AuditServiceBehavior" name="AuditService">
    <endpoint address="" binding="wsHttpBinding" bindingConfiguration="SecureBinding"
     name="Secure" contract="IAuditService" listenUri="https://my.domain.com/Service/MyService.svc">
     <identity>
      <dns value="localhost" />
     </identity>
    </endpoint>
    <endpoint address="mex" binding="mexHttpBinding" contract="IMetadataExchange" />
   </service>

When I try to access the secure URL of my Service through my web browser, I get prompted for a username and password. Upon successfully entering the username and password, I am presented with the following warning message:

XML Parsing Error: no element found
Location: https://my.domain.com/Service/MyService.svc
Line Number 1, Column 1:

But at least the login credentials are accepted by the server.

I then try to access my Service through an ASP.NET web client. In Visual Studio 2008 I click to 'Add Service Reference'. In the 'Add Service Reference' window, I am prompted for the URL of my service. I enter:

https://my.domain.com/Service/MyService.svc

And then click 'OK'. I am immediately prompted to enter a username and password. When I enter identical login details to the web login mentioned earlier, I get prompted for it again, and then I get the following error message:

There was an error downloading 'https://my.domain.com/Service/MyService.svc'.
The request failed with HTTP status 400: Bad Request.
Metadata contains a reference that cannot be resolved: 'https://my.domain.com/Service/MyService.svc'.
The HTTP request is unauthorized with client authentication scheme 'Anonymous'. The authentication header received from the server was 'Negotiate,NTLM'.
The remote server returned an error: (401) Unauthorized.
If the service is defined in the current solution, try building the solution and adding the service reference again.

Questions:

Why can I login through my web browser, but not through Visual Studio with identical credentials? The server logs show the login attempt through Visual Studio was successful. Is this a case of Visual Studio misinterpreting the error message from the server? Is it really telling me that it cannot discover the web services becasue the XML page is not being served?
Why is my SSL server not serving an XML discovery file that the web browser and Visual Stduio can read?

Standard HTTP serves the services out perfectly without altering the Web.Config file.

What have I done wrong? Why does HTTP work, but not HTTPS?

I really appreciate any help or insight you can provide!

Thanks.