Windows Vista Beta | WinVistaBeta.com - Message | Security Advice

July 03, 2008  
Subject: Security Advice
Group: microsoft.public.windows.developer.winfx.indigo
Date: 4/2/2008 5:24:25 AM
From: DEE [Email Address Protection]

HI There,

my scenerio:

Client : winform client , the client should prompt a LOGIN form

service : WCF with WSHTTPBINDING ( i am planning to use "message"
Security mode, with windows as client credentials)

Deployment scenerio :

1. only users with windows account are authenticated.
2. may or may not have domain controllers (all m/c may be in
workgroup)

given the above , i am slightly confussed on how to get a common
config settings for point 2.




Could anybody suggest .

Thanks in Advance

Back
Subject: Re: Security Advice
Group: microsoft.public.windows.developer.winfx.indigo
Date: 4/2/2008 3:55:00 PM
From: "Tiago Halm" [Email Address Protection]

If no domain is available (you are in a workgroup) then the client can be
set to authenticate via NTLM instead of kerberos. For kerberos the client
must have the target name (Servie Principal Name) set or the UPN (User
Principal Name). If NTLM, the client can have an empty servicePrincipalName.
Generate the client proxy and look at the generated configuration. Change it
where needed, see below.

Kerberos:
<client>
<endpoint ...>
<identity ...>
<servicePrincipalName value="http/foo.bar.com">
or
<userPrincipalName value="hello@bar.com">

NTLM:
<client>
<endpoint ...>
<identity ...>
<servicePrincipalName>

Tiago Halm

"DEE" <tsdeepak@gmail.com> wrote in message
news:d97b4094-ed0c-45ef-90df-0999b93767ca@i7g2000prf.googlegroups.com...
> HI There,
>
> my scenerio:
>
> Client : winform client , the client should prompt a LOGIN form
>
> service : WCF with WSHTTPBINDING ( i am planning to use "message"
> Security mode, with windows as client credentials)
>
> Deployment scenerio :
>
> 1. only users with windows account are authenticated.
> 2. may or may not have domain controllers (all m/c may be in
> workgroup)
>
> given the above , i am slightly confussed on how to get a common
> config settings for point 2.
>
>
>
>
> Could anybody suggest .
>
> Thanks in Advance



Back