wcf - Stuck in a Authentication redirect loop - STS/WIF -

-

using vs2012 .net framework 4.5, created wcf service application local sts, using identity , access plugin. goal able authenticate using browser. did far:

  • added wsfam , sam modules.
  • used fiddler make sure i'm getting redirect
  • made sure fedauth[] cookies created.

right after cookies created (sam) i'm being redirected again sts. stuck in loop.

wcf , web services quite new me, sorry if elaborated much...

here's web.config:

    <?xml version="1.0"?> <configuration>   <configsections>     <section name="system.identitymodel" type="system.identitymodel.configuration.systemidentitymodelsection, system.identitymodel, version=4.0.0.0, culture=neutral, publickeytoken=b77a5c561934e089" />     <section name="system.identitymodel.services" type="system.identitymodel.services.configuration.systemidentitymodelservicessection, system.identitymodel.services, version=4.0.0.0, culture=neutral, publickeytoken=b77a5c561934e089" />   </configsections>   <location path="federationmetadata">     <system.web>       <authorization>         <allow users="*" />       </authorization>     </system.web>   </location>   <system.web>     <authorization>       <deny users="?" />     </authorization>     <authentication mode="none" />     <pages validaterequest="false" />     <httpruntime targetframework="4.5" />     <compilation debug="true" targetframework="4.5" />   </system.web>   <system.servicemodel>     <behaviors>       <servicebehaviors>         <behavior>           <!-- avoid disclosing metadata information, set value below false before deployment -->           <servicemetadata httpgetenabled="true" />           <!-- receive exception details in faults debugging purposes, set value below true.  set false before deployment avoid disclosing exception information -->           <servicedebug includeexceptiondetailinfaults="false" />           <servicecredentials useidentityconfiguration="true">             <!--certificate added identity , access tool visual studio.-->             <servicecertificate findvalue="cn=localhost" storelocation="localmachine" storename="my" x509findtype="findbysubjectdistinguishedname" />           </servicecredentials>         </behavior>       </servicebehaviors>     </behaviors>     <servicehostingenvironment multiplesitebindingsenabled="true" />     <protocolmapping>       <add scheme="http" binding="ws2007federationhttpbinding" />     </protocolmapping>     <bindings>       <basichttpbinding>         <binding name="mybinding">           <security mode="transportcredentialonly">             <transport clientcredentialtype="windows" />           </security>         </binding>       </basichttpbinding>     </bindings>     <services>       <service name="wcffamtest.service1">         <endpoint address="" binding="basichttpbinding" bindingconfiguration="mybinding" contract="wcffamtest.iservice1" />         <endpoint address="mex" binding="mexhttpbinding" contract="imetadataexchange" />       </service>     </services>   </system.servicemodel>   <system.webserver>     <modules runallmanagedmodulesforallrequests="true">       <add name="wsfederationauthenticationmodule" type="system.identitymodel.services.wsfederationauthenticationmodule, system.identitymodel.services, version=4.0.0.0, culture=neutral, publickeytoken=b77a5c561934e089" precondition="managedhandler" />       <add name="sessionauthenticationmodule" type="system.identitymodel.services.sessionauthenticationmodule, system.identitymodel.services, version=4.0.0.0, culture=neutral, publickeytoken=b77a5c561934e089" precondition="managedhandler" />     </modules>     <directorybrowse enabled="true" />   </system.webserver>   <system.identitymodel>     <identityconfiguration>       <audienceuris>         <add value="http://localhost:53655" />         <add value="http://localhost:53655/service1.svc" />       </audienceuris>       <certificatevalidation certificatevalidationmode="none" />       <issuernameregistry type="system.identitymodel.tokens.configurationbasedissuernameregistry, system.identitymodel, version=4.0.0.0, culture=neutral, publickeytoken=b77a5c561934e089">         <trustedissuers>           <add thumbprint="9b74cb2f320f7aafc156e1252270b1dc01ef40d0" name="localsts" />         </trustedissuers>       </issuernameregistry>     </identityconfiguration>   </system.identitymodel>   <system.identitymodel.services>     <federationconfiguration>       <wsfederation passiveredirectenabled="true" issuer="http://localhost:15937/wsfederationsts/issue" realm="http://localhost:53655" reply="http://localhost:53655" requirehttps="false" />       <cookiehandler requiressl="false" />     </federationconfiguration>   </system.identitymodel.services>   <appsettings>     <add key="ida:federationmetadatalocation" value="http://localhost:15937/wsfederationsts/federationmetadata/2007-06/federationmetadata.xml" />     <add key="ida:providerselection" value="localsts" />     <add key="ida:enforceissuervalidation" value="false" />   </appsettings> </configuration>

fiddler fiddler

response #10108 - sets fedauth cookies , redirects resource response #10108 - sets fedauth cookies , redirects resource request #10109 - request redirected resource, using given cookies. request #10109 - request redirected resource, using given cookies response #10109 - result 401, redirected sts again @ #10111 response #10109 - result 401, redirected sts again @ #10111

i using wcf web service doesn't support these modules. switched asp.net web application, configured same way, works perfectly.


Comments

Post a Comment

Popular posts from this blog

c# - How Configure Devart dotConnect for SQLite Code First? -

-
can configure following sample code ? when run following code, error : no entity framework provider found ado.net provider invariant name 'devart.data.sqlite' setting in machine.config <system.data> <dbproviderfactories> <add name="dotconnect sqlite" invariant="devart.data.sqlite" description="devart dotconnect sqlite" type="devart.data.sqlite.sqliteproviderfactory, devart.data.sqlite, version=4.6.287.0, culture=neutral, publickeytoken=09af7300eec23701" /> </dbproviderfactories> </system.data> after add below block code in app.config <?xml version="1.0"?> <configuration>   <configsections> <!-- more information on entity framework configuration, visit http://go.microsoft.com/fwlink/?linkid=237468 --> <section name="entityframework" type="system.data.entity.internal.configfile.entityframeworksection, entit...
Read more

java - Copying object fields -

-
what best way of copying classes when need have 2 independent variables? have simple class: public class myclass { boolean = false; string b= "not empty"; } do need make method : assign(myclass data ) { a= data.a; b= data.b; } is there automatic method copy (duplicate) objects in java? do need make method : pretty close. instead of making method, should make constructor. such constructors called copy constructor , , create them this: myclass(myclass data) { = data.a; b = data.b; } and create copy of instance, use constructor this: myclass obj1 = new myclass(); myclass obj2 = new myclass(obj1); copy constructor can tedious : using copy constructor create deep-copy can tedious, when class has mutable fields. in case, assignment create copy of reference, , not object itself. have create copy of fields (if want deep copy). can go recursive. a better way create deep copy serialize , deserialize object. why not use clone()? ...
Read more

c++ - Clear the memory after returning a vector in a function -

-
i have function processes , stores lot of data in , returns results vector of class. amount of data stored in function tremendous , want clear storage memory of function after finished job. necessary (does function automatically clear memory) or should clear memory function? update: vector<customers> process(char* const *filename, vector<int> id) { vector<customers> list_of_customers; (perform actions) return list_of_customers; } variables defined locally within function automatically released @ end of function scope. destructors objects called, should free memory allocated objects (if objects coded correctly). example of such object std::vector . anything you've allocated new must have corresponding delete release storage. try avoid doing own allocation , use raii instead, i.e. containers or smart pointers.
Read more