AppFabric Forum

Question about ACS and WIF

Wed, 25 Nov 2009 05:12:02 Z

Hello,

My partner and I have never worked with authentication before so please allow me to explain what we're trying to do before I ask the question - it is possible we are going about this the wrong way. We are currently building a silverlight application that runs in a web role on Windows Azure. The goal is to have federated authentication allowing clients to authenticate via their own solution or through our own asp.net forms authentication solution with an azure storage backend. Our understanding of how this should work is based on the WindowsAzureAndPassiveFederation sample in the latest IdentityTrainingKit.

The plan is when a user with credentials connects to the Default.aspx in the web role they are forwarded to our STS to verify the credentials are from a trusted source, map their roles to our roles, and then return the claims back to the Default.aspx and the embedded silverlight app. If a user has no authentication credentials the silverlight app will start up and provide a login screen. Via WCF the silverlight app will do asp.net forms authentication with the STS to get the claims. I am using the following resources as references for the asp.net forms auth:

http://www.silverlight.net/learn/videos/silverlight-videos/using-aspnet-secure-services-and-applications-services/

http://web-snippets.blogspot.com/2008/08/authentication-in-silverlight-using.html

My question is where does ACS fit into all of this? It seems to tackle the same problem that our WIF STS is solving - only that with WIF you are capable of achieving more robust solutions. The following blog, http://www.leastprivilege.com/UsingSilverlightToAccessWIFSecuredWCFServices.aspx, highlights some potential problems with WIF, WCF, and Silverlight however it seems to me that doing the auth in the STS and serializing the claims objects back to the silverlight app would work fine. Is that a scenario where ACS would be the more appropriate solution or should all auth be done via asp.net and just hand off the claims to silverlight? Thanks for the help!

me vs Visual Studio .NET 2005 SDK - round 249873 - FIGHT!

Running on machines with "autodetect" proxy settings

Wed, 26 Nov 2008 00:53:26 Z

Hi,
the customer's machines often have their IE set to automatically detect proxy settings.
Running something that works fine when no proxy is present throws an exception (see at the end) when started at a customer machine with automatic proxy settings.
This is not unexpected.
The problem is that I cannot supply the proxy settings since I have no control over them. I would assume the proxy settings to be automatically picked up in fact since the service bus is made to work behind firewalls and if someone writes an application it should work as magically and as transparent as possible.
What to do?
Is this a feature (proxy autodetect) you will add soon? Or did I just not find it?
Any workaround for now?
Thanks,

CreateOrGetChannel<T_I>() : System.ServiceModel.CommunicationException: Unable to reach servicebus.windows.net via TCP (818, 828) or HTTP (80, 443)
at Microsoft.ServiceBus.RelayedOnewayManager.CreateConnection(BindingContext context, Uri uri)
at Microsoft.ServiceBus.RelayedOnewayChannelFactory.RelayedOnewayOutputChannel..ctor(RelayedOnewayChannelFactory channelFactory, BindingContext context, EndpointAddress to, Uri via)
at Microsoft.ServiceBus.RelayedOnewayChannelFactory.OnCreateChannel(EndpointAddress remoteAddress, Uri via)
at System.ServiceModel.Channels.ChannelFactoryBase`1.InternalCreateChannel(EndpointAddress address, Uri via)
at System.ServiceModel.Channels.ChannelFactoryBase`1.CreateChannel(EndpointAddress address, Uri via)
at System.ServiceModel.Channels.ServiceChannelFactory.ServiceChannelFactoryOverOutput.CreateInnerChannelBinder(EndpointAddress to, Uri via)
at System.ServiceModel.Channels.ServiceChannelFactory.CreateServiceChannel(EndpointAddress address, Uri via)
at System.ServiceModel.Channels.ServiceChannelFactory.CreateChannel(Type channelType, EndpointAddress address, Uri via)
at System.ServiceModel.ChannelFactory`1.CreateChannel(EndpointAddress address, Uri via)
at System.ServiceModel.ChannelFactory`1.CreateChannel()

Will the final ServiceBus Impl support ISA Server compatible HTTP polling without installing ISA Client?

Tue, 24 Nov 2009 17:33:30 Z

I tried to run the Service Bus samples EchoSample and WebHttpSample from a machine running Windows 7 x64 on a NAT-ed and firewalled LAN behind an ISA Server 2004. Opening the WebServiceHost takes a while and finaly always throws the following exception:

An unhandled exception of type 'System.NullReferenceException' occurred in Microsoft.ServiceBus.dll

Microsoft.ServiceBus.dll!Microsoft.ServiceBus.Pump.SetComplete(System.Exception ex) + 0x11 bytes
Microsoft.ServiceBus.dll!Microsoft.ServiceBus.FramingOutputPump.Run() + 0x1f2 bytes
mscorlib.dll!System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext executionContext, System.Threading.ContextCallback callback, object state) + 0x9b bytes
mscorlib.dll!System.Threading.ThreadHelper.ThreadStart() + 0x4d bytes

It thereby makes no difference if I add the line

ServiceBusEnvironment.SystemConnectivity.Mode = ConnectivityMode.Http;

or leave the auto-detection mode unchanged (the only difference I noticed in the ISA logs was that SB no longer tried to initiate tcp connections on port 808 but directly used HTTP)... I also tried to compile the samples with both VS 2008 and VS 2010 Beta 2 .. as expected without any difference.

While the WebServiceHost is opening I get the "suspicious" log entries in the ISA log that might be related to the problem, for example:

Failed Connection Attempt	GATEKEEPER 11/24/2009 5:56:46 PM
Log type: Web Proxy (Forward)
Status: 12156 The HTTP request includes a non-supported header. Contact your ISA Server administrator.
Rule:
Source: ( 192.168.1.138:0)
Destination: ( 70.37.117.236:80)
Request: POST /102d1a6f-5576-46b8-bcfc-c7feab4fa665/
Filter information: Req ID: 0ffc1d2a
Protocol:
User: anonymous

Is there a way to use the ServiceBus functionality on a LAN that is protected by an ISA Server 2004 without installing any additional tools and without opening other TCP ports but the normal HTTP 80 / HTTPS 443 ? Or is there a known problem with the transparent proxy implementation of ISA server that prevents anz correct polling HTTP implementation?

"The timeout elapsed upon attempting to obtain a token." Error sometimes

Tue, 24 Nov 2009 14:45:29 Z

Hi All,

When running service bus tutorials eg:"Introduction to the .NET Service Bus

Exercise 3: Multicast Messaging through"

i get the error "The timeout elapsed upon attempting to obtain a token."

and restarting the application resolves the issue without any changes.

a)Any suggestions why this happens
b)How this can be prevented to happen at all times?

Regards
Rama charan

MCTS Web application Technology Specialist

.Net Services Security Primer

Mon, 19 Oct 2009 20:23:12 Z

Hi,

Can anybody suggest a link to a primer on security for .Net Services ? I'm interested in a comparison between the different security models (user name & password, certificates, card space etc). For example, if we use certificates can we use self issued/signed certs or do we have to buy from the likes of Verisign ? If we use card space for authentication with our services, can non .Net third parties (PHP for example) still consume our services ? What are the relative pros and cons of each mechanism, and how hard is each to implement ?

I'm very new to this sort of security, and to the whole 'federation' thing and am looking for somewhere to start.

Thanks.

,Net service bus not showing in Service metadata/Publicly Listed Services

Tue, 17 Nov 2009 11:01:22 Z

Hi,
I have created and registered a service on .net service bus, following is the code
But, when I go to the url https://<my namespace>.servicebus.windows.net/
I don't see my service listed there in the publicly Listed services.

What could be the reason?

                Uri address;
              
                    address = ServiceBusEnvironment.CreateServiceUri("http", SERVICENAMESPACE, "MyService");
               

                
                TransportClientEndpointBehavior userNamePasswordServiceBusCredential = new TransportClientEndpointBehavior();
                userNamePasswordServiceBusCredential.CredentialType = TransportClientCredentialType.SharedSecret ;
                userNamePasswordServiceBusCredential.Credentials.SharedSecret.IssuerName = "owner"
                userNamePasswordServiceBusCredential.Credentials.SharedSecret.IssuerSecret = "<defaultkey>";    
    
                // create the service host reading the configuration
                ServiceHost host = new ServiceHost(typeof(MyService), address);
                
                
                IEndpointBehavior serviceRegistrySettings = new ServiceRegistrySettings(DiscoveryType.Public);

                ((ServiceRegistrySettings)serviceRegistrySettings).DisplayName = "MyService";
                ((ServiceRegistrySettings)serviceRegistrySettings).DiscoveryMode = DiscoveryType.Public;  
                
               
                foreach (ServiceEndpoint subscriberEndpoint in host.Description.Endpoints)
                {
                    subscriberEndpoint.Behaviors.Add(serviceRegistrySettings);
                    subscriberEndpoint.Behaviors.Add(userNamePasswordServiceBusCredential);
                                       
                }
                

                Console.WriteLine("Starting My Authentication service...");
                
                host.Open();                
                
                Console.WriteLine("My service started.");
                Console.WriteLine("Service address: " + address);
                Console.WriteLine("Press [Enter] to exit");
                Console.ReadLine();
                Console.WriteLine("Please wait...");               
                host.Close();
=========================================
Config

     <bindings>     
      <ws2007HttpBinding>
        <binding name="default" closeTimeout ="00:05:00" openTimeout ="00:05:00">          
        </binding>
      </ws2007HttpBinding> 
    </bindings>
    <services>      
       <service name="MyService.MyService" >
        <endpoint contract="MyService.IMyServiceContract" binding="ws2007HttpBinding" bindingConfiguration ="default"  />         
      </service>
    </services>

Please mark if reply answers your query.

Publishing a metadata endpoint on the service bus

Tue, 17 Feb 2009 13:10:22 Z

Is there any way, in the current CTP, to publish the service metadata endpoint on the Service Bus and have this endpoint referenced by the Atom entry?

Thanks
Pedro Felix

pfelix.wordpress.com

Dist TX over servicebus

Sun, 22 Nov 2009 04:58:11 Z

from the A Developer's Guide to Service Bus in Windows Azure platform AppFabric

"Transaction flow requires the distributed transaction coordinators of the communicating parties to establish a communication path to each other. When going through the Service Bus, establishing this relationship is very challenging."

couldnt that be established over that socketshifter technology
http://vasters.com/clemensv/PermaLink,guid,26dc5df1-8b8c-4f71-8765-...
or port bridge from Clemens Vasters post here
http://vasters.com/clemensv/PermaLink,guid,3e35d8bd-b755-453f-8c63-...
or just the regular 3.5 ws* bindings and tunnel everything over this port bridge?
i know it sounds slow right but are you looking for pure speed when doing dist tx? you may just want certainty over speed

Error running Echoclient - Service Bus tutorial

Wed, 11 Nov 2009 12:20:17 Z

Hi all,

I am not able to run the Echoclient tutorial.I get an error when i first try to run the service alone at the line

host.open()

the error is "object not set to instance of an object".

I have a few more queries here
a)does "issuer name" in code refer to the "Default Issuer Name:" under the service bus section in website?
b)does "issuersecret" in code refers to "Default Issuer Key" under the service bus section in website?
c)does "serviceNamespaceDomain" in code refer to just the text after the words "Service Namespace" at the top of description in the website

Any suggestion or help is welcome.
The code i am using is pasted below

----------------------------------------
App config file

<?xml version="1.0" encoding="utf-8" ?>
<configuration>
  <system.serviceModel>
    <services>
      <service name="Microsoft.ServiceBus.Samples.EchoService">
        <endpoint contract="Microsoft.ServiceBus.Samples.IEchoContract" 
                  binding="netTcpRelayBinding" />
      </service>
    </services>
  </system.serviceModel>
</configuration>

EchoService.Cs

using System;
using System.Collections.Generic;
using System.Linq;
using System.Text;
using System.ServiceModel;

namespace Microsoft.ServiceBus.Samples
{
    [ServiceBehavior(Name = "EchoService", Namespace = "https://cei-charan-dotnetservicespoc1-dev.servicebus.windows.net/Relay/")]
    class EchoService : IEchoContract
    {
        public string Echo(string text)
        {

            Console.WriteLine("Echoing: {0}", text);
            return text;

        }

    }
}

IEchoContract.cs

using System;
using System.Collections.Generic;
using System.Linq;
using System.Text;
using System.ServiceModel; 

namespace Microsoft.ServiceBus.Samples
{

    [ServiceContract(Name = "IEchoContract", Namespace = "https://cei-charan-dotnetservicespoc1-dev.servicebus.windows.net/EchoV1/")]
    public interface IEchoContract
    {
        [OperationContract]
        String Echo(string text);
    }
    public interface IEchoChannel : IEchoContract, IClientChannel { }

}

Program.Cs

using System;
using System.Collections.Generic;
using System.Linq;
using System.Text;
using System.ServiceModel;
using Microsoft.ServiceBus;
using System.ServiceModel.Description;
using Microsoft.ServiceBus.Description;

namespace Microsoft.ServiceBus.Samples
{
    class Program
    {
        
        static void Main(string[] args)
        {
            ServiceBusEnvironment.SystemConnectivity.Mode = ConnectivityMode.AutoDetect;

            //If you are to expand on this tutorial,
            // be sure to remove your name and password 
            //and replace it with a more sophisticated user interface.
            string serviceNamespaceDomain = "CEI-Charan-DotnetServicesPOC1-DEV";
            string issuerName = "owner";
            string issuerSecret = "km0vygixnBuG8WJSoFhf+DMAq94FTd9EhduYKGGqQBs=";
            
            Uri address = ServiceBusEnvironment.CreateServiceUri("sb", serviceNamespaceDomain, "EchoService");

            TransportClientEndpointBehavior sharedSecretServiceBusCredential = new TransportClientEndpointBehavior();
            sharedSecretServiceBusCredential.CredentialType = TransportClientCredentialType.SharedSecret;
            sharedSecretServiceBusCredential.Credentials.SharedSecret.IssuerName = issuerName;
            sharedSecretServiceBusCredential.Credentials.SharedSecret.IssuerSecret = issuerSecret;
                       

            ServiceHost host = new ServiceHost(typeof(EchoService), address);
            
            IEndpointBehavior serviceRegistrySettings = new ServiceRegistrySettings(DiscoveryType.Public);

            foreach (ServiceEndpoint endpoint in host.Description.Endpoints)
            {
                endpoint.Behaviors.Add(serviceRegistrySettings);
                endpoint.Behaviors.Add(sharedSecretServiceBusCredential);
            }

            Console.WriteLine("Opening host.Please wait...");

            host.Open();

            Console.WriteLine("Service address" + address);
            Console.WriteLine("Press [Enter] to exit:");
            Console.ReadLine();

            host.Close();
        }
    }
}

My service namespace is
https://cei-charan-dotnetservicespoc1-dev.servicebus.windows.net/

MCTS Web application Technology Specialist

The missing "Add STS Reference" (VS 2008 & WIF)

Tue, 10 Nov 2009 06:42:29 Z

Having uninstalled the Geneva Framework and installed the newly released Windows Identity Foundation RC (here ), I find the the previous "Modify STS Reference" is still there (just a unfuncional link) but the "Add STS Reference", which is supposed to take the place of "Modify STS Reference", does not show up.

I spent hours to google for solution, but never succeeded ... Can anyone help? Most appreciation!!

New training kit released on nov 17-09 for updated .net services sdk of nov.

Thu, 19 Nov 2009 11:03:57 Z

new Training kit for updated .net services sdk released on 17 nov

http://www.microsoft.com/downloads/details.aspx?FamilyID=413e88f8-5966-4a83-b309-53b7b77edf78&displaylang=en

note .net services sdk is also updated once agin on 16 nov

http://www.microsoft.com/downloads/details.aspx?familyid=C80EBADF-7EB8-4A62-ABCD-0B57FA3855F8&displaylang=en

please keep replying to this item whenever newer updates are avaliable so that whenever anyone come to forums they would be sure issue is not due to old verion

i think atlest the services blog should have an entry whenever new sdk is released to use it as common place to know about new updates..

MCTS Web application Technology Specialist

Problem with adding a service to .Net Services Solution

Tue, 17 Nov 2009 08:29:11 Z

Hello!

I am following the Lab exercise : Intro to the .Net Services Bus and though Task 1 - Creating you .Net Services & SQL Services Soultion document has a different graphic than the Nov 2009 CTP site. In spite of that the site did allow me to create a service namespace I'm not finding away to add a sevice to the namespace. Are lab docs out of date? Is there another way to accomplish this "Hands-on"task?

Thanks,

Steph

Steph

Publishing Sensor Events to Many Clients using NetEventRelay (Ideally Silverlight Clients)

Wed, 18 Nov 2009 23:54:34 Z

Hi,
Let's say I have a temperature sensor that publishes events on an internal service bus. I would like to take that internal event and publish it to multiple external clients. Ideally these would be Silverlight clients.

To accomplish the first part (publishing internal events to external clients), I think I would need to do something like this:

a) Declare a ISensorEventContract
    [ServiceContract(Name = "ISensorEventContract", Namespace = "http://labs.lorengo.com/Service/SensorService/")]
    public interface ISensorEventContract
    {
        [OperationContract(IsOneWay = true)]
        void TemperatureEvent(string eventText);
    }

    public interface ISensorEventChannel : ISensorEventContract, IClientChannel
    {
    }

b) Declare a SensorService
    [ServiceBehavior(Name = "SensorEventService", Namespace = "http://labs.lorengo.com/Service/SensorService/")]
    public class SensorEventService : ISensorEventContract
    {
        void ISensorEventContract.TemperatureEvent(string eventText)
        {
          // What should I put here?
          // Should I make my TemperatureEvent return the string?

        }
    }

c) Eventually, I'll want to subscribe to these events in Silverlight. Is this possible? Should I use a duplex channel? Or do I simply use the SensorEventContract in my Silverlight client. Again, I want a PubSub / NetEventRelay model where I can publish one event to many subscribers.

Thanks for listening

Service Bus Quotas

Fri, 13 Nov 2009 06:03:59 Z

In MSDN http://msdn.microsoft.com/en-us/library/ee732538.aspx, I find that :

Number of simultaneous connections (senders) open per service namespace has a quota of only 25.

If I want to develop an application which can accept more than 100 connections, what should I do?

Thanks.

listener and sender quotas

Fri, 13 Nov 2009 23:30:10 Z

Current quotas are 100 for sender and 25 for listener.

Any idea when these limits will be increased?

Service bus -> Rest tutorial -> not able to see image when url pasted.

Mon, 16 Nov 2009 11:41:07 Z

Hi All,

Steps:
1)just wrote code same as given in new tutorial downloaded on nov 13,2009 for the Rest tutorial under service bus.

2)when i run the code after i replaced code with my issuername and issuer secret for the above the code runs fine

3) when i copy URL in to web browser i dont see the image.( i get no errors)

Environment : windows 7 , .net servies sdk verison of nov 13,09.image is in the same folder as the project

Can you tell me what i am missing,Any suggestions?

the code i use is pasted below

App.config file
    <behaviors>
      <endpointBehaviors>
        <behavior name="sharedSecretClientCredentials">
          <transportClientEndpointBehavior credentialType="SharedSecret">
            <clientCredentials>
              <sharedSecret issuerName="my owner name placed here" issuerSecret="my secret key placed here" />
            </clientCredentials>
          </transportClientEndpointBehavior>
        </behavior>
      </endpointBehaviors>
      <serviceBehaviors>
        <behavior name="default">
          <serviceDebug httpHelpPageEnabled="false" httpsHelpPageEnabled="false" />
        </behavior>
      </serviceBehaviors>
    </behaviors>

  </system.serviceModel>
</configuration>

//IImageContract.cs

using System;
using System.Collections.Generic;
using System.Linq;
using System.Text;
using System.ServiceModel;
using System.ServiceModel.Channels;
using System.ServiceModel.Web;
using System.IO;

namespace ImageListener
{
    [ServiceContract(Name = "IImageContract", Namespace = "http://samples.microsoft.com/ServiceModel/Relay/")] 
    public interface IImageContract
    {
        [OperationContract,WebGet]
        Stream GetImage();

    }

    public interface IImageChannel : IImageContract, IClientChannel { } 

}
////////////////////   ImagService.cs  //////////////////////
using System;
using System.Collections.Generic;
using System.Linq;
using System.Text;
using System.ServiceModel;
using System.Drawing;
using System.Drawing.Imaging;
using Microsoft.ServiceBus.Web;
using System.IO;
using System.ServiceModel.Web;


namespace ImageListener
{
    [ServiceBehavior(Name = "ImageService", Namespace = "http://samples.microsoft.com/ServiceModel/Relay/")]
    class ImageService : IImageContract 
    {
        const string imageFileName = "image.jpg";
        Image bitmap;

        public ImageService() 
        {
            this.bitmap = Image.FromFile(imageFileName);     
        } 

        #region IImageContract Members

        public Stream GetImage()
        {
            MemoryStream stream = new MemoryStream();
            this.bitmap.Save(stream, ImageFormat.Jpeg);

            stream.Position = 0;
            WebOperationContext.Current.OutgoingResponse.ContentType = "image/jpeg";

            return stream;
        }

        #endregion
    }
}
///////////////////////// Program.cs ///////////////////////
using System;
using System.Collections.Generic;
using System.Linq;
using System.Text;
using System.ServiceModel;
using System.ServiceModel.Channels;
using System.ServiceModel.Web;
using System.IO;
using Microsoft.ServiceBus;

namespace ImageListener
{
    class Program
    {
        static void Main(string[] args)
        {
            string serviceNamespaceDomain = "my name space name goes here";
            Uri address = ServiceBusEnvironment.CreateServiceUri("https", serviceNamespaceDomain, "Image");

            WebServiceHost host = new WebServiceHost(typeof(ImageService), address);

            host.Open();

            Console.WriteLine("Copy the following address into a browser to see the image: ");
            Console.WriteLine(address + "GetImage");
            Console.WriteLine();
            Console.WriteLine("Press [Enter] to exit");
            Console.ReadLine();

            host.Close();

        }
    }
}

MCTS Web application Technology Specialist

Windows Azure Web Role + Access Control Services

Mon, 16 Nov 2009 05:16:22 Z

Hi All,

Here, I am looking for a your valuable advice on selecting best security architecture for my application. Please check the below points to get an overview about my application:

1. Windows Azure hosted ASP.NET/Web role application

2. Should support role based authorization

3. 1st release will be with ACS + Windows Live ID STS

4. 2nd release will be with ADFS(Geneva Server)

5. 3rd release will be with custom STS provider

According to the above facts, I am unable to select the exact security architecture for my application. Even .NET Services November CTP release made me too complex. So, Please be kind enough to advice me. I really appreciate your early attention on this regard. Thank you.

Why did my service application try to access "watchdog.servicebus.windows.net"?

Fri, 13 Nov 2009 04:31:27 Z

Hi, guys:
I tried to run an EchoSample application, but it failed when calling host.Open();
The exception is:
-------------------------------------------
System.ServiceModel.CommunicationException was unhandled
Message="Unable to reach watchdog.servicebus.windows.net via TCP (818, 828) or HTTP (80, 443)"
Source="Microsoft.ServiceBus"
StackTrace:
       at Microsoft.ServiceBus.NetworkDetector.ChooseConnectivityModeForAutoDetect(Uri uri)
       at Microsoft.ServiceBus.TcpRelayTransportBindingElement.BuildInnerBindingElement(BindingContext context)
       at Microsoft.ServiceBus.TcpRelayTransportBindingElement.GetProperty[T](BindingContext context)
       at System.ServiceModel.Channels.BindingElement.GetIndividualProperty[T]()
       at System.ServiceModel.Description.DispatcherBuilder.SecurityContractInformationEndpointBehavior.AddBindingParameters(ServiceEndpoint endpoint, BindingParameterCollection parameters)
       at System.ServiceModel.Description.DispatcherBuilder.InitializeServiceHost(ServiceDescription description, ServiceHostBase serviceHost)
       at System.ServiceModel.ServiceHostBase.InitializeRuntime()
       at System.ServiceModel.ServiceHostBase.OnBeginOpen()
       at System.ServiceModel.ServiceHostBase.OnOpen(TimeSpan timeout)
       at System.ServiceModel.Channels.CommunicationObject.Open(TimeSpan timeout)
       at System.ServiceModel.Channels.CommunicationObject.Open()
       at Microsoft.ServiceBus.Samples.Program.Main(String[] args) in C:\Users\dc10101\Documents\Visual Studio 2008\Projects\EchoService\EchoService\Program.cs:line 58
       at System.AppDomain._nExecuteAssembly(Assembly assembly, String[] args)
       at System.AppDomain.ExecuteAssembly(String assemblyFile, Evidence assemblySecurity, String[] args)
       at Microsoft.VisualStudio.HostingProcess.HostProc.RunUsersAssembly()
       at System.Threading.ThreadHelper.ThreadStart_Context(Object state)
       at System.Threading.ExecutionContext.Run(ExecutionContext executionContext, ContextCallback callback, Object state)
       at System.Threading.ThreadHelper.ThreadStart()
InnerException:
-------------------------------------------
Note: the error message is "Unable to reach watchdog.servicebus.windows.net via TCP (818, 828) or HTTP (80, 443)". Who can help me? BTW, I cannot access Service Bus Portal website either :(

Running the EchoSample Behind Firewall

Mon, 16 Nov 2009 10:33:16 Z

I'm behind a corporate firewall (Websense Web Security Gateway) and I have the outbound ports (808, 818, 819, 828) opened for 65.55.54.16 and I also have the proxy disabled for this address.  When I try to run the EchoSample included with the SDK, I get EndPointNotFoundException with error message -
"Could not connect to net.tcp://xyz.servicebus.windows.net:828/EchoService/. The connection attempt lasted for a time span of 00:00:21.0410000. TCP error code 10060: A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond 70.37.101.60:828".

After opening up the outbound ports for 70.37.101.60, I was able to run the service part but not the client. But later when I tried again, even the server didn't run and now I get error for 70.37.101.59. Do I need to get the outbound ports opened for 70.37.*.* also apart from 65.55.54.16 to connect to the service bus?

Stack trace is given below.

   at Microsoft.ServiceBus.RelayedOnewayTcpClient.Connect()
   at Microsoft.ServiceBus.RelayedOnewayTcpClient.EnsureChannel()
   at Microsoft.ServiceBus.RelayedOnewayTcpClient.OnOpen(TimeSpan timeout)
   at Microsoft.ServiceBus.Channels.CommunicationObject.Open(TimeSpan timeout)
   at Microsoft.ServiceBus.RelayedOnewayTcpListener.OnOpen(TimeSpan timeout)
   at Microsoft.ServiceBus.Channels.RefcountedCommunicationObject.Open(TimeSpan timeout)
   at Microsoft.ServiceBus.RelayedOnewayChannelListener.OnOpen(TimeSpan timeout)
   at Microsoft.ServiceBus.Channels.CommunicationObject.Open(TimeSpan timeout)
   at System.ServiceModel.Dispatcher.ChannelDispatcher.OnOpen(TimeSpan timeout)
   at System.ServiceModel.Channels.CommunicationObject.Open(TimeSpan timeout)
   at System.ServiceModel.ServiceHostBase.OnOpen(TimeSpan timeout)
   at System.ServiceModel.Channels.CommunicationObject.Open(TimeSpan timeout)
   at Microsoft.ServiceBus.RelayedSocketListener.Open(TimeSpan timeout)
   at Microsoft.ServiceBus.SocketConnectionListener.Open(TimeSpan timeout)
   at Microsoft.ServiceBus.Channels.BufferedConnectionListener.Open(TimeSpan timeout)
   at Microsoft.ServiceBus.Channels.ConnectionAcceptor.Open(TimeSpan timeout)
   at Microsoft.ServiceBus.Channels.ConnectionDemuxer.StartDemuxing(TimeSpan timeout, OnViaDelegate viaDelegate)
   at Microsoft.ServiceBus.SocketConnectionTransportManager.OnOpen(TimeSpan timeout)
   at Microsoft.ServiceBus.Channels.TransportManager.Open(TimeSpan timeout, TransportChannelListener channelListener)
   at Microsoft.ServiceBus.Channels.TransportManagerContainer.Open(TimeSpan timeout, SelectTransportManagersCallback selectTransportManagerCallback)
   at Microsoft.ServiceBus.Channels.TransportChannelListener.OnOpen(TimeSpan timeout)
   at Microsoft.ServiceBus.Channels.ConnectionOrientedTransportChannelListener.OnOpen(TimeSpan timeout)
   at Microsoft.ServiceBus.SocketConnectionChannelListener`2.OnOpen(TimeSpan timeout)
   at Microsoft.ServiceBus.Channels.CommunicationObject.Open(TimeSpan timeout)
   at System.ServiceModel.Dispatcher.ChannelDispatcher.OnOpen(TimeSpan timeout)
   at System.ServiceModel.Channels.CommunicationObject.Open(TimeSpan timeout)
   at System.ServiceModel.ServiceHostBase.OnOpen(TimeSpan timeout)
   at System.ServiceModel.Channels.CommunicationObject.Open(TimeSpan timeout)
   at System.ServiceModel.Channels.CommunicationObject.Open()
   at Microsoft.ServiceBus.Samples.Program.Main(String[] args) in C:\Program Files\Microsoft .NET Services SDK (Nov 2009 CTP)\Samples\ServiceBus\GettingStarted\Echo\CS35\Service\Program.cs:line 59
   at System.AppDomain._nExecuteAssembly(Assembly assembly, String[] args)
   at System.AppDomain.ExecuteAssembly(String assemblyFile, Evidence assemblySecurity, String[] args)
   at Microsoft.VisualStudio.HostingProcess.HostProc.RunUsersAssembly()
   at System.Threading.ThreadHelper.ThreadStart_Context(Object state)
   at System.Threading.ExecutionContext.Run(ExecutionContext executionContext, ContextCallback callback, Object state)
   at System.Threading.ThreadHelper.ThreadStart()

Binding configuration errors, which were previously working

Fri, 13 Nov 2009 23:22:52 Z

The following binding configuration has been working for a while now and is no longer working. I recieve the Incompatible channel listener settings error when I try to run my program that was once working.

<

bindings>
    <netTcpRelayBinding>
        <binding name="ocrDefault" connectionMode="Relayed">
            <security mode="Transport" relayClientAuthenticationType="None" />
        </binding>
        <binding name="mexdefault">
            <security mode="None" relayClientAuthenticationType="None"/>
        </binding>
    </netTcpRelayBinding>
</bindings>

services>
<service name="OCRService.OcrService"
behaviorConfiguration="serviceMetadata">

endpoint name="OcrServiceEndpoint"
                      contract="OCRService.IOcrService"
                      binding="netTcpRelayBinding"
                      bindingConfiguration="ocrDefault" />

endpoint name="MexEndpoint"
                      contract="IMetadataExchange"
                      binding="netTcpRelayBinding"
                      bindingConfiguration="mexdefault"
                      address="mex" />
    </service>
</services>

George Vigelette

November CTP Max Message Size

Mon, 16 Nov 2009 19:26:39 Z

Do we no longer have control over the message size within the November CTP?

I'm sending XML files as a string argument through a simple service. The file sizes are around 10-40KB.

Previouslyt my service wasn't getting some of the larger files until I changed the message size limits.

Before the November CTP the following used to work just fine:

      <netTcpRelayBinding>
        <binding name="default" closeTimeout="00:01:00" openTimeout="00:03:00" maxBufferSize="1000000" maxReceivedMessageSize="1000000">
          <readerQuotas maxArrayLength="100000" />
        </binding>
      </netTcpRelayBinding>

Since the November CTP this has stopped working and smaller messages go through but the larger ones do not. If I step through both the client and the service the client makes the call to the service operation but the message never reaches the service.
Both client and service are using the same binding.

How to Add ACS Custom Issuer - Nov CTP

Mon, 09 Nov 2009 13:17:09 Z

Hi,
We had developed a custom IPSTS which was added as an issuer in ACS along with custom claim types. We had also creted rules for this custom IPSTS.
Using ACM.exe how can we create a custom issuer pointing to our IPSTS?
After Nov CTP , What happens to the WSFederation module and controls being used in the Relying party applications?

Please point to sample code if any.

Please mark if reply answers your query.

Graphical Tool Prototype for the ACS Management Service

Sat, 14 Nov 2009 01:15:41 Z

The Access Control Service saw some significant changes with the November CTP release. Prior to that release, the portal was a convenient tool for managing ACS resources visually. The linked tool is preview of our plans for a UI tool for managing ACS resources. Please feel free to use it and provide feedback. Your comments are valuable in assisting to create the best possible user experience.

You can find the tool at: http://code.msdn.microsoft.com/acmbrowser.

This source code is provided AS IS with no warranties and confers no rights.

The .NET Services November 2009 CTP Breaking Changes Announcement and Scheduled Maintenance

Fri, 30 Oct 2009 21:13:26 Z

Please see this blog post for detail.

The .NET Services Team

Service Namespace suddenly deleted

Fri, 13 Nov 2009 08:51:29 Z

Hi,

this morning two of my service namespaces were suddenly deleted. Why does this happen?
I used the namespaces frequently, so is there some kind of traffic limit before it gets deleted by Microsoft ?!?!?

Sorry, but the .net services have lots of open issues that makes it impossible to work with them.

Regards,

Axel

Authentication/Authorization using ACS

Thu, 05 Nov 2009 11:35:36 Z

I want to know about the Authentication/Authorization for my app.
I want multiple users to access the application at the same time, of course with proper authentication, and limited access - incremental authorization (think of Role Based Access !!). I want to implement ACS for this.

As per my knowledge, there can be only one username/password per solution. With this i cant have incremental authorization. So this method goes void.
Currently I dont want to delve into cardspace and Certificates. (I'll try this out later).
Latest CTP release states WLID is no more supported. (If WLID is supported how can I implement it ?)
Finally i have decided to use Active Directory (of my company).

Now i am totally confused from where to start... :(

I was going through some other posts. Many of them suggested using "Geneva Framework" ( now Windows Identity Foundation - if I am right) for the Federation of the AD.

- Is it compulsory to use Geneva Framework? Or is there some other solution? (Can i create my own security token ?)
- Also, how will i associate a scope(/rules) with a particular service?
- What is relevance of the url for the Scope?
- Can I generate my own custom claims (input)?
- Pls provide some guide lines to start coding.

Thanks.

~MANISH

SecurityTokenException while using Service Bus

Tue, 10 Nov 2009 06:07:42 Z

Hello,

I have installed the Nov' 09 release of .NET Services and Azure SDK. I tried running the "EchoSample" that ships with .NET Services SDK. I updated the sample to use the issuerName and issuerSecret to connect to the service bus that i had configured. Apart from this I have not done any changes.

I am getting SecurityTokenException while opening the service.
i.e., at host.Open()

It says that "The token provider was unable to provide a security token"

Jayesh

Problem accessing .NET Services for Azure

Thu, 12 Nov 2009 08:34:46 Z

I am having problems accessing your .NET Services for Azure. Until last Friday it worked fine and now when I logon to my account I do not get option to make changes to Access Control or Service bus seetings. I verified this with one of my collegues account and it is same.

Thanks,
Priyanka

Securing a Web Service while exposing the mex endpoint publically

Wed, 04 Nov 2009 20:25:58 Z

I have a service with two declared endpoints if I put no authentication on either endpoint generating a proxy client does not need credentials. EXAMPLE

<system.serviceModel>

</binding>

</binding>

</netTcpRelayBinding>

</bindings>

</service>

</services>

</behavior>

</serviceBehaviors>

</behaviors>

</system.serviceModel>

Now as soon as I secure the service endpoint, but keeping the mex enpoint open EXAMPLE

<system.serviceModel>

</binding>

</binding>

</netTcpRelayBinding>

</bindings>

</service>

</services>

</behavior>

</serviceBehaviors>

</behaviors>

</system.serviceModel>

The creation of a proxy client now requires security where the mex should still have no security and allow clients to create the proxy class (though needing credentials to use the service). Will this scenario be supported by launch at PDC?

George Vigelette

how to find the "shared secret key" for a service

Wed, 11 Nov 2009 12:55:59 Z

Hi All,

What does the "shared secret key" in the REST Tutorial for service bus" refer to from the information displayed in the the .net services website after we logged in.

Thanks,
Rama charan

MCTS Web application Technology Specialist

Access control service unavailable

Tue, 10 Nov 2009 13:52:49 Z

Hi,

My access control service endpoint (https://goeleven.accesscontrol.windows.net) returns a 503 service unavailable...

Any idea?

Kind regards,
Yves

.Net Service Bus Nov CTP - 404 error using ws2007HttpBinding

Thu, 12 Nov 2009 10:30:04 Z

Hi,
I have created and registered a service on .net service bus, following is the code

                Uri address;
              
                    address = ServiceBusEnvironment.CreateServiceUri("http", SERVICENAMESPACE, "MyService");
               

                
                TransportClientEndpointBehavior userNamePasswordServiceBusCredential = new TransportClientEndpointBehavior();
                userNamePasswordServiceBusCredential.CredentialType = TransportClientCredentialType.SharedSecret ;
                userNamePasswordServiceBusCredential.Credentials.SharedSecret.IssuerName = "owner"
                userNamePasswordServiceBusCredential.Credentials.SharedSecret.IssuerSecret = "<defaultkey>";    
    
                // create the service host reading the configuration
                ServiceHost host = new ServiceHost(typeof(MyService), address);
                
                
                IEndpointBehavior serviceRegistrySettings = new ServiceRegistrySettings(DiscoveryType.Public);

                ((ServiceRegistrySettings)serviceRegistrySettings).DisplayName = "MyService";
                ((ServiceRegistrySettings)serviceRegistrySettings).DiscoveryMode = DiscoveryType.Public;  
                
               
                foreach (ServiceEndpoint subscriberEndpoint in host.Description.Endpoints)
                {
                    subscriberEndpoint.Behaviors.Add(serviceRegistrySettings);
                    subscriberEndpoint.Behaviors.Add(userNamePasswordServiceBusCredential);
                                       
                }
                

                Console.WriteLine("Starting My Authentication service...");
                
                host.Open();                
                
                Console.WriteLine("My service started.");
                Console.WriteLine("Service address: " + address);
                Console.WriteLine("Press [Enter] to exit");
                Console.ReadLine();
                Console.WriteLine("Please wait...");               
                host.Close();
=========================================
Config

     <bindings>     
      <ws2007HttpBinding>
        <binding name="default" closeTimeout ="00:05:00" openTimeout ="00:05:00">          
        </binding>
      </ws2007HttpBinding> 
    </bindings>
    <services>      
       <service name="MyService.MyService" >
        <endpoint contract="MyService.IMyServiceContract" binding="ws2007HttpBinding" bindingConfiguration ="default"  />         
      </service>
    </services>

=================================

Client code with configuaraton is 


  Uri serviceUri = ServiceBusEnvironment.CreateServiceUri("http", solutionName, "MyService");


            TransportClientEndpointBehavior sharedSecretServiceBusCredential = new TransportClientEndpointBehavior();
            sharedSecretServiceBusCredential.CredentialType = TransportClientCredentialType.SharedSecret;
            sharedSecretServiceBusCredential.Credentials.SharedSecret.IssuerName = "owner";
            sharedSecretServiceBusCredential.Credentials.SharedSecret.IssuerSecret = "<defaultkey>";       
          
            channelFactory = new ChannelFactory<IMyServiceChannel>("ws2007HttpBinding", new EndpointAddress(serviceUri));
            channelFactory.Endpoint.Behaviors.Add(sharedSecretServiceBusCredential);
            channel = channelFactory.CreateChannel();
            channel.Open(); 
            channel.MyMethod();
            channel.Close();
==============
Config

<bindings>
      <ws2007HttpBinding>
      <binding name="default1" closeTimeout="00:05:00" openTimeout="00:05:00" receiveTimeout="00:05:00" sendTimeout="00:02:00">       
      </binding>
    </ws2007HttpBinding>
</bindings>
<client>
          <endpoint contract="WindowsFormsApplication1.IMyServiceContract" binding="ws2007HttpBinding"
                    bindingConfiguration="default1" name="ws2007HttpBinding">                 

          </endpoint>     
      
</client>
When i try to call method of the service the inner exception is 404 not found.
After the service registration i don't see my service listed in public atom feed.
Please help.

Please mark if reply answers your query.

The .NET Services November 2009 CTP QFE Breaking Changes Announcement and Scheduled Maintenance

Thu, 12 Nov 2009 01:18:42 Z

The .NET Services Team will release a QFE on 11/12/2009 (Thursday). Users will have NO access to .NET Services Portal and .NET Services during the scheduled maintenance down time. Please note that any Access Control Service data (i.e. rules, scopes, issuers, token policies) that customers have created will have to be manually restored by customers post this QFE release.

When:

START: November 12th, 2009, 3pm PST

END: November 13th, 2009, Midnight PST

Impact Alert:

Service Bus, Access Control Service and the .NET Services Portal will be unavailable during this period.

Please read the following detail to prepare your applications for this QFE release:

.NET Services SDK Samples

Service Bus Message Buffer HTTP API Sample
Description	A HTTP Message Buffer sample has been added to the November 2009 CTP QFE SDK
Pre-Release Behavior	SDK contains Message Buffer Client sample only
Post-Release Behavior	SDK contains both Message Buffer Client and HTTP Message Buffer samples
Recommended Post-Release Action	In order to get access to the new HTTP Message Buffer samples, users will need to download the new November 2009 CTP QFE SDK

Access Control Service

A New Service Namespace Management Key will be generated
Description	A New Service Namespace Management Key will be generated. Please note that it might take up to 24 hours for some management keys to be generated after the release
Pre-Release Behavior	n/a
Post-Release Behavior	n/a
Recommended Post-Release Action	Configuration files, user code or scripts referencing the management key should be updated with the new management key
Access Control Service data will not be migrated
Description	All Access Control Service data such as rules, scopes, token policies, issuers will not be migrated to the November 2009 CTP QFE release
Pre-Release Behavior	n/a
Post-Release Behavior	n/a
Recommended Pre-Release Action	Export Access Control Service data Customers who have configured ACS data (i.e. rules, scopes, token policies and issuer) may wish to export their data to enable post release restoration. Currently the acm.exe tool does not support bulk operations such as backup/restore. Instead, it must be performed manually. To assist in the process there is a short script you can run which will create a collection of text files that capture the Token Policies, Scopes, Issuers, and Rules in files. While the Token Policies, Scopes, and Issuers are retrieved into their own respective files, the Rules must be retrieved in reference to the Scope. As such, the script loops through all the scope IDs in scopes.txt and requests all the rules for that particular scope and places them in the rules_[scope id].txt file. To run this script, please ensure that the Service Namespace (service) and the Management key (mgmtkey) properties are set in acm.exe.config. Export.BAT acm getall scope > scopes.txt FOR /F "tokens=2 delims=: " %%G IN ('findstr /B "id" scopes.txt') DO (acm getall rule -scopeid:%%G >> rules_%%G.txt) acm getall tokenpolicy > tokenpolicy.txt acm getall issuer > issuer.txt
Recommended Post-Release Action	Restore Access Control Service Data Please note that a new Service Namespace Management Key will be generated as part of the QFE release. After the QFE release, you will have to retrieve the new key from the Portal and update acm.exe.config. To perform a restoration, you will have to run all the necessary commands using the acm.exe tool. To learn more about how to use the acm.exe tool, please see the ACM.exe sample in the SDK. Due to dependencies, the restoration must be done in a particular order. First the Token Policies, then the Scopes which reference the Token Policy IDs, then the Issuers, and then the Rules which reference both the Scope IDs and the Issuer IDs.

The .NET Services Team

Adding an Issuer to ACS

Tue, 10 Nov 2009 19:21:12 Z

I would like to create a new issuer with listen rights to the root service namespace for my .NET Service Bus Project. I have been able to create a user, but not successful in giving that user permissions to the service bus to host services. I have been able to secure my own scope such as localhost with the ACS, but having issues trying provide different levels of access to my service namespace on the .NET Service Bus.

Essentially I want another issuer with send rights, a seperate issuer with listen rights and then the owner can still manage the bus.

Thanks,

George Vigelette

Frequent TimeoutException while trying to access service

Mon, 09 Nov 2009 13:44:52 Z

Hi all,

I expose five different web services over the service bus from a console application.

            // create the endpoint address in the solution's namespace

            Uri address = ServiceBusEnvironment.CreateServiceUri("sb", ServiceBusLibrary.ServiceBusUtil.solutionName, serviceName);



            // create the service host reading the configuration

            ServiceHost host = new ServiceHost(serviceType, address);



            ServiceBusEnvironment.SystemConnectivity.Mode = ConnectivityMode.Http;



            //Set the DiscoveryType to Public and Publish this in the Service Registry

            ServiceRegistrySettings serviceRegistrySettings = new ServiceRegistrySettings();

            serviceRegistrySettings.DiscoveryMode = DiscoveryType.Public;

            serviceRegistrySettings.DisplayName = serviceName;



            // add the Service Bus credentials to all endpoints specified in configuration

            foreach (ServiceEndpoint endpoint in host.Description.Endpoints)

            {

                endpoint.Behaviors.Add(userNamePasswordServiceBusCredential);

                endpoint.Behaviors.Add(serviceRegistrySettings);

            }



            // open the service

            host.Open();

The contract looks like this:

    [ServiceBehavior(Name = "CompanyService")]

    public class CompanyService : IReceiveMessageFromServiceBusService

    {

        public void ReceiveOrder(OrderMessage orderMessage)

        {

            // add Order Entry to Table

        }



        public void ReceiveDelivery(DeliveryMessage deliveryMessage)

        {



            // add Delivery Entry to Table

      }



        public void ReceiveStatusMessage(StatusMessage statusMessage)

        {

            // TODO implement

        }

    }



    [ServiceContract]

    public interface IReceiveMessageFromServiceBusService

    {

        [OperationContract(IsOneWay = true)]

        void ReceiveOrder(OrderMessage orderMessage);



        [OperationContract(IsOneWay = true)]

        void ReceiveDelivery(DeliveryMessage deliveryMessage);



        [OperationContract(IsOneWay = true)]

        void ReceiveStatusMessage(StatusMessage statusMessage);

    }



    public interface IReceiveMessageFromServiceBusServiceChannel : IReceiveMessageFromServiceBusService, IClientChannel { }

And the configuration file:

<system.serviceModel>

        <services>

            <service

                name="CompanyServices.Services.CompanyService">

                <endpoint address="" binding="netTcpRelayBinding" 

                contract="ServiceBusLibrary.Services.IReceiveMessageFromServiceBusService" />

            </service>

        </services>

</system.serviceModel>

Now I run a worker role which checks for messages in a queue and which redirects the messages to the appropriate service hosted above.

ServiceBusEnvironment.SystemConnectivity.Mode = ConnectivityMode.Http;

ChannelFactory<IReceiveMessageFromServiceBusServiceChannel> channelFactory = new ChannelFactory<IReceiveMessageFromServiceBusServiceChannel>(new NetTcpRelayBinding(EndToEndSecurityMode.Transport, RelayClientAuthenticationType.None), new EndpointAddress(serviceAddress));

channelFactory.Endpoint.Behaviors.Add(ServiceBusUtil.GetCredentials());

IReceiveMessageFromServiceBusServiceChannel onewayChannel = channelFactory.CreateChannel();

onewayChannel.Open();

onewayChannel.ReceiveDelivery(deliverMessage);

onewayChannel.Close();<br/>

And there the problem arises:

11.09.2009 12:37:35:020,Event=Critical,Level=Critical,ThreadId=5344,=Could not open service for recipient CompanyThree Exception: System.TimeoutException: The socket transfer timed out after 00:00:56.8060000. You have exceeded the timeout set on your binding. The time allotted to this operation may have been a portion of a longer timeout. ---> System.IO.IOException: Fehler bei Lesevorgang, siehe interne Ausnahme. ---> System.TimeoutException: The socket transfer timed out after 00:00:56.8060000. You have exceeded the timeout set on your binding. The time allotted to this operation may have been a portion of a longer timeout. ---> System.Net.Sockets.SocketException: Ein Verbindungsversuch ist fehlgeschlagen, da die Gegenstelle nach einer bestimmten Zeitspanne nicht richtig reagiert hat, oder die hergestellte Verbindung war fehlerhaft, da der verbundene Host nicht reagiert hat

   bei System.Net.Sockets.Socket.Receive(Byte[] buffer, Int32 offset, Int32 size, SocketFlags socketFlags)

   bei Microsoft.ServiceBus.Channels.SocketConnection.ReadCore(Byte[] buffer, Int32 offset, Int32 size, TimeSpan timeout, Boolean closing)

   --- Ende der internen Ausnahmestapelüberwachung ---

   bei Microsoft.ServiceBus.Channels.SocketConnection.ReadCore(Byte[] buffer, Int32 offset, Int32 size, TimeSpan timeout, Boolean closing)

   bei Microsoft.ServiceBus.Channels.SocketConnection.Read(Byte[] buffer, Int32 offset, Int32 size, TimeSpan timeout)

   bei Microsoft.ServiceBus.Channels.ConnectionStream.Read(Byte[] buffer, Int32 offset, Int32 count, TimeSpan timeout)

   bei Microsoft.ServiceBus.Channels.ConnectionStream.Read(Byte[] buffer, Int32 offset, Int32 count)

   bei System.Net.FixedSizeReader.ReadPacket(Byte[] buffer, Int32 offset, Int32 count)

   bei System.Net.Security._SslStream.StartFrameHeader(Byte[] buffer, Int32 offset, Int32 count, AsyncProtocolRequest asyncRequest)

   bei System.Net.Security._SslStream.StartReading(Byte[] buffer, Int32 offset, Int32 count, AsyncProtocolRequest asyncRequest)

   bei System.Net.Security._SslStream.ProcessRead(Byte[] buffer, Int32 offset, Int32 count, AsyncProtocolRequest asyncRequest)

   --- Ende der internen Ausnahmestapelüberwachung ---

   bei System.Net.Security._SslStream.ProcessRead(Byte[] buffer, Int32 offset, Int32 count, AsyncProtocolRequest asyncRequest)

   bei System.Net.Security.SslStream.Read(Byte[] buffer, Int32 offset, Int32 count)

   bei Microsoft.ServiceBus.Channels.StreamConnection.Read(Byte[] buffer, Int32 offset, Int32 size, TimeSpan timeout)

   --- Ende der internen Ausnahmestapelüberwachung ---

   bei Microsoft.ServiceBus.Channels.StreamConnection.Read(Byte[] buffer, Int32 offset, Int32 size, TimeSpan timeout)

   bei Microsoft.ServiceBus.Channels.DelegatingConnection.Read(Byte[] buffer, Int32 offset, Int32 size, TimeSpan timeout)

   bei Microsoft.ServiceBus.Channels.ClientFramingDuplexSessionChannel.SendPreamble(IConnection connection, ArraySegment`1 preamble, TimeoutHelper& timeoutHelper)

   bei Microsoft.ServiceBus.Channels.ClientFramingDuplexSessionChannel.DuplexConnectionPoolHelper.AcceptPooledConnection(IConnection connection, TimeoutHelper& timeoutHelper)

   bei Microsoft.ServiceBus.Channels.ConnectionPoolHelper.EstablishConnection(TimeSpan timeout)

   bei Microsoft.ServiceBus.Channels.ClientFramingDuplexSessionChannel.OnOpen(TimeSpan timeout)

So it can't get a connection to the exposed services. The timeout occurs about ten times after restarting all applicaitons then it works for one time. This also happens if I expose the service in a worker role, so this doesn't seem to be a hardware related issue.

- I tried disabling all of my firewalls.
- Start several Visual Studio processes for every application.
- Changed the ConnectivityMode from AutoDetect to Http which didn't help.
- I also tried setting the TimeSpan to one minute and implemented a retry mechanism, but the service could never be reached.

Thanks for any help,

Axel

How to create ACS Rule for Live.com programatically

Mon, 02 Nov 2009 08:45:06 Z

As per the notes which i found in another thread
"This is the desired behavior. Since no rules exist, ACS will consider the input claim as invalid, and forbids the client from accessing your service. It will be ideal to support the wildcard (*) for Live ID, so any one authenticated by Live ID will be able to access your service. Unfortunately, currently wildcard is only supported when using "Copy input claim", which no longer suits to Live ID. Our ACS and Live ID team are working together to see if it is possible to support wildcard for Live ID in the future. For now, you have to create a rule for each Live ID that you trust."

To address this i need to create ACS Rules programatically, where Application has the WindowsLiveId of the user. Application should be able to add a rule in ACS where Claim WindowsLiveId is = <user'swindowsliveid> and output claim is Action=user's Windows live id.
I have gone through the .Net service bus but there is no sample available for adding a rule for external issuers like live.com

Please let me know how to achieve this.

Please mark if reply answers your query.

User Authentication using ACS + Geneva Server

Fri, 06 Nov 2009 14:23:18 Z

Hi,

I have a web application which relies on WSFederationAuthentication(https://<myservice>.accesscontrol.windows.net/passivests/federation.aspx) using ACS and a geneva server hosted in our network/domain for user authentication.
Does this apporach still hold vaild? Is there any sample to demonstrate user authentication using ACS and geneva server as STS?

Thanks,
Rahul

Scheduled Maintenance Notification - .NET Services Access Control Service - 11/10

Wed, 11 Nov 2009 01:57:01 Z

Please see this blog post for detail.

Note that .NET Services Portal or Service Bus features leveraging Access Control Servie will also be unavailable during this scheduled maintenance.

ACS & Live Federation - passive STS URI is not working

Tue, 10 Nov 2009 11:00:23 Z

Hi,

I have a cloud app and I have used Live fedration using passive STS URI. This is not working since last few days.

Could you please let me know what are the chages and how I can solve the problem.

Thanks and Regards,

sidG

Issue report: Wrong namespace in .NET Service Bus MSDN document

Mon, 09 Nov 2009 14:17:33 Z

Issue location in MSDN: http://msdn.microsoft.com/en-us/library/ee725239.aspx
.NET Services Programming Guide
    Service Bus
        System and Developer Requirements
            Getting Started with Service Bus
                Service Bus Tutorial

Issue description:
The attribute to describe the service has a wrong namespace "http://samples.microsoft.com/ServiceModel/Relay/EchoV1". There're many similar appears in this sample.
------------ code begin -------------
[ServiceBehavior(Name = "EchoService", Namespace = "http://samples.microsoft.com/ServiceModel/Relay/EchoV1")]
public class EchoService : IEchoContract
{
    public string Echo(string text)
    {
        Console.WriteLine("Echoing: {0}", text);
        return text;
    }
}
----------- code end ----------------

Issue Correction:
The Namespace is incorrect. It should be "http://samples.microsoft.com/ServiceModel/Relay/".

If we use the wrong service namespace to run the service and client, when we call method Echo, an exception will be thrown, saying:"The message with Action 'http://samples.microsoft.com/ServiceModel/Relay/IEchoContract/Echo' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None)."

AppFabric Forum

Question about ACS and WIF

Running on machines with "autodetect" proxy settings

Will the final ServiceBus Impl support ISA Server compatible HTTP polling without installing ISA Client?

"The timeout elapsed upon attempting to obtain a token." Error sometimes

.Net Services Security Primer

,Net service bus not showing in Service metadata/Publicly Listed Services

Publishing a metadata endpoint on the service bus

Dist TX over servicebus

Error running Echoclient - Service Bus tutorial

The missing "Add STS Reference" (VS 2008 & WIF)

New training kit released on nov 17-09 for updated .net services sdk of nov.

Problem with adding a service to .Net Services Solution

Publishing Sensor Events to Many Clients using NetEventRelay (Ideally Silverlight Clients)

Service Bus Quotas

listener and sender quotas

Service bus -> Rest tutorial -> not able to see image when url pasted.

Windows Azure Web Role + Access Control Services

Why did my service application try to access "watchdog.servicebus.windows.net"?

Running the EchoSample Behind Firewall

Binding configuration errors, which were previously working

November CTP Max Message Size

How to Add ACS Custom Issuer - Nov CTP

Graphical Tool Prototype for the ACS Management Service

The .NET Services November 2009 CTP Breaking Changes Announcement and Scheduled Maintenance

Service Namespace suddenly deleted

Authentication/Authorization using ACS

SecurityTokenException while using Service Bus

Problem accessing .NET Services for Azure

Securing a Web Service while exposing the mex endpoint publically

how to find the "shared secret key" for a service

Access control service unavailable

.Net Service Bus Nov CTP - 404 error using ws2007HttpBinding

The .NET Services November 2009 CTP QFE Breaking Changes Announcement and Scheduled Maintenance

.NET Services SDK Samples

Service Bus Message Buffer HTTP API Sample

Access Control Service

A New Service Namespace Management Key will be generated

Access Control Service data will not be migrated

Adding an Issuer to ACS

Frequent TimeoutException while trying to access service

How to create ACS Rule for Live.com programatically

User Authentication using ACS + Geneva Server

Scheduled Maintenance Notification - .NET Services Access Control Service - 11/10

ACS & Live Federation - passive STS URI is not working

Issue report: Wrong namespace in .NET Service Bus MSDN document