Click here to Skip to main content
15,897,334 members
Home / Discussions / WPF
   

WPF

 
GeneralRe: WPF Windows refusing to open from Office Ribbon Pin
Pete O'Hanlon28-Mar-11 8:39
mvePete O'Hanlon28-Mar-11 8:39 
QuestionThe Property 'Content' is set more than once - I cant see were I am doing this Pin
Paul Harsent25-Mar-11 2:08
Paul Harsent25-Mar-11 2:08 
AnswerRe: The Property 'Content' is set more than once - I cant see were I am doing this Pin
Pete O'Hanlon25-Mar-11 2:16
mvePete O'Hanlon25-Mar-11 2:16 
GeneralRe: The Property 'Content' is set more than once - I cant see were I am doing this Pin
Paul Harsent25-Mar-11 2:24
Paul Harsent25-Mar-11 2:24 
GeneralRe: The Property 'Content' is set more than once - I cant see were I am doing this Pin
Ian Shlasko25-Mar-11 2:44
Ian Shlasko25-Mar-11 2:44 
GeneralRe: The Property 'Content' is set more than once - I cant see were I am doing this Pin
Pete O'Hanlon25-Mar-11 2:56
mvePete O'Hanlon25-Mar-11 2:56 
AnswerRe: The Property 'Content' is set more than once - I cant see were I am doing this Pin
Abhinav S26-Mar-11 6:20
Abhinav S26-Mar-11 6:20 
QuestionWCF: Message Security with a User Name Client - how to retrieve username+pwd from server side on a per request basis? [modified] Pin
devvvy24-Mar-11 22:16
devvvy24-Mar-11 22:16 
Hi I'm reading this article from MSDN regarding Message Security with a User Name Client
[^]

Two questions:
QUESTION 1 - Since no SSL, I take they don't encrypt using SSL cert but security context constructed AFTER authentication of client from server side using username+pwd? (Does it mean client send in pwd in clear text over the wire during initial exchange?! How does TLS negotiation work? What does it use as key for encryption? Server's got to publish her public key and client must know to use it to encrypt its initial transfer of username+pwd in order for initial exchange be secured. Here it says server need to expose a "Digital Certificate" (which I don't see in MSDN's diagram[^] - it's http, not https - what certificate?)

QUESTION 2 - how to check username and pwd from server side? This is how the sample set username/pwd from proxy/client side.
<br />
cc.ClientCredentials.UserName.UserName = ReturnUsername();<br />
cc.ClientCredentials.UserName.Password = ReturnPassword();<br />

But I don't see anything from server side anything which resembles this:
<br />
if(SomeRequestContext.UserName=="johndoe" && SomeRequestContext.Password=="abc123") // only if I can access username and pwd I can then implement any custom authorization<br />
{<br />
    IsAuthenticated = true;<br />
}<br />

From server side, I found two comes closest but no pwd and not sure if it's correct:
<br />
OperationContext.Current.ServiceSecurityContext.PrimaryIdentity.Name <br />
OperationContext.Current.ServiceSecurityContext.WindowsIdentity.User <br />


Also just a thought I don't think any of this[^] guards against say IP or arp spoofing this sort of attack?

What about replay attack (capture WCF request and resend) and mimic a license authorization or transaction for example.

Thanks!

REF: http://msdn.microsoft.com/en-us/library/ms752233.aspx[^]
dev
modified on Friday, March 25, 2011 4:31 AM

AnswerRe: WCF: Message Security with a User Name Client - how to retrieve username+pwd from server side on a per request basis? Pin
SledgeHammer0125-Mar-11 11:02
SledgeHammer0125-Mar-11 11:02 
GeneralRe: WCF: Message Security with a User Name Client - how to retrieve username+pwd from server side on a per request basis? Pin
devvvy27-Mar-11 21:57
devvvy27-Mar-11 21:57 
QuestionWrapPanel Bound To Collection Pin
Kevin Marois24-Mar-11 12:09
professionalKevin Marois24-Mar-11 12:09 
AnswerRe: WrapPanel Bound To Collection Pin
Mycroft Holmes24-Mar-11 12:46
professionalMycroft Holmes24-Mar-11 12:46 
GeneralRe: WrapPanel Bound To Collection Pin
Kevin Marois24-Mar-11 12:57
professionalKevin Marois24-Mar-11 12:57 
GeneralRe: WrapPanel Bound To Collection Pin
Kevin Marois24-Mar-11 13:29
professionalKevin Marois24-Mar-11 13:29 
GeneralRe: WrapPanel Bound To Collection Pin
SledgeHammer0124-Mar-11 14:06
SledgeHammer0124-Mar-11 14:06 
GeneralRe: WrapPanel Bound To Collection Pin
Kevin Marois24-Mar-11 14:25
professionalKevin Marois24-Mar-11 14:25 
GeneralRe: WrapPanel Bound To Collection Pin
SledgeHammer0124-Mar-11 15:10
SledgeHammer0124-Mar-11 15:10 
GeneralRe: WrapPanel Bound To Collection Pin
SledgeHammer0124-Mar-11 15:13
SledgeHammer0124-Mar-11 15:13 
GeneralRe: WrapPanel Bound To Collection Pin
Mycroft Holmes24-Mar-11 15:50
professionalMycroft Holmes24-Mar-11 15:50 
GeneralRe: WrapPanel Bound To Collection [modified] Pin
Kim Breugelmans24-Mar-11 20:19
Kim Breugelmans24-Mar-11 20:19 
GeneralRe: WrapPanel Bound To Collection Pin
Kevin Marois25-Mar-11 5:43
professionalKevin Marois25-Mar-11 5:43 
GeneralRe: WrapPanel Bound To Collection Pin
SledgeHammer0125-Mar-11 6:32
SledgeHammer0125-Mar-11 6:32 
GeneralRe: WrapPanel Bound To Collection Pin
Kevin Marois25-Mar-11 7:07
professionalKevin Marois25-Mar-11 7:07 
GeneralOk Everyone, Here It Is Pin
Kevin Marois25-Mar-11 7:31
professionalKevin Marois25-Mar-11 7:31 
GeneralRe: WrapPanel Bound To Collection Pin
Kim Breugelmans25-Mar-11 7:04
Kim Breugelmans25-Mar-11 7:04 

General General    News News    Suggestion Suggestion    Question Question    Bug Bug    Answer Answer    Joke Joke    Praise Praise    Rant Rant    Admin Admin   

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.