Welcome to MSDN Blogs Sign in | Join | Help

March 2008 - Posts

WCF Security Guidance Project

The patterns & practices team at Microsoft has put together their first release of guidance for WCF security . They've included how-to guides and videos that walk you through a number of security tasks, such as working with certificates and configuring

Overriding Protection for IPSec

How do I use username credentials with IPSec? I'm told that I need to turn on security but my connection is already secure. WCF only permits username tokens to be transmitted over a binding that's secure. If a username and password are transmitted without

WCF and WF in the Framework Training Kit

I hadn't seen this before, but the training kit for Visual Studio 2008 and .NET Framework 3.5 was updated a few weeks ago. This kit includes demos, presentations, and labs to go through self-directed and at your own pace. If you've got a copy of Visual
Posted by Nicholas Allen | 1 Comments
Filed under: , ,

ReMIX Event Calendar

Now that MIX is over, the presentation goes on the road. There are actually two different formats for the road shows. MIX Essentials is a one day event that covers the highlights of the conference with local keynote speakers added in. ReMIX is a multi-day
Posted by Nicholas Allen | 0 Comments
Filed under: ,

Why Ordering is Ignored

Why doesn't validation catch when the two sides of a reliable connection disagree about whether the session is ordered? It doesn't actually matter to the sender whether the session is supposed to be ordered, and so it doesn't actually matter whether the

Getting Caught by Loopback

I'm trying to connect to a service on the same machine using Windows credentials and getting an authentication error. I can connect to the service from other machines. I can also connect to the service if I set up an endpoint that listens on the loopback
Posted by Nicholas Allen | 1 Comments
Filed under: , ,

Make Your Own Silverlight Poster

If you didn't attend MIX you missed out on getting the Silverlight 2 developer's poster. However, Brad Abrams has posted the high-quality images so you can make your own. Now you can prove to your friends that WCF is in Silverlight: it takes up half of
Posted by Nicholas Allen | 0 Comments
Filed under: , ,

Single Reader for MSMQ

My application needs to process messages from a queue in-order but multiple messages are being read at once. How do I make the service only use a single reader? There are two modes that control how many requests a service can process at once. InstanceContextMode

Validation Behaviors for Client and Service

The other day I talked about the built-in service validation behaviors but these behaviors are only a part of the overall validation story. Today I've got more of an end-to-end overview of behavior validation. Although validation is similar whether you're

Mystery of the Disappearing Addressing Headers

Why do the messages logged by my service show addressing headers but those headers disappear when the message is sent? This is easy to explain once you actually look at the messages. Here's a quick test program that generates some SOAP 1.1 messages with
Posted by Nicholas Allen | 1 Comments
Filed under: , ,

How to Get Help with WCF

There are many ways to get help with WCF, ranging from the free but not particularly reliable to the highly reliable but not particularly free. With paid options, such as Microsoft product support, you're generally trading money to get some kind of guarantee
Posted by Nicholas Allen | 0 Comments
Filed under:

Built In ServiceHost Validation Behaviors

Yesterday I talked about the validation done on bindings for partial trust. Partial trust validation gets run very early when the service host is opened using a service behavior. There are actually several of these service behaviors that run up front.

Partial Trust Binding Black List

Partial trust support in WCF is an Orcas feature that allows clients and services to be run in an environment with restricted permissions. WCF is part of a fully trusted installation, so by default partially trusted callers are not allowed to call into

A Peek Behind the MySpace API

As part of the MySpace session at MIX they've put online the code for a sample called RESTchess . RESTchess is a WCF REST application that mimics a lot of the developments behind the WCF implementation of the MySpace developer API. If you're interested
Posted by Nicholas Allen | 2 Comments
Filed under: , ,

MIX Video Wrap Up

The full video collection for MIX 2008 is available now (along with much of the content from the previous two years). I've pulled out some of the direct links for videos of interest to WCF developers. Feel free to suggest other sessions that you've watched
Posted by Nicholas Allen | 1 Comments
Filed under: , ,

Configuring Protection Level

Is it possible to configure the protection level for message parts at runtime? Only certain configurations make doing this particularly easy. When using transport security with Windows credentials, the WindowsStreamSecurityBindingElement allows you to

Customizing Exceptions for Validation

How do I customize the exception text sent back from a custom password validator? If you've looked at the documentation for UserNamePasswordValidator, then the instructions tell you to implement the validator by overriding the Validate method and throwing

Silverlight 2 Beta 1 Ships

If you didn't watch the MIX keynote yesterday then you missed out on the debut of Silverlight 2. You can still go back and watch the Day 1 Keynote or carry on with these resources. Microsoft® Silverlight TM 2 Software Development Kit Beta 1 Microsoft

Getting Live Content from MIX

If you're not at MIX you can still join in on the action starting from today. The keynote sessions will be streamed live from the event and the regular technical sessions will be streamed with a 24 hour delay (meaning that you'll be able to see today's
Posted by Nicholas Allen | 0 Comments
Filed under: ,

20 Years of Content Types

An invention that now seems to be ubiquitous turns out to only be 20 years old. RFC 1049 introduced the notion of a standardized Content-type field that message processors could use to automatically identify the type of a structured message and interpret
Posted by Nicholas Allen | 0 Comments
Filed under: ,

Sending to MSMQ with Integrated Authentication

What are the rules for when a client needs to support Active Directory integration for sending to an MSMQ queue? The circumstances may seen mysterious for when you need the client to be joined to a domain to take advantage of Active Directory integration,
 
Page view tracker