If no domain is available (you are in a workgroup) then the client can be
set to authenticate via NTLM instead of kerberos. For kerberos the client
must have the target name (Servie Principal Name) set or the UPN (User
Principal Name). If NTLM, the client can have an empty servicePrincipalName.
Generate the client proxy and look at the generated configuration. Change it
where needed, see below.
Kerberos:
<client>
<endpoint ...>
<identity ...>
<servicePrincipalName value="http/foo.bar.com">
or
<userPrincipalName value="hello@xxxxxx">
NTLM:
<client>
<endpoint ...>
<identity ...>
<servicePrincipalName>
Tiago Halm
"DEE" <tsdeepak@xxxxxx> wrote in message
news:d97b4094-ed0c-45ef-90df-0999b93767ca@xxxxxx
| Quote: |  | |
|
> HI There,
>
> my scenerio:
>
> Client : winform client , the client should prompt a LOGIN form
>
> service : WCF with WSHTTPBINDING ( i am planning to use "message"
> Security mode, with windows as client credentials)
>
> Deployment scenerio :
>
> 1. only users with windows account are authenticated.
> 2. may or may not have domain controllers (all m/c may be in
> workgroup)
>
> given the above , i am slightly confussed on how to get a common
> config settings for point 2.
>
>
>
>
> Could anybody suggest .
>
> Thanks in Advance
| |
| | |