Vista - WCF and Kerberos

11-13-2007

Have question concerning WCF and Kerberos Security.

We are on-site for a large customer architecting a service-based solution
that will implement WCF.

The customer is a large hotel chain that desires a back-office solution that
can run in stand-alone mode at each hotel property. These properties
normally connect to a centralized data center, which houses the Active
Directory servers, but 100% connectivity cannot be guaranteed.

We are considering proposing a SmartClient solution with a local database
and application server (for services) at each property. We would like to
implement our service layer using WCF with WSHttpBinding with a
clientCredentialType of "Windows" so that we can leverage Kerberos security.

Question: When a hotel is not connected to the centralized data center, can
we depend on the credential caches in the local clients and servers to
support Kerberos authentication for our services?

11-13-2007

Answered (sort of) in the aspnet.webservices group.

Please don't post the message twice to two difference groups. Just crosspost
is accordingly, so that followups are seen correctly...

--
Chris Mullins

"Rob Vettor" <Rob Vettor@xxxxxx> wrote in message
news:3361305A-8392-4CA5-A56D-2FD255D61283@xxxxxx

Quote:

> Have question concerning WCF and Kerberos Security.
>
> We are on-site for a large customer architecting a service-based solution
> that will implement WCF.
>
> The customer is a large hotel chain that desires a back-office solution
> that
> can run in stand-alone mode at each hotel property. These properties
> normally connect to a centralized data center, which houses the Active
> Directory servers, but 100% connectivity cannot be guaranteed.
>
> We are considering proposing a SmartClient solution with a local database
> and application server (for services) at each property. We would like to
> implement our service layer using WCF with WSHttpBinding with a
> clientCredentialType of "Windows" so that we can leverage Kerberos
> security.
>
> Question: When a hotel is not connected to the centralized data center,
> can
> we depend on the credential caches in the local clients and servers to
> support Kerberos authentication for our services?
>

11-13-2007	#1 (permalink)
Rob Vettor n/a posts	WCF and Kerberos Have question concerning WCF and Kerberos Security. We are on-site for a large customer architecting a service-based solution that will implement WCF. The customer is a large hotel chain that desires a back-office solution that can run in stand-alone mode at each hotel property. These properties normally connect to a centralized data center, which houses the Active Directory servers, but 100% connectivity cannot be guaranteed. We are considering proposing a SmartClient solution with a local database and application server (for services) at each property. We would like to implement our service layer using WCF with WSHttpBinding with a clientCredentialType of "Windows" so that we can leverage Kerberos security. Question: When a hotel is not connected to the centralized data center, can we depend on the credential caches in the local clients and servers to support Kerberos authentication for our services?
My System Specs

11-13-2007	#2 (permalink)
Chris Mullins [MVP - C#] n/a posts	Re: WCF and Kerberos Answered (sort of) in the aspnet.webservices group. Please don't post the message twice to two difference groups. Just crosspost is accordingly, so that followups are seen correctly... -- Chris Mullins "Rob Vettor" <Rob Vettor@xxxxxx> wrote in message news:3361305A-8392-4CA5-A56D-2FD255D61283@xxxxxx Quote: > Have question concerning WCF and Kerberos Security. > > We are on-site for a large customer architecting a service-based solution > that will implement WCF. > > The customer is a large hotel chain that desires a back-office solution > that > can run in stand-alone mode at each hotel property. These properties > normally connect to a centralized data center, which houses the Active > Directory servers, but 100% connectivity cannot be guaranteed. > > We are considering proposing a SmartClient solution with a local database > and application server (for services) at each property. We would like to > implement our service layer using WCF with WSHttpBinding with a > clientCredentialType of "Windows" so that we can leverage Kerberos > security. > > Question: When a hotel is not connected to the centralized data center, > can > we depend on the credential caches in the local clients and servers to > support Kerberos authentication for our services? >
My System Specs

Similar Threads
Thread	Forum
Anyone else having Kerberos errors?	General Discussion
RE: kerberos TGS for an IP address	Vista security
Re: CredSSP and kerberos credentials delegation	Vista security
Vista interoperability with MIT Kerberos	Vista security
Kerberos error from Vista workstations	Vista security