WCF Server Configuration for Windows Authentication for wsHttpBinding












1















I have to implement "Windows Authentication" on a service hosted on Server.

I am using "wsHttpBinding". In it "Message" is the default security mode.


Below are my server configuration:



web.config



<authentication mode="Windows" />

<services>
<service name="WCFWsHttpBindingHttps.Service1" behaviorConfiguration="WCFWsHttpBindingHttps.Service1Behavior">
<!-- Service Endpoints -->
<endpoint address="" binding="wsHttpBinding" contract="WCFWsHttpBindingHttps.IService1">
</endpoint>
<endpoint address="mex" binding="mexHttpBinding" contract="IMetadataExchange" />
</service>
</services>
<behaviors>
<serviceBehaviors>
<behavior name="WCFWsHttpBindingHttps.Service1Behavior">
<serviceMetadata httpGetEnabled="true" />
<serviceDebug includeExceptionDetailInFaults="false" />
</behavior>
</serviceBehaviors>
</behaviors>


Below is my IIS configuration:
enter image description here



Inspite of all the configuration I am unable to access my service.
can anyone notify where I am making mistake or have I missed any configuration.



I am receiving below error when I am trying to access my service.
enter image description here










share|improve this question























  • You should define a binding with security mode TransportCredentialOnly and <transport clientCredentialType="Windows" />

    – Aria
    Nov 26 '18 at 6:15













  • @Aria In wsHttpBinding we don't have "TransportCredentialOnly". I need to achieve Windows authentication using "wsHttpBinding" and security mode as "Message".

    – Shashank
    Nov 26 '18 at 6:25
















1















I have to implement "Windows Authentication" on a service hosted on Server.

I am using "wsHttpBinding". In it "Message" is the default security mode.


Below are my server configuration:



web.config



<authentication mode="Windows" />

<services>
<service name="WCFWsHttpBindingHttps.Service1" behaviorConfiguration="WCFWsHttpBindingHttps.Service1Behavior">
<!-- Service Endpoints -->
<endpoint address="" binding="wsHttpBinding" contract="WCFWsHttpBindingHttps.IService1">
</endpoint>
<endpoint address="mex" binding="mexHttpBinding" contract="IMetadataExchange" />
</service>
</services>
<behaviors>
<serviceBehaviors>
<behavior name="WCFWsHttpBindingHttps.Service1Behavior">
<serviceMetadata httpGetEnabled="true" />
<serviceDebug includeExceptionDetailInFaults="false" />
</behavior>
</serviceBehaviors>
</behaviors>


Below is my IIS configuration:
enter image description here



Inspite of all the configuration I am unable to access my service.
can anyone notify where I am making mistake or have I missed any configuration.



I am receiving below error when I am trying to access my service.
enter image description here










share|improve this question























  • You should define a binding with security mode TransportCredentialOnly and <transport clientCredentialType="Windows" />

    – Aria
    Nov 26 '18 at 6:15













  • @Aria In wsHttpBinding we don't have "TransportCredentialOnly". I need to achieve Windows authentication using "wsHttpBinding" and security mode as "Message".

    – Shashank
    Nov 26 '18 at 6:25














1












1








1








I have to implement "Windows Authentication" on a service hosted on Server.

I am using "wsHttpBinding". In it "Message" is the default security mode.


Below are my server configuration:



web.config



<authentication mode="Windows" />

<services>
<service name="WCFWsHttpBindingHttps.Service1" behaviorConfiguration="WCFWsHttpBindingHttps.Service1Behavior">
<!-- Service Endpoints -->
<endpoint address="" binding="wsHttpBinding" contract="WCFWsHttpBindingHttps.IService1">
</endpoint>
<endpoint address="mex" binding="mexHttpBinding" contract="IMetadataExchange" />
</service>
</services>
<behaviors>
<serviceBehaviors>
<behavior name="WCFWsHttpBindingHttps.Service1Behavior">
<serviceMetadata httpGetEnabled="true" />
<serviceDebug includeExceptionDetailInFaults="false" />
</behavior>
</serviceBehaviors>
</behaviors>


Below is my IIS configuration:
enter image description here



Inspite of all the configuration I am unable to access my service.
can anyone notify where I am making mistake or have I missed any configuration.



I am receiving below error when I am trying to access my service.
enter image description here










share|improve this question














I have to implement "Windows Authentication" on a service hosted on Server.

I am using "wsHttpBinding". In it "Message" is the default security mode.


Below are my server configuration:



web.config



<authentication mode="Windows" />

<services>
<service name="WCFWsHttpBindingHttps.Service1" behaviorConfiguration="WCFWsHttpBindingHttps.Service1Behavior">
<!-- Service Endpoints -->
<endpoint address="" binding="wsHttpBinding" contract="WCFWsHttpBindingHttps.IService1">
</endpoint>
<endpoint address="mex" binding="mexHttpBinding" contract="IMetadataExchange" />
</service>
</services>
<behaviors>
<serviceBehaviors>
<behavior name="WCFWsHttpBindingHttps.Service1Behavior">
<serviceMetadata httpGetEnabled="true" />
<serviceDebug includeExceptionDetailInFaults="false" />
</behavior>
</serviceBehaviors>
</behaviors>


Below is my IIS configuration:
enter image description here



Inspite of all the configuration I am unable to access my service.
can anyone notify where I am making mistake or have I missed any configuration.



I am receiving below error when I am trying to access my service.
enter image description here







wcf iis windows-authentication wshttpbinding






share|improve this question













share|improve this question











share|improve this question




share|improve this question










asked Nov 26 '18 at 6:08









ShashankShashank

251113




251113













  • You should define a binding with security mode TransportCredentialOnly and <transport clientCredentialType="Windows" />

    – Aria
    Nov 26 '18 at 6:15













  • @Aria In wsHttpBinding we don't have "TransportCredentialOnly". I need to achieve Windows authentication using "wsHttpBinding" and security mode as "Message".

    – Shashank
    Nov 26 '18 at 6:25



















  • You should define a binding with security mode TransportCredentialOnly and <transport clientCredentialType="Windows" />

    – Aria
    Nov 26 '18 at 6:15













  • @Aria In wsHttpBinding we don't have "TransportCredentialOnly". I need to achieve Windows authentication using "wsHttpBinding" and security mode as "Message".

    – Shashank
    Nov 26 '18 at 6:25

















You should define a binding with security mode TransportCredentialOnly and <transport clientCredentialType="Windows" />

– Aria
Nov 26 '18 at 6:15







You should define a binding with security mode TransportCredentialOnly and <transport clientCredentialType="Windows" />

– Aria
Nov 26 '18 at 6:15















@Aria In wsHttpBinding we don't have "TransportCredentialOnly". I need to achieve Windows authentication using "wsHttpBinding" and security mode as "Message".

– Shashank
Nov 26 '18 at 6:25





@Aria In wsHttpBinding we don't have "TransportCredentialOnly". I need to achieve Windows authentication using "wsHttpBinding" and security mode as "Message".

– Shashank
Nov 26 '18 at 6:25












1 Answer
1






active

oldest

votes


















1














When you are using wsHttpBinding, the security mode must be Transport for Windows Authentication on IIS to be used, in the other side consumers needs to have a server certificate configured.



If you use another security mode you will crossed with below exception:




Security settings for this service require 'Anonymous' Authentication but it is not enabled for the IIS application that hosts this service.




so you have to wsHttpBinding as below:



<wsHttpBinding>
<binding>
<security mode="Transport">
<transport clientCredentialType="Windows"/>
</security>
</binding>
</wsHttpBinding>


If you use Message security mode, it means that you will be sending an encrypted message over a non-secure transport and to encrypt the message you will have to use your own a certificate, in the other side you also have to configure how the client validates the certificate, this ensure the consumers are negotiating to the right service.






share|improve this answer


























  • Can you kindly assist in ws2007FederationHttpBinding for below question. stackoverflow.com/questions/53476104/…

    – Shashank
    Nov 26 '18 at 9:56











Your Answer






StackExchange.ifUsing("editor", function () {
StackExchange.using("externalEditor", function () {
StackExchange.using("snippets", function () {
StackExchange.snippets.init();
});
});
}, "code-snippets");

StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "1"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});

function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});


}
});














draft saved

draft discarded


















StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53475557%2fwcf-server-configuration-for-windows-authentication-for-wshttpbinding%23new-answer', 'question_page');
}
);

Post as a guest















Required, but never shown

























1 Answer
1






active

oldest

votes








1 Answer
1






active

oldest

votes









active

oldest

votes






active

oldest

votes









1














When you are using wsHttpBinding, the security mode must be Transport for Windows Authentication on IIS to be used, in the other side consumers needs to have a server certificate configured.



If you use another security mode you will crossed with below exception:




Security settings for this service require 'Anonymous' Authentication but it is not enabled for the IIS application that hosts this service.




so you have to wsHttpBinding as below:



<wsHttpBinding>
<binding>
<security mode="Transport">
<transport clientCredentialType="Windows"/>
</security>
</binding>
</wsHttpBinding>


If you use Message security mode, it means that you will be sending an encrypted message over a non-secure transport and to encrypt the message you will have to use your own a certificate, in the other side you also have to configure how the client validates the certificate, this ensure the consumers are negotiating to the right service.






share|improve this answer


























  • Can you kindly assist in ws2007FederationHttpBinding for below question. stackoverflow.com/questions/53476104/…

    – Shashank
    Nov 26 '18 at 9:56
















1














When you are using wsHttpBinding, the security mode must be Transport for Windows Authentication on IIS to be used, in the other side consumers needs to have a server certificate configured.



If you use another security mode you will crossed with below exception:




Security settings for this service require 'Anonymous' Authentication but it is not enabled for the IIS application that hosts this service.




so you have to wsHttpBinding as below:



<wsHttpBinding>
<binding>
<security mode="Transport">
<transport clientCredentialType="Windows"/>
</security>
</binding>
</wsHttpBinding>


If you use Message security mode, it means that you will be sending an encrypted message over a non-secure transport and to encrypt the message you will have to use your own a certificate, in the other side you also have to configure how the client validates the certificate, this ensure the consumers are negotiating to the right service.






share|improve this answer


























  • Can you kindly assist in ws2007FederationHttpBinding for below question. stackoverflow.com/questions/53476104/…

    – Shashank
    Nov 26 '18 at 9:56














1












1








1







When you are using wsHttpBinding, the security mode must be Transport for Windows Authentication on IIS to be used, in the other side consumers needs to have a server certificate configured.



If you use another security mode you will crossed with below exception:




Security settings for this service require 'Anonymous' Authentication but it is not enabled for the IIS application that hosts this service.




so you have to wsHttpBinding as below:



<wsHttpBinding>
<binding>
<security mode="Transport">
<transport clientCredentialType="Windows"/>
</security>
</binding>
</wsHttpBinding>


If you use Message security mode, it means that you will be sending an encrypted message over a non-secure transport and to encrypt the message you will have to use your own a certificate, in the other side you also have to configure how the client validates the certificate, this ensure the consumers are negotiating to the right service.






share|improve this answer















When you are using wsHttpBinding, the security mode must be Transport for Windows Authentication on IIS to be used, in the other side consumers needs to have a server certificate configured.



If you use another security mode you will crossed with below exception:




Security settings for this service require 'Anonymous' Authentication but it is not enabled for the IIS application that hosts this service.




so you have to wsHttpBinding as below:



<wsHttpBinding>
<binding>
<security mode="Transport">
<transport clientCredentialType="Windows"/>
</security>
</binding>
</wsHttpBinding>


If you use Message security mode, it means that you will be sending an encrypted message over a non-secure transport and to encrypt the message you will have to use your own a certificate, in the other side you also have to configure how the client validates the certificate, this ensure the consumers are negotiating to the right service.







share|improve this answer














share|improve this answer



share|improve this answer








edited Nov 26 '18 at 6:42

























answered Nov 26 '18 at 6:25









AriaAria

2,7601935




2,7601935













  • Can you kindly assist in ws2007FederationHttpBinding for below question. stackoverflow.com/questions/53476104/…

    – Shashank
    Nov 26 '18 at 9:56



















  • Can you kindly assist in ws2007FederationHttpBinding for below question. stackoverflow.com/questions/53476104/…

    – Shashank
    Nov 26 '18 at 9:56

















Can you kindly assist in ws2007FederationHttpBinding for below question. stackoverflow.com/questions/53476104/…

– Shashank
Nov 26 '18 at 9:56





Can you kindly assist in ws2007FederationHttpBinding for below question. stackoverflow.com/questions/53476104/…

– Shashank
Nov 26 '18 at 9:56




















draft saved

draft discarded




















































Thanks for contributing an answer to Stack Overflow!


  • Please be sure to answer the question. Provide details and share your research!

But avoid



  • Asking for help, clarification, or responding to other answers.

  • Making statements based on opinion; back them up with references or personal experience.


To learn more, see our tips on writing great answers.




draft saved


draft discarded














StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53475557%2fwcf-server-configuration-for-windows-authentication-for-wshttpbinding%23new-answer', 'question_page');
}
);

Post as a guest















Required, but never shown





















































Required, but never shown














Required, but never shown












Required, but never shown







Required, but never shown

































Required, but never shown














Required, but never shown












Required, but never shown







Required, but never shown







Popular posts from this blog

Tonle Sap (See)

I get strange results when I access the Sqlitedatabase with Unity C# via XAMPP

Guatemaltekische Davis-Cup-Mannschaft