我需要为net.tcp服务设置什么SPN? [英] What SPN do I need to set for a net.tcp service?

问题描述

我在运行本地Windows帐户的Windows服务中托管了一个wcf应用程序.我需要为此帐户设置一个SPN吗?如果是这样，SPN需要设置什么协议?我知道如何针对HTTP服务执行此操作，但从未针对net.tcp完成此操作.

I have a wcf application hosted in a windows service running a local windows account. Do I need to set an SPN for this account? If so, what's the protocol the SPN needs to be set under? I know how to do this for services over HTTP, but have never done it for net.tcp.

推荐答案

默认情况下(即开箱即用)net.tcp服务是不安全的，根本不执行任何身份验证.因此，您将不需要(实际上也不需要)设置服务主体名称.

By default (i.e. out of the box) net.tcp services are unsecured and don't perform any authentication at all. So you won't need (and in fact can't) set a service principal name.

如果需要进行身份验证，请检查 net. MSDN上的"tcp安全性" 模式.了解不同组合的最佳方法是进行实验！

If you need to authenticate, then check the net.tcp security modes on MSDN. The best way to understand the different combinations is to experiment!

这篇关于我需要为net.tcp服务设置什么SPN?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！