none
WSE & WCF RRS feed

  • Question

  • I'm a beginner in WCF programming and I need to understand something about security implementation in WCF:

    - Can I use WSE3.0 with the aim of implement security in a wcf service? In particular, my wcf service isn't hosted in IIS, it's hosted in a windows service...


    -  If it's possible, can I use WSE3 "as is" or should I look at something like this topic? http://msdn.microsoft.com/en-us/library/ms732008(VS.85).aspx          
                     
    Thanks a lot
    fRenato                  
                     
                            
    • Edited by Don Tan Friday, June 26, 2009 6:45 PM Fixing Thread Title bug
    Thursday, June 25, 2009 3:30 PM

Answers

All replies

  • The link you provided is good - it explains how to use WSE3 to be interoperable with WCF, as not all WSE3 utilities are compatible.
    http://webservices20.blogspot.com/
    WCF Security, Performance And Testing Blog
    Thursday, June 25, 2009 4:29 PM
  • You do not need WSE with WCF. WCF supports everything out of the box. Take a look at http://www.codeplex.com/WCFSecurity and http://www.codeplex.com/WCFSecurity

    Nordine Ben Bachir
    Thursday, June 25, 2009 8:01 PM
  • Hi fRenato, 

    WSE is obsolete, you really shouldn't be using it.

    John Saunders said it all:

    "I want to make clear what I so frequently have to repeat: WSE is obsolete. It has been replaced by WCF (Windows Communication Framework). WSE is not supported by Visual Studio 2008 or above. This should give you an idea about how Microsoft thinks about WSE. If your project is at all important, and if you expect it to last more than a few months, then you will not be doing yourself any favors by depending on this obsolete software."

    You can read the whole post here.

    Regards,
    John
    Friday, June 26, 2009 2:02 AM
  • Hi,

    I really want to thank you for your answers and explanations, I will not use WSE...but I'd like you to confirm something in my mind:
    I had understood that theoretically I could use WSE, but not "as is", I had understood I should look at "http://msdn.microsoft.com/en-us/library/ms732008(VS.85).aspx" to use it...is it correct?

    Thanks a lot
    fRenato
    Friday, June 26, 2009 11:30 AM
  • Hi fRenato,

    the article you provided discusses the WSE -> WCF migration process, I would suggest that you examine the content provided here.

    Regards,
    John
    Friday, June 26, 2009 1:31 PM
  • Hi John,

    thanks for your answer, I'll examine the content you suggest. I've another question...my service must interoperate with a java client, can you tell me something about compatibility between Wcf security and Java? Can you suggest me any link on this topic?

    Regards,
    fRenato
    Friday, June 26, 2009 1:51 PM
  • This post should do it.

    Regards,
    John
    Friday, June 26, 2009 3:14 PM
  • The safest way to ensure interoperability is to use basicHttpBinding on the wcf side.

    If you use WsHttpBinding remember to turn off negotiateServiceCredentials as it is not supported by java.

    You might also want to take a look at my blog where I write about WCF-Java interoperability issues, you can register for updates.

    My WCF-Java blog:


    http://webservices20.blogspot.com/
    WCF Security, Performance And Testing Blog
    Friday, June 26, 2009 4:33 PM
  • Thank you John, Thank you Yaron for your answers
    Monday, June 29, 2009 8:23 AM
  • Hi,

    I'm going to design security features for my Wcf service: at the moment I can't establish the context in wich I'll use my service (intranet, internet or both), thus I can't select which type of Transfer Security (transport, message or both) is the best for my purpose...otherwise I didn't study Wcf Security enough!

    My question is: if I choose a certain Transfer Security mode, can I change it in the future according to another scenario? If I can, is it possible to change it working with configuration files only, without implementing new code?


    Thank you for helping me, I'm sorry if my english is not so good
    fRenato


    Tuesday, June 30, 2009 12:55 PM