WCF SecurityContext with many clients

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

Pedro Ciarlini - 09 Feb 2008 00:39 GMT

Hi all,

I'm without ideas to fix this problem...

Scenario:
- One WCF Service
* ( using "ServiceBehavior(InstanceContextMode =
InstanceContextMode.PerSession)]" )
- Many WCF clients, with windows integrated authentication;
- The service must know the client login name;
* This is necessary for authorization purposes;
* The property
"OperationContext.Current.ServiceSecurityContext.WindowsIdentity.Name"
works at a first moment;

Problem (sequence):
// having login_name =
OperationContext.Current.ServiceSecurityContext.WindowsIdentity.Name;

1) Client1 calls a service method (Debug: the login_name is 'user1' -
ok);
2) Client1 enters on a FaultState (for any reason);
3) Client2 calls a service method (Debug: the login name is
login_name is 'user2' - ok);
4) Client1 creates a new client;
5) Client1 calls a service method (Debug: the login name is
login_name is 'user2' - NOT OK);

Anybody?

Reply to this Message

Dominick Baier - 09 Feb 2008 06:27 GMT

you are talking about physically separated clients? any chance you are sharing
the channel factory or the proxy between the 2 clients??

-----
Dominick Baier (http://www.leastprivilege.com)

Developing More Secure Microsoft ASP.NET 2.0 Applications (http://www.microsoft.com/mspress/books/9989.asp)

> Hi all,
>
[quoted text clipped - 23 lines]
> login_name is 'user2' - NOT OK);
> Anybody?

Reply to this Message

Pedro Ciarlini - 09 Feb 2008 12:46 GMT

Shame on me...

I found the problem yesterday, and is exactly this, Dominick. A #$$%@#
static property on my client was sharing the same channel.

My bad. Thanks!

On 9 fev, 03:27, Dominick Baier
<dbaier@pleasepleasenospam_leastprivilege.com> wrote:

> you are talking about physically separated clients? any chance you are sharing
> the channel factory or the proxy between the 2 clients??
[quoted text clipped - 31 lines]
> > login_name is 'user2' - NOT OK);
> > Anybody?

Reply to this Message

WCF SecurityContext with many clients

Free Magazines