Hi,

I have a WCF service which I would like to secure using a username/password
kombination. I have added the following code in the config file on the host:

     <basicHttpBinding>
       <binding name="Binding1">
        <security mode="TransportWithMessageCredential">
         <message clientCredentialType ="UserName" />
         </security>
       </binding>
     </basicHttpBinding>
...
      <serviceCredentials>
        <userNameAuthentication userNamePasswordValidationMode="Custom"
customUserNamePasswordValidatorType="My.Host.MyUserNameValidator, My.Host"
/>
      </serviceCredentials>
...

I have added this code in the config file on the client:

     <basicHttpBinding>
       <binding name="NewBinding">
         <!--<security mode="TransportCredentialOnly">-->
         <security mode="TransportWithMessageCredential">
             <transport clientCredentialType="Basic" />
         </security>
       </binding>
     </basicHttpBinding>

Before I create my proxy I am setting a username and a password on the
ChannelFactory

                       ChannelFactory<IMyService> fact =
                           new ChannelFactory<IMyService>("main");
                      fact.Credentials.UserName.UserName = "Henrik";
                      fact.Credentials.UserName.Password = "MyPass";

                     proxy = fact.CreateChannel();

I now get the following error:
   The provided URI scheme 'http' is invalid; expected 'https'.

I can understand why I get it, because I am not passing a https url, but
both the service and the application is running inside the firewall, so I
would like to use normal http or mayby binary.

I have tried to use TransportCredentialOnly instead of
TransportWithMessageCredential. Then I get no error, but the code in my
server side UserNameValidator is never run, which means nothing is being
validated. So I am kind of stuck in between.

Any ideas?

Best regards
Henrik Skak Pedersen