Databases
StackOverflow2013
Postsdbo
POCannot get custom authentication working in a WCF RESTful service using webHttpBinding
 

Note that there are some explanatory texts on larger screens.

plurals
  1. POCannot get custom authentication working in a WCF RESTful service using webHttpBinding
    primarykey
    data
    text
    <p>I'm currently investigating WCF for implementing a RESTful service that will run through IIS. Currently our software offers the ability to authenticate users against a range of sources</p> <ol> <li><p>Our own internal user accounts stored in the database</p></li> <li><p>A specified windows active directory where if authentication is successful, a lookup is done to find which internal account the winows one is linked to</p></li> <li>Another LDAP server e.g Novell</li> </ol> <p>So the way I want this to work is that a client sends an http(s) request with an authentication header (basic for now) over SSL, then the service will use custom authentication to implement the process described above.</p> <p>For the moment I am self-hosting the service and trying to get the custom authentication example working, it starts up correctly but all I get when I try to make a request from a browser or a tool where i can attach an authentication header is</p> <p>"Error 101 (net::ERR_CONNECTION_RESET): The connection was reset."</p> <p>I have set a breakpoint in the custom authentication class an it is never reached, so I'm guessing its a problem with the configuration.</p> <p>My app.config;</p> <pre><code>&lt;configuration&gt; ... &lt;system.serviceModel&gt; &lt;bindings&gt; &lt;webHttpBinding&gt; &lt;binding name="secure"&gt; &lt;security mode="Transport"&gt; &lt;transport clientCredentialType="Basic"&gt;&lt;/transport&gt; &lt;/security&gt; &lt;/binding&gt; &lt;/webHttpBinding&gt; &lt;/bindings&gt; &lt;services&gt; &lt;service name="CELCAT.RegisterMarker.RegisterMarker" behaviorConfiguration="myServiceBehavior"&gt; &lt;endpoint address="https://mymachine:8001/servicename" binding="webHttpBinding" bindingConfiguration="secure" contract="myServiceContract" /&gt; &lt;/service&gt; &lt;/services&gt; &lt;behaviors&gt; &lt;serviceBehaviors&gt; &lt;behavior name="myServiceBehavior"&gt; &lt;serviceMetadata httpGetEnabled="True"/&gt; &lt;serviceDebug includeExceptionDetailInFaults="True"/&gt; &lt;serviceAuthorization serviceAuthorizationManagerType="MyServiceAuthorizationManager, authenticatonassembly" /&gt; &lt;serviceCredentials&gt; &lt;userNameAuthentication userNamePasswordValidationMode="Custom" customUserNamePasswordValidatorType="servicenamespace, serviceassembly" /&gt; &lt;serviceCertificate findValue="certname" storeLocation="LocalMachine" storeName="My" x509FindType="FindBySubjectName" /&gt; &lt;/serviceCredentials&gt; &lt;/behavior&gt; &lt;/serviceBehaviors&gt; &lt;/behaviors&gt; &lt;/system.serviceModel&gt; &lt;/configuration&gt; </code></pre> <p>I have read a post that said what I am trying to do is impossible out of the box with WCF and to achieve this I will need to write a custom module or request interceptor as describe below;</p> <p>authentication via custom module; <a href="http://custombasicauth.codeplex.com/" rel="nofollow">http://custombasicauth.codeplex.com/</a></p> <p>authentication via request interceptor; <a href="http://www.codeproject.com/KB/WCF/BasicAuthWCFRest.aspx" rel="nofollow">http://www.codeproject.com/KB/WCF/BasicAuthWCFRest.aspx</a></p> <p>This seems like it should be possible to me, so my questions are </p> <ol> <li>Is what i'm trying to do possible? </li> <li>If so what have I got wrong? or if not which work around is best?</li> </ol>
    singulars
    1. PO
      singulars
      1. PTAnswer
    1. This table or related slice is empty.
    1. PTQuestion
    1. USNathan Hadley
    1. USNathan Hadley
    plurals
    1. PL
      singulars
      1. LTLinked
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. PO
      singulars
      1. PTAnswer
    2. PO
      singulars
      1. PTAnswer
    1. This table or related slice is empty.
    1. COCould you share a little bit about the IIS configuration? I'm assuming you have SSL setup, and that all methods of authentication are disabled on the website except Anonymous?
      singulars
      1. POCannot get custom authentication working in a WCF RESTful service using webHttpBinding
      1. USAndrew Church
    2. COI haven't tried this configuration in IIS yet. Currently I'm self hosting the service so I can debug the custom authentication class. If I can get this configuration working I guess I would have to allow anonymous authentication and insist on SSL?
      singulars
      1. POCannot get custom authentication working in a WCF RESTful service using webHttpBinding
      1. USNathan Hadley
    3. COIf your binding is set to force Transport security and you don't have SSL configured, it will refuse the connection.
      singulars
      1. POCannot get custom authentication working in a WCF RESTful service using webHttpBinding
      1. USAndrew Church
 

Querying!

 
Guidance
A row detail

Detail views are divided into sections. All the information in the data section comes from columns in the selected row. The other sections display data from other, related rows.

Related data can be related in a to-one or a to-many fashion. Captions of data related in a to-many fashion link to a list view showing a filtered view of the table.

Try moving around until you find a non-empty to-many entry and click on the label to get to one. You can move back to the root by clicking on the database name in the header.

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload