安全WCF配置無法正常工作：拋出安全令牌請求包含無效或格式錯誤的元素

Question

我認爲我的配置有問題。我試圖獲得一個包含在IIS中的密碼保護的安全性（尚未實現），並且我收到各種異常。這一次我得到一個安全標記無效或元素異常。這裏是我的CONFIGS：

主持人：

<configuration> 
    <system.web> 
    <compilation debug="true" targetFramework="4.0" /> 
    </system.web> 
    <system.webServer> 
    <modules runAllManagedModulesForAllRequests="true"/> 
    </system.webServer> 
    <system.serviceModel> 
    <bindings> 
     <wsHttpBinding> 
     <binding name ="WSHttpBinding_ISVC1"> 
     <security mode="Message"> 
      <message clientCredentialType="UserName" establishSecurityContext="false"/> 
     </security> 
     </binding> 
     </wsHttpBinding> 
    </bindings> 
    <behaviors> 
     <serviceBehaviors> 
     <behavior name="SVCBehaviors"> 
      <serviceMetadata httpGetEnabled="true" /> 
      <serviceDebug includeExceptionDetailInFaults="false" /> 
      <serviceCredentials> 
      <userNameAuthentication userNamePasswordValidationMode="Custom" customUserNamePasswordValidatorType="blahblah.SVCValidator, TrademarkGlobal.Web"/> 
      </serviceCredentials> 
     </behavior> 
     </serviceBehaviors> 
    </behaviors> 
    <services> 
     <service name="blahblah.SVC" 
     behaviorConfiguration="SVCBehaviors"> 
     <endpoint address="" binding="wsHttpBinding" 
    contract="blahblah.ISVC" name="WSHttpBinding_ISVC1"/> 
     <endpoint contract="IMetadataExchange" 
      binding="mexHttpBinding" address="mex"/> 
     </service> 
    </services> 
    </system.serviceModel> 
</configuration> 

CLIENT: 
    <system.serviceModel> 
    <bindings> 
     <wsHttpBinding> 
     <binding name="WSHttpBinding_ISVC1"> 
      <security mode="Message"> 
      <message clientCredentialType="UserName" establishSecurityContext="false"/> 
      </security> 
     </binding> 
     </wsHttpBinding> 
    </bindings> 
    <client> 
     <endpoint address="http://localhost:64609/SVC.svc" binding="wsHttpBinding" 
      bindingConfiguration="WSHttpBinding_ISVC1" contract="ISVC"> 
     </endpoint> 
    </client> 
    </system.serviceModel> 

SVC文件（svc.svc）：

<%@ServiceHost Service="blahblah.SVC" %> 

的服務（SVC & ISVC）只是返回一個基本的〜應變g下了。

SVCVALIDATOR.cs：

using System; 
using System.Collections.Generic; 
using System.Linq; 
using System.Web; 
using System.ServiceModel; 
using System.IdentityModel.Selectors; 
public class SVCValidator : UserNamePasswordValidator 
{ 
    public override void Validate(string userName, string password) 
    { 
     if (userName == null || password == null) 
     { 
      throw new ArgumentNullException(); 
     } 
     if (userName != "gooduser" && password != "goodpass") 
     { 
      throw new Exception("Incorrect Username or Password"); 
     } 
    } 
} 

控制器操作用於運行：

public class SVCController : Controller 
{ 
    public ActionResult Index(string user = "bad", string pass = "bad") 
    { 
     using (SVCClient client = new SVCClient()) 
     { 
     //SVCClient client = new SVCClient("WSHttpBinding_ISVC"); 
     client.ClientCredentials.UserName.UserName = user; 
     client.ClientCredentials.UserName.Password = pass; 
     ViewBag.Message = client.Test(); 
     return View("RunningSVC"); 
     } 
    } 
} 

Answer 1

你不會在服務器上使用綁定配置。

你的配置有一個名字：

<bindings> 
     <wsHttpBinding> 
     <binding name ="WSHttpBinding_ISVC1"> 
     <security mode="Message"> 
      <message clientCredentialType="UserName" establishSecurityContext="false"/> 
     </security> 
     </binding> 
     </wsHttpBinding> 
    </bindings> 

但端點並非指的是配置名稱。 正確的終點應該是：

<endpoint address="" binding="wsHttpBinding" 
    contract="blahblah.ISVC" name="WSHttpBinding_ISVC1" bindingConfiguration="WSHttpBinding_ISVC1" /> 

請讓我知道這是否解決了問題。