Hello,

i've some questions about wcf security. I would like to connect a service
(hosted in IIS7) from a client with username and password over the internet
(wsHttpBinding).

Questions:

1. Is it possible to connect the service with username and password without
a certificate?

2. I've read about login with username and password inside the Intranet with
Useraccounts from windows. Is this possible over the internet as well or do I
have to store userinformation in a SQL database separately?

3. Basicly I'm interessted in doing login to the service with username and
password. What is needed in this case? (Credentials, Binding, Message or
Transport, SSL, Settings...)

4. Is there any project which shows how to do the basic security or could
anybody explain these basics?

Thank you very much.
Best regards Ivan

Hello Mr. Arnold

I think it's ok here because the application is done in c#.

Thanks anyway.

Best regards.
Ivan

"Mr. Arnold" wrote:

>
> "Ivan" <(E-Mail Removed)> wrote in message
> news67F388A-7C70-4DB0-B211-(E-Mail Removed)...
> > Hello,
> >
> > i've some questions about wcf security. I would like to connect a service
> > (hosted in IIS7) from a client with username and password over the
> > internet
> > (wsHttpBinding).
> >
> > Questions:
> >
> > 1. Is it possible to connect the service with username and password
> > without
> > a certificate?
> >
> > 2. I've read about login with username and password inside the Intranet
> > with
> > Useraccounts from windows. Is this possible over the internet as well or
> > do I
> > have to store userinformation in a SQL database separately?
> >
> > 3. Basicly I'm interessted in doing login to the service with username and
> > password. What is needed in this case? (Credentials, Binding, Message or
> > Transport, SSL, Settings...)
> >
> > 4. Is there any project which shows how to do the basic security or could
> > anybody explain these basics?
> >
> >
>
> You might want to post to MS.Public.dotnet.framework.webservices.
>
>
>
> __________ Information from ESET NOD32 Antivirus, version of virus signature database 4039 (20090428) __________
>
> The message was checked by ESET NOD32 Antivirus.
>
> http://www.eset.com
>
>
>
>