Using a WCF Service in a cross domain environment

Question

Hello,

im using a WCF Service with an wsHttpBinding.

The service is hosted in an IIS Server. (Anonymous access enabled)

If i now use an user which is not in the domain where the service is hosted, i am reciving information about the service and it’s wsdl information in the internet explorer.

If my client trys to connect to this service the following exception is thrown:

SecurityNegotiaionException:

Der Aufrufer wurde vom Dienst nicht authentifiziert.

(en: The user was not autheticated by the service)

               

InnerException:

 

                               {"The request for security token could not be satisfied because authentication failed."}

 

Where clould be my mistake?

 

Here is the current configuration:

Server:

 <system.serviceModel>
    <services>
      <service behaviorConfiguration="BuildManagementWS.Service1Behavior"
        name="Service.BuildManagementWS">
        <endpoint address="" binding="wsHttpBinding" bindingConfiguration="ManualWsHttpBinding"
          contract="Service.IBuildManagement">
          <identity>
            <dns value="localhost" />
          </identity>
        </endpoint>
        <endpoint address="mex" binding="mexHttpBinding" contract="IMetadataExchange" />
        <host>
          <baseAddresses>
            <add baseAddress="***" />
          </baseAddresses>
        </host>
      </service>
    </services>
    <bindings>
      <wsHttpBinding>
        <binding name="ManualWsHttpBinding" closeTimeout="00:01:00"
                    openTimeout="00:01:00" receiveTimeout="00:10:00" sendTimeout="00:01:00" 
                    bypassProxyOnLocal="false" transactionFlow="false" hostNameComparisonMode="StrongWildcard"
                    maxBufferPoolSize="524288" maxReceivedMessageSize="65536"
                    messageEncoding="Text" textEncoding="utf-8" useDefaultWebProxy="false"
                    allowCookies="false">
          <readerQuotas maxDepth="32" maxStringContentLength="8192" maxArrayLength="16384"
                        maxBytesPerRead="4096" maxNameTableCharCount="16384" />
          <security mode="None">
          </security>
        </binding>
      </wsHttpBinding>
    </bindings>

    <behaviors>
      <serviceBehaviors>
        <behavior name="BuildManagementWS.Service1Behavior">
          <!-- To avoid disclosing metadata information, 
          set the value below to false and remove the metadata endpoint above before deployment -->
          <serviceMetadata httpGetEnabled="True"/>
          <!-- To receive exception details in faults for debugging purposes, 
          set the value below to true.  Set to false before deployment 
          to avoid disclosing exception information -->
          <serviceDebug includeExceptionDetailInFaults="True" />
        </behavior>
      </serviceBehaviors>
    </behaviors>
  </system.serviceModel>

Client:

  <system.serviceModel>
    <bindings>
      <wsHttpBinding>
        <binding name="WSHttpBinding_IBuildManagement" closeTimeout="00:01:00"
            openTimeout="00:01:00" receiveTimeout="00:10:00" sendTimeout="00:01:00"
            bypassProxyOnLocal="false" transactionFlow="false" hostNameComparisonMode="StrongWildcard"
            maxBufferPoolSize="524288" maxReceivedMessageSize="65536"
            messageEncoding="Text" textEncoding="utf-8" useDefaultWebProxy="false"
            allowCookies="false">
          <readerQuotas maxDepth="32" maxStringContentLength="8192" maxArrayLength="16384"
              maxBytesPerRead="4096" maxNameTableCharCount="16384" />
          <reliableSession ordered="true" inactivityTimeout="00:10:00"
              enabled="false" />
        </binding>
      </wsHttpBinding>
    </bindings>
    <client>
      <endpoint address="http://***/BuildManagementWS/BuildManagementWS.svc"
          binding="wsHttpBinding" bindingConfiguration="WSHttpBinding_IBuildManagement"
          contract="svc.IBuildManagement" name="WSHttpBinding_IBuildManagement">
        <identity>
          <dns value="localhost" />
        </identity>
      </endpoint>
    </client>
  </system.serviceModel>

In addition, if im trying to connect to the service in the same domain, everything is working fine.