How Tos (WCF Security)

- J.D. Meier, Jason Taylor, Prashant Bansode, Carlos Farre, Madhu Sundararajan, Steve Gregersen

How To - Create and Install Temporary Certificates in WCF for Message Security During Development
How To - Create and Install Temporary Certificates in WCF for Transport Security during Development
How To - Impersonate the Original Caller in WCF calling from Web Application
How To - Impersonate the Original Caller in WCF calling from Windows Forms
How To - Perform Input Validation in WCF
How To - Perform Message Validation with Schemas in WCF
How To - Use basicHttpBinding with Windows Authentication and TransportCredentialOnly in WCF from Windows Forms
How To - Use Certificate Authentication and Message Security in WCF calling from Windows Forms
How To - Use netTcpBinding with Windows Authentication and Message Security in WCF from Windows Forms
How To - Use netTcpBinding with Windows Authentication and Transport Security in WCF from Windows Forms
How To - Use SQL Role Provider with Username Authentication in WCF calling from Windows Forms
How To - Use SQL Role Provider with Windows Authentication in WCF calling from Windows Forms
How To - Use Username Authentication with the SQL Membership Provider and Message Security in WCF from Windows Forms
How To - Use wsHttpBinding with Windows Authentication and Message Security in WCF from Windows Forms
How To - Use wsHttpBinding with Windows Authentication and Transport Security in WCF calling from Windows Forms
How To - Use wsHttpBinding with Username Authentication and TransportWithMessageCredential in WCF calling from Windows Forms

Last edited Apr 30 2008 at 10:10 PM by prashantbansode, version 13

Comments

Looooooka Aug 14 at 12:06 PM

Maye you guys could add a howto on implementing TransportWithMessageCredential security without IIS using net.tcp
Verifying the client's certificate...and then verifying the username and password using a custom validator.
Apperantly none of the samples and fixes on the internet really cover all the problems(like getting the server to trust the client's certificate even though it's set to chain trust and the root provider is added on both ends)... :)

Downloads

Recommended release:

Hello World

Thu Jan 17 2008 at 8:00 AM

6956 downloads

More info

Microsoft patterns & practices License for WCF Security Knowledge Base

This license governs use of the accompanying software. If you use the software, you accept this license. If you do not accept the license, do not use the software.

1. Definitions

The terms “reproduce,” “reproduction,” “derivative works,” and “distribution” have the same meaning here as under U.S. copyright law.

A “contribution” is the original software, or any additions or changes to the software.

A “contributor” is any person that distributes its contribution under this license.

“Licensed patents” are a contributor’s patent claims that read directly on its contribution.

2. Grant of Rights

(A) Copyright Grant - Subject to the terms of this license, including the license conditions and limitations in section 3, each contributor grants you a non-exclusive, worldwide, royalty-free copyright license to reproduce its contribution, prepare derivative works of its contribution, and distribute its contribution or any derivative works that you create.

(B) Patent Grant - Subject to the terms of this license, including the license conditions and limitations in section 3, each contributor grants you a non-exclusive, worldwide, royalty-free license under its licensed patents to make, have made, use, sell, offer for sale, import, and/or otherwise dispose of its contribution in the software or derivative works of the contribution in the software.

3. Conditions and Limitations

(A) No Trademark License - This license does not grant you rights to use any contributors’ name, logo, or trademarks.

(B) If you bring a patent claim against any contributor over patents that you claim are infringed by the software, your patent license from such contributor to the software ends automatically.

(C) If you distribute any portion of the software, you must retain all copyright, patent, trademark, and attribution notices that are present in the software.

(D) If you distribute any portion of the software in source code form, you may do so only under this license by including a complete copy of this license with your distribution. If you distribute any portion of the software in compiled or object code form, you may only do so under a license that complies with this license.

(E) The software is licensed “as-is.” You bear the risk of using it. The contributors give no express warranties, guarantees or conditions. You may have additional consumer rights under your local laws which this license cannot change. To the extent permitted under your local laws, the contributors exclude the implied warranties of merchantability, fitness for a particular purpose and non-infringement.

(F) Platform Limitation - The licenses granted in sections 2(A) & 2(B) extend only to the software or derivative works that you create that run on a Microsoft Windows operating system product.

(G) Microsoft Corporation (“Microsoft”) is the contributor of the original software. If you give Microsoft any feedback about the software, you give to Microsoft, without charge, the right to use, share and commercialize your feedback in any way and for any purpose. You also give to third parties, without charge, any patent rights needed for their products or services to use or interface with any specific parts of Microsoft’s software or services that include the feedback. You will not give feedback that is subject to a license that requires Microsoft to license its software or documentation to third parties because Microsoft includes your feedback in them. If Microsoft provides you any support or other services related to the software, it may collect and use technical information gathered as part of those support or services to improve its products or services or provide customized services or technologies to you. Microsoft may disclose this information to others, but not in a form that personally identifies you. The rights in this section 3(G) survive this agreement.

Revised Dec. 2006

Activity

7 30 All days

Page Views	3688
Visits	1714
Downloads	436

View Detailed Stats

patterns & practices: WCF Security Guidance

How Tos (WCF Security)

Downloads

Activity