Databases
StackOverflow2013
Postsdbo
POWCF Security - how to allow all callers to this url?
 

Note that there are some explanatory texts on larger screens.

plurals
  1. POWCF Security - how to allow all callers to this url?
    primarykey
    data
    text
    <p>I have a WCF service self-hosted in a windows service environment that works fine over http; over https I am unable to get to one URL without seeing the windows login prompt when running the silverlight application (or just opening the page in IE). I am using the IPolicyRetriever interface to ensure that the ClientAccessPolicy.xml file is found for the Silverlight app. This is working correctly.</p> <p>The service in question has two endpoints defined:</p> <pre><code>&lt;service behaviorConfiguration="defaultBehavior" name="WCFServices.Scheduler"&gt; &lt;endpoint address="WCFServices/Scheduler/" binding="wsHttpBinding" bindingConfiguration="dBinding" contract="WCFServices.IScheduler" /&gt; &lt;endpoint address="" binding="webHttpBinding" contract="WCFServices.IPolicyRetriever" behaviorConfiguration="PolicyBehavior" bindingConfiguration="dBinding" /&gt; &lt;host&gt; &lt;baseAddresses&gt; &lt;add baseAddress="https://myservername.org/" /&gt; &lt;/baseAddresses&gt; &lt;/host&gt; &lt;/service&gt; </code></pre> <p>If I go to the <code>https://myservername.org/</code> I see the test service frontend (with a link to the wsdl). This is exposing the root IPolicyRetriever instance that the Silverlight app uses to pull down the policy file. I can load this and other URLs that expose the WCF service without any login prompts. BUT if I go to <code>https://myservername.org/WCFServices/Scheduler/</code> in IE 8 I am greeted with a windows login. If I reset the security settings on the service and client to use http, I am able to do go to the latter url without the login prompt, and the silverlight app functions as expected. I suspect it has something to do with this WCF service being the only one with two endpoints defined (this windows service hosts 5 other WCF services, all of which only have 1 endpoint defined). Am I missing some authorization rules? I don't understand how that can be because all the other services load without prompts.</p> <p>I would appreciate any help. I need the full <code>https://myservername.org/WCFServices/Scheduler/</code> to serve the WCF service without asking for a login. Thanks for taking the time to read this.</p> <p>As far as security, I only have this as my binding:</p> <pre><code>&lt;binding name="dBinding" maxBufferPoolSize="524288" maxReceivedMessageSize="6553600"&gt; &lt;security mode="Transport"&gt; &lt;/security&gt; &lt;/binding&gt; </code></pre>
    singulars
    1. PO
      singulars
      1. PTAnswer
    1. This table or related slice is empty.
    1. PTQuestion
    1. USTimDog
    1. USTimDog
    plurals
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. PO
      singulars
      1. PTAnswer
    1. VO
      singulars
      1. POWCF Security - how to allow all callers to this url?
      1. This table or related slice is empty.
      1. VTUpMod
    2. VO
      singulars
      1. POWCF Security - how to allow all callers to this url?
      1. USTad Donaghe
      1. VTFavorite
    3. VO
      singulars
      1. POWCF Security - how to allow all callers to this url?
      1. This table or related slice is empty.
      1. VTUpMod
    1. This table or related slice is empty.
 

Querying!

 
Guidance
A row detail

Detail views are divided into sections. All the information in the data section comes from columns in the selected row. The other sections display data from other, related rows.

Related data can be related in a to-one or a to-many fashion. Captions of data related in a to-many fashion link to a list view showing a filtered view of the table.

Try moving around until you find a non-empty to-many entry and click on the label to get to one. You can move back to the root by clicking on the database name in the header.

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload