Questions tagged [wcf-security]
Questions related to the authentication and authorization services for Windows Communication Foundation (WCF) applications
1,277
questions
0
votes
1
answer
71
views
WCF: Error the recipient of this message did not understand the "Security" header
I have created a WCF service and send a request to the service through soapUI I get an error in response:
The header 'Security' from the namespace 'http://docs.oasis-open.org/wss/2004/01/oasis-200401-...
0
votes
1
answer
24
views
WCF - I have been given a SOAP request and I need to create a SOAP web service to consume this SOAP request
The sample SOAP request will come through like this:
<soapenv:Envelope xmlns:soapenv=http://www.w3.org/2003/05/soap-envelope>
<soapenv:Header xmlns:wsa=http://www.w3.org/2005/08/...
0
votes
1
answer
72
views
C#/WCF not able to make same request as in SOAP ui using wsdl
I have a WSDL where I can send payload successfully through soap,
There is necessity to select pre-emptive auth and auth is basic as shown in image.
sample soap ui
#Auth header that is expected-
&...
0
votes
1
answer
46
views
WCF - Unable to view Claims
My WCF method is not able to see any of my identity claims. I'm able to authenticate the user via the ClaimsPrincipalPermission property but there's information I need out of the claim list in a ...
0
votes
2
answers
194
views
Generated WCF SOAP client uses current user for windows authentication instead of given credentials
I'm kind of new to the whole WCF and SOAP topic so please be kind.
I'm using a generated SOAP Client with .net6. In another project we successfully worked with the same Web Service using the old .net ...
0
votes
1
answer
26
views
Remove WCF security
I haven't worked with WCF much. And as fast as it came, it passed me by and I was on to webmethods and api stuff. So I'm tasked with removing WCF Security from this old service. There are so many ...
0
votes
1
answer
80
views
WCF Error: SecurityTokenValidationException "The X.509 certificate CN=XXX chain building failed..."
I'm having the following error:
System.IdentityModel.Tokens.SecurityTokenValidationException
The X.509 certificate CN=RootCA chain building failed. The
certificate that was used has a trust chain ...
0
votes
1
answer
616
views
Set WCF Service endpoints at server side web config for https
I am stuck in very odd situation and do not know how to solve this issue.
I have very simple WCF service working very fine with http BUT now I want to move it to https.
The issue is Server where it ...
0
votes
1
answer
51
views
WCF, custom authorization with data being passed to service class
I wrote a UserNamePasswordValidator descendant for validation purpose (basicHttpBinding).
The problem is when I validate a user against back service I receive its identifier that I have to use in ...
0
votes
1
answer
1k
views
Exceprion - System.ServiceModel.Security.SecurityNegotiationException: „Could not establish trust relationship for the SSL/TLS secure channel
I make soap client in VisualStudio. I try to send any request with X509Certificate.
I got error:
System.ArgumentException: „The provided URI scheme 'http' is invalid; expected 'https'. Parameter name:...
0
votes
1
answer
96
views
WCF - basicHttpBinding configuration (exception: Identity check failed for outgoing message. The expected DNS identity of the remote endpoint ...)
I'm trying to make a soap client in VisualStudio. First thing I've done was generating proxy class with delivered WSDL file (using Add Service Reference option in VisualStudio). It was generated with ...
0
votes
0
answers
37
views
WCF Ws-Seciurity service configuration
I'm having truble with configuration around my WCF service and WS-Seciurity.
I don't have access to the client side, so far I'm trying to use SoapUI as a client with WS-A adressing, userName, Password ...
0
votes
1
answer
201
views
Binding configuration in soap client service
I'm trying to make a soap client in VisualStudio.
First thing I've done was generating proxy class with delivered WSDL file (using Add Service Reference option in VisualStudio).
It was generated with ...
0
votes
0
answers
101
views
Using JWT for authentication from WCF self hosted seever
We have a self hosted WCF REST API service (not ASP.Net). We currently support Basic and Negotiate authentication.
We would like to add support for JWT in a cookie, so that we dont have to ...
0
votes
1
answer
140
views
KerberosSecurityTokenProvider in System.IdentityModel.dll
Can this api be used for getting service tokens for a particular serviceprincipalname to support kerberos authentication in wpf app.
This app will consuming http service that has kerberos ...
0
votes
1
answer
27
views
How to Call Client Machine Hosted WcfService From WebApplication Hosted on Another Server?
I have a WcfService hosted on Console Application on user(client) computer that provides access to document scanner device (Avision AD240) to scan documents and want to call this service from another ...
0
votes
1
answer
466
views
WCF Client throws error of System.ServiceModel.Security.MessageSecurityException while using Self sign in Certificate Validation
I'm validating the WCF service with self-signed certificates at the server end. When I consume it at client it throws me an error of
System.ServiceModel.Security.MessageSecurityException: 'An ...
1
vote
0
answers
264
views
How to create folders and set read/write folder permissions on a remote server for different users via a WCF web service?
I am aware that I need to use System.IO and System.Security.AccessControl to create folders and set permissions respectively, which I was able to achieve locally on my drive, but, I want to connect to ...
1
vote
1
answer
650
views
Simultaneous client-certificate and username authentication of a SOAP web service under WCF
I have trouble authenticating to a SOAP web service, which requires simultaneous authentication with a client certificate and a username.
The target service, basically, supports three modes of ...
0
votes
0
answers
317
views
How to pass Binding and RemoteAddress to wcf service method
I am trying to access wcf service in asp.net core 3.1. i have added the wcf service as service reference. I am trying to call he client method which contain parameter System.ServiceModel.Channels....
0
votes
0
answers
209
views
C# WCF service client with BinarySecurityToken in .NET 5.0
I have a .NET 5 application that is required to call a WCF service that uses a wsse:BinarySecurityToken header element to carry an auth token obtained from a separate service.
I've got a WSDL and the ...
1
vote
0
answers
42
views
Effect on WCF service with maximum value configurations
I am writing the WCF service that is supposed to have lots of traffic and load.
What is the main disadvantage service has if most of the values in configurations are set to maximum.
For Example, if i ...
0
votes
1
answer
1k
views
SQL Server Report Server (SSRS) via WCF: HTTP request is unauthorized with client authentication scheme 'Ntlm'
I have a .Net Core 3.1 application which is trying to connect to a SQL Server Report Server via WCF, in order to programmatically generate reports on demand.
But the program is not able to ...
0
votes
2
answers
556
views
WCF and custom Authentication (username/password)
I have Windows Forms clients that connect to a WCF service over the internet.
WCF service is hosted in a Windows Service running under dedicated Windows account.
I want to authenticate the clients ...
0
votes
0
answers
117
views
Send Distinguished CA List as part of TLS Handshake Server Hello
We have requirement in our project that our service (WCF REST) will be consuming by different devices. Each device is having unique client certificates which is generating from a common root ...
1
vote
0
answers
63
views
Can WCF client initiate a TLS communication (netTCP)?
I have a WCF client running .Net 4.8, and I want to connect to our WCF service through an AWS Network Load Balancer that uses TLS listener. The problem is I cannot connect through it. I can connect ...
0
votes
1
answer
74
views
How to disallow WCF metadata / wsdl
Is there a way to block the WSDL information on a WCF service. Looking for ways to improve security, blocking access to the WSDL seems like a great way to start.
Any other recommendations also welcome ...
0
votes
1
answer
54
views
TLS issues in application flow due to HTTPS changes in WCF services
Customer Scenario is: TLS 1.0 and TLS1.1 is disabled in the server, and only TLS1.2 is enabled in Registry.
As HTTPS changes for WCF services depends on TLS, they are facing TLS issues in application ...
0
votes
1
answer
124
views
WCF transportWithMessageCredential
My experience with WCF is minimal so I'm sure I'm doing something wrong. But after hours of research I'm either not asking the right questions or I'm just old fashion stuck.
I have a windows form ...
0
votes
1
answer
127
views
WCF Request throwing error when connecting with the certificate
Am trying to connect to saop service developed by a third party they use certificate authentication. I have the certificate and the WSDL file. I tested the request in Soap UI and postman by adding the ...
0
votes
0
answers
188
views
Accessing BasicHttpBinding endpoint fails with System.ServiceModel.Security.SecurityAccessDeniedException: 'Access is denied.'
I have a WCF service exposing basic HTTP binding and HTTPS binding (with federation).
The client app can access the service with HTTPS, but the basic HTTP endpoint method access started giving "...
0
votes
0
answers
49
views
Will a WCF-client ignore the URL scheme in the endpoint address (HTTPS) if binding security is set to NONE
A WCF-client is configured with an endpoint address that specifies HTTPS-scheme, but its basicHttpBinding's Security is set to NONE. Will it ignore the scheme in the endpoint address and send requests ...
0
votes
1
answer
96
views
In WCF, custom Authentication, the Validate method, how to handle exception without stopping service when throwing fault exception?
I have a WCF Service that uses the custom authentication, inherit from UserNamePasswordValidator,
And, I noticed that I have to throw Fault Exception for the authentication to work if user is not ...
0
votes
0
answers
72
views
Receive authorized exception when trying to configure a custom HTTP connection for WCF
I did a search on this issue and at least the exception message is similar to the following article.
HTTP Request unauthorized for NTLM
I have a WCF configuration file that is using custom bindings ...
1
vote
1
answer
369
views
Problem with SSL settings for WCF service running on Azure app service
I'm currently developing a wcf webservice(.NET 4.7.2) that accepts soap messages from different sources. One of the sources requires us to create a endpoint secured by a certificate using a custom ...
4
votes
0
answers
181
views
WCF How to change the Cryptographic Provider for an X.509 Certificate's Private Key
I am trying to extend WCF by following this how-to guide from microsoft. The basic idea is to use a hardware security module as the client-side private key holder, which means all cryptographic ...
1
vote
1
answer
275
views
How to authenticate wsdl get with TransportWithMessageCredential security mode for the endpoint?
I have a WCF endpoint that exposes a API with a basicHttpBinding. This biding is set to use security mode TransportWithMessageCredentialand UserName for clientCredentialType.
Because security is ...
0
votes
1
answer
469
views
Error while connecting exchange server from WCF Service
I am using exchange listener inside wcf service.
Recently we moved the applications to new Server.
we have installed SSL certificate as well in IIS.
we are getting error in ExchangeService....
-1
votes
1
answer
2k
views
How to authenticate/validate JWT for accessing data WCF asp.net
I came accross to work with WCF restful API's with security tokens Json Web Token (JWT). I've created registration and login (created jwt here) service for user. Now I'm unsure about how to ...
0
votes
0
answers
179
views
WCF netTcpBinding hosted in IIS with windows authentication throws "The service does not allow you to log on anonymously"
I have a WCF service with netTCPBinding hosted in Server 'A' in IIS with the default security (mode=Transport). So, obviously it uses Windows authentication. This WCF Service is consumed via a ASP.Net ...
0
votes
1
answer
90
views
Use of ADFS certificate in WIF WSTrustChannelFactory
Can anyone explain the purpose of attaching a "scoped certificate" to the ServiceCertificate collection of a WSTrustChannelFactory when talking to ADFS? I've found the code below in an old inherited ...
0
votes
1
answer
162
views
How do i send a cookie from web app to wcf service?
I'm sure this is not a new question but the truth is that I've not been able to make it work.
I have a C# web forms app that authenticates the user and after validating it creates a cookie and calls a ...
0
votes
1
answer
197
views
how to set value for WSS -Time to Live in wcf services which is calling anoother SOAP service?
how to set value for WSS -Time to Live in wcf services which is calling another SOAP service?
0
votes
1
answer
208
views
Custom Message Encoder WCF - invalid signature
I tried to use the same service as @Misiu like in:
Custom MessageEncoder add attributes to message without modifying structure
I know that post has 3 years but I hope someone knows the answer.
I'm ...
0
votes
1
answer
1k
views
User Secret Error (WCF) : User secrets are not configured correctly in the web.config
I am trying to learn how to use User Secrets. In a previous post I accountered some errors while applying it on App Console. So I decided to use it on WCF project.
When I click on the project and ...
0
votes
0
answers
108
views
Set/Apply security policy to web services/ SOAP service using .net/c#
I am new to using .Net.
Please help me with finding, The easiest way to apply a security policy to the soap web service in c#.
I am using X509store to find a certificate from a store and now want ...
1
vote
1
answer
2k
views
Configuration for ClientCredentials ServiceCertificate authentication not applied or used
I am building a .NET Core 3.1 application where I am trying to call a WCF Service over HTTPS and temporarily disabling SSL authentication for the server certificate.
There is a clearly documented way ...
1
vote
1
answer
1k
views
intermittent error could not establish secure channel for ssl/tls
My WPF(desktop) application is calling two type of services - one WCF service which is hosted in our internal environment and other one is a 3rd party web service.
My application is using .Net ...
0
votes
1
answer
166
views
How to apply basic authentication in WCF?
I'm implementing a WcfClientFactory
public class WcfClientFactory : IDisposable
{
internal const string WildcardConfigurationName = "*";
//We track all channels created by this instance so ...
0
votes
1
answer
102
views
WCF Service - MTOM Security modes & transport/message property's values
Could you please let me know, how/what to set the Mode and ClientCredentialType property in configuration for MTOM-basicHttpBinding.
For ANONYMOUS authentication- Below configuration is working ...