asp.net - Hosting WCF Apps IIS Authentication -


I have written a WCF service and need to host it, I can either host an IIS or a self host And I would like to use Windows authentication by setting bindings in the web.config file below:

  & lt; Bindings & gt; & Lt; NetHttpBinding & gt; & Lt; Binding & gt; & Lt; Safety Mode = "Transportation" & gt; & Lt; Transport Customer Credential Type = "Windows" /> & Lt; / Safety & gt; & Lt; / Binding & gt; & Lt; / NetHttpBinding & gt; & Lt; / Binding & gt;  

I am trying to understand what is happening in case of IIS authentication and passing it to a web application, especially:

  • If I host in IIS, do I need to enable Windows certification for the service site in the setting of IIS Administration?

  • If this is the case, why can not the service Windows authentication just like the host itself, from the config file - why IIS needs to be included ? The host itself hosts the web. Nothing more than the config file.

  • Is there a way to handle authentication types (ASP MVC, WCF etc.) form, Windows authentication, Basic) to activate them (Causes if the site is not configured It can be a security risk, if code authentication then the intent of security becomes clear)?

  • In hosting, do I need to enable Windows Authentication for the service site in IIS Administration? Settings

    Yes

    If so, why service windows authentication can not just perform just like the host itself from the config file - why IIS needs Is to join? The host itself hosts the web. Nothing besides the config file is required.

    Because Windows authentication is a feature when it is installed, you can enable or disable this feature for a particular site or service. Note that Windows authentication is not supported on the home or starter version of Windows Vista and Windows® 7.

    The IIS WCF host implementation is completely different from the self hosted implementation and installation of the security reference identification (ServiceSecurityContext.Current.WindowsIdentity) or caller () names to work on the Windows Authentication feature IIS WCF host It is necessary to get things done like work. There is a way in IIS (ASP MVC, WCF etc.) to activate them (cause if the site is not configured correctly it can be a security risk if the code is then protected by security authentication Handling, intent to handle authentication type (form, Windows authentication, basic) becomes clear)?

    You have to install the feature before using it. There is no security risk because it just will not work. For example, if you use Windows authentication to configure your site or service, anonymous users will not be able to access this site or service.


Comments

Popular posts from this blog

java - org.apache.http.ProtocolException: Target host is not specified -

How to access user directory in lazarus? -

java - Gradle dependencies: compile project by relative path -