Home | Contact Us | FAQ | Search & Site Map | Link to Us
Sign In | Join | Other 45 Sites in Network
HomeAnnouncementsFree MagazinesWhite PapersSubmit Content
Discussion GroupsASP.NETWindows FormsLanguages.NET FrameworkVisual Studio.NET
Articles.NET FrameworkASP.NETToolsWindows Forms
.NET DirectoryOpen Source ProjectsUser GroupsWeb Resources
Related Topics
Visual Basic 6SQL ServerMS AccessOther DB ProductsMS Server ProductsMore Topics ...

.NET Forum / ASP.NET / Web Services / July 2005

Tip: Looking for answers? Try searching our database.

WSE 3.0 and SecureConversation

Thread view: 
Enable EMail Alerts  Start New Thread
Thread rating: 
Youenn Trebossen - 14 Jun 2005 17:07 GMT
Hi,

I'm currently trying to enable WS-SecureConversation as mentionned in
the WSE 3.0 Security Hands On Lab. I changed the
establishSecurityContext attribute to "true" as mentionned. I can see in
the traces the first call to request a security token, but each
subsequent request makes also a call for a security token before the
real call the web service. So how to set up correctly the policies to
enable SecureConversation ? And How to set up the TTL for the
SecureConversation Session ?

Thanks

Youenn
Sidd - 06 Jul 2005 07:22 GMT
Hi Youenn,

    The WSE3 HOL's demonstration of SCT was for informational purposes
only. The reason why you are seeing an RSTR every single time you push the
View Invoices button is because in the code for View Invoices, a new
instance of the proxy is created. We associate an SCT with the lifetime of
the proxy, and
since a new proxy is created every time the View Invoices button is pressed,
we see an RST for every call.

    If you actually wanted to see the RSTR getting sent only once, then you
could make the proxy global to the class, in which case it will only get
constructed once and the SCT
requested from the first RST will get used in subsequent messages.

   Let me know if you have more questions.

Thanks,

Sidd [MSFT]

> Hi,
>
[quoted text clipped - 10 lines]
>
> Youenn
Youenn Trebossen - 07 Jul 2005 08:22 GMT
Thanks Sidd,

I made the proxy global to my class, and the RSTR is effectively sent
only once. However, how can i make this RSTR happens only once when i
have multiple web services proxies ?  Is it possible "by default", or do
i need to make my own Security token service ?

Youenn

> Hi Youenn,
>
[quoted text clipped - 31 lines]
>>
>>Youenn

Rate this thread:







Free Magazines

Get these publications absolutely FREE for up to 12 months. There are no hidden fees and no obligation. Simply choose a title, complete the application form and submit it. Read more ...

Oracle MagazineNetwork ComputingComputer WorldBio-IT WorldeWeekInformation WeekInfosecurity
 
Sign In
Join
My Latest Posts
My Monitored Threads
My Blog
My Photo Gallery
My Profile
My Homepage

Start New Thread
Enable EMail Alerts
Rate this Thread



©2008 Advenet LLC   Privacy Policy - Terms of Use
This website includes both content owned or controlled by Advenet as well as content owned or controlled by third parties.