Question

我想将UserNamePasswordValidator与wsDualHttpBinding一起使用，但这是我的问题：

如果我使用：

<security mode="Message" > <message clientCredentialType="UserName" /> </security>

我得到了这个例外：

外发邮件的身份检查失败。远程端点的预期DNS身份是“本地主机”。但是远程终端提供了DNS声明＆＃39; Theatre＆＃39;如果这是一个合法的远程端点，您可以通过明确指定DNS身份＆＃39;剧院＆＃39;来解决问题。在创建通道代理时作为EndpointAddress的Identity属性。

如果我将DNS更改为剧院，则会超时。如果我不使用安全模式，则不会调用UserNamePasswordValidator。我读过如果我使用wsHttpBinding，我可以将安全性设置为TransportWithMessageCredential，这可以工作，但我需要双重。这是配置：

     <system.serviceModel>
     <bindings>
      <wsDualHttpBinding>
        <binding maxReceivedMessageSize="268435456" maxBufferPoolSize="268435456">
          <readerQuotas maxDepth="32" maxStringContentLength="8192" maxArrayLength="268435456" maxBytesPerRead="4096" maxNameTableCharCount="2147483647" />
              <security mode="Message" >
            <message clientCredentialType="UserName"  />
          </security> 
        </binding>
      </wsDualHttpBinding>
    </bindings>
          <services>
      <service name="WcfService1.Service1" behaviorConfiguration="ServiceBehavior">      
        <endpoint address="" binding="wsDualHttpBinding" contract="WcfService1.IService1">
          <identity>
            <dns value="localhost" />
          </identity>
        </endpoint>
        <endpoint address="mex" binding="mexHttpBinding" contract="IMetadataExchange" />
      </service>
    </services>   
    <behaviors>
      <serviceBehaviors>
        <behavior name="ServiceBehavior">
          <!-- To avoid disclosing metadata information, set the values below to false before deployment -->
          <serviceMetadata httpGetEnabled="true"/>
          <serviceCredentials>
            <userNameAuthentication userNamePasswordValidationMode="Custom" customUserNamePasswordValidatorType="WcfService1.OperatorValidator, WcfService1"/>
            <serviceCertificate findValue="Theater" storeLocation="LocalMachine" storeName="TrustedPeople" x509FindType="FindBySubjectName"/>
          </serviceCredentials>   
        </behavior>
      </serviceBehaviors>
    </behaviors>
    <protocolMapping>
      <add binding="basicHttpsBinding" scheme="https" />
    </protocolMapping>
    <serviceHostingEnvironment aspNetCompatibilityEnabled="true" multipleSiteBindingsEnabled="true" />
  </system.serviceModel>
  <system.webServer>
    <modules runAllManagedModulesForAllRequests="true" />
    <!--
        To browse web app root directory during debugging, set the value below to true.
        Set to false before deployment to avoid disclosing web app folder information.
      -->
    <directoryBrowse enabled="true" />
  </system.webServer>

验证者：

namespace WcfService1
{
    public class OperatorValidator : UserNamePasswordValidator
    {

        public override void Validate(String userName, String password)
        {
            if (String.IsNullOrEmpty(userName) || String.IsNullOrEmpty(password))
                throw new SecurityTokenException("Username and password cannot be empty.");

            try
            {
                using (Theater4Entities entities = new Theater4Entities())
                {

                    Byte[] passwordBytes;

                    using (SHA1CryptoServiceProvider provider = new SHA1CryptoServiceProvider())

                    {
                        passwordBytes = provider.ComputeHash(Encoding.UTF8.GetBytes(password)); 
                    }

                    Operator currentOperator = entities.Operator.FirstOrDefault(op => op.UserName == userName);


                    if (currentOperator == null || !passwordBytes.SequenceEqual(currentOperator.UserPassword))

                        throw new SecurityTokenException("Username or password does not match.");


                }
            }
            catch (SecurityTokenException)
            {
                throw;
            }
            catch
            {
                throw new SecurityTokenException("Unexpected error occured.");
            }
        }
    }
}

这是我抓住异常的地方：

public WAF1ClientViewModel()
{
    _callbackService = new RentalServiceCallback();
    InstanceContext context = new InstanceContext(_callbackService);
    _client = new Service1Client(context);
 }
.
.
.
  private void LoginExecuted(PasswordBox passwordBox)
    {
        try
        {
            _client.ClientCredentials.ServiceCertificate.Authentication.CertificateValidationMode = X509CertificateValidationMode.None;

            _client.ClientCredentials.UserName.UserName = UserName;
            _client.ClientCredentials.UserName.Password = passwordBox.Password;

            _client.Login(UserName);
            _isLoggedIn = true;
            OnLoginSuccess(); 
        }
        catch
        {
            OnLoginFailed();
        }
    }

我会接受任何替代方法。

Answer 1

WCF方

您必须使用自定义绑定并使用 authenticationMode =“SecureConversation”，如下所示

<customBinding>
    <binding name="CustomWSDualHttpBinding" receiveTimeout="00:10:00" sendTimeout="00:10:00">
      <reliableSession inactivityTimeout="00:01:00" maxPendingChannels="16384" maxTransferWindowSize="4096" maxRetryCount="2"/>
      <security authenticationMode="SecureConversation" requireDerivedKeys="true">
        <secureConversationBootstrap authenticationMode ="UserNameForCertificate"/>
      </security>
      <compositeDuplex />
      <oneWay />
      <textMessageEncoding />
      <httpTransport />
    </binding>
  </customBinding>

编辑：要增加最大数组长度配额并更改缓冲区大小，请使用以下绑定

<binding name="CustomWSDualHttpBinding" receiveTimeout="00:10:00" sendTimeout="00:10:00">
      <reliableSession inactivityTimeout="00:01:00" maxPendingChannels="16384" maxTransferWindowSize="4096" maxRetryCount="2"/>
      <binaryMessageEncoding>
        <readerQuotas maxDepth="32" maxStringContentLength="2147483647" maxArrayLength="2147483647" maxBytesPerRead="4096" maxNameTableCharCount="16384" />
      </binaryMessageEncoding>
      <security authenticationMode="SecureConversation" requireDerivedKeys="true">
        <secureConversationBootstrap authenticationMode ="UserNameForCertificate"/>
      </security>
      <compositeDuplex />
      <oneWay />
      <httpTransport hostNameComparisonMode="StrongWildcard" transferMode="Buffered" maxBufferPoolSize="1073741824" maxBufferSize="1073741824" maxReceivedMessageSize="1073741824" />
    </binding>

包含服务证书并将其置于服务行为

<serviceBehaviors>
    <behavior name="passwordValidatorServiceBehavior">
      <serviceDebug includeExceptionDetailInFaults="true"/>
      <serviceMetadata httpGetEnabled="true"/>
      <serviceCredentials>
        <userNameAuthentication userNamePasswordValidationMode="Custom" customUserNamePasswordValidatorType="WCFCallbackTry.Custom.CustomUserNameValidator.CustomUserNamePasswordValidator, WCFCallbackTry"/>
        <serviceCertificate findValue="9d4c78cde9d2b82d751a5416fd2eb6df98d3b236" storeLocation="LocalMachine" storeName="My" x509FindType="FindByThumbprint"/>
      </serviceCredentials>
    </behavior>
  </serviceBehaviors>

然后公开端点

<services>
  <service behaviorConfiguration="passwordValidatorServiceBehavior" name="WCFCallbackTry.Service1">
    <endpoint address="http://MachineName:8018/Service1.svc" bindingConfiguration="CustomWSDualHttpBinding" binding="customBinding"
      contract="WCFCallbackTry.IService" name="HttpEndPoint" />

    <endpoint address="mex" binding="mexHttpBinding" contract="IMetadataExchange" />
    <host>
      <baseAddresses>
        <add baseAddress="http://MachineName:8018/Service1.svc"/>
      </baseAddresses>
    </host>
  </service>
</services>

客户端 按以下方式调用服务

ServiceReference1.ServiceClient client = new ServiceReference1.ServiceClient(new System.ServiceModel.InstanceContext(new CallBack()), "HttpEndPoint");
        client.ClientCredentials.UserName.UserName = Environment.UserDomainName + @"\" + Environment.UserName;
        client.ClientCredentials.UserName.Password = "aWNhdGU/56gfhvYmplY3RD~";

如有必要，请在代码中包含DNS

EndpointIdentity identity = EndpointIdentity.CreateDnsIdentity("MachineName");
EndpointAddress endpointAddress = new EndpointAddress(uri, identity);
client.Endpoint.Address = endpointAddress;

希望这有帮助

WCF wsDualHttpBinding和UserNamePasswordValidator

1 个答案: