DualChannel结合了联邦安全 [英] DualChannel binding over Federation Security
问题描述
我们正在运行的一组WCF服务通过HTTPS并使用ws2007FederationHttpBinding结合来验证一个STS。
We are running a set of WCF services over HTTPS and using the ws2007FederationHttpBinding binding to authenticate against a STS.
现在我们需要使用相同的认证技术增加了双/双工服务。 了解您的绑定选项的状态,只有wsDualHttpBinding可用双面服务。我可以用它与我的STS,如果是确实有人知道如何配置呢?
Now we need to add a dual/duplex service using the same authentication technique. Know Your Binding Options states that only wsDualHttpBinding is available for duplex services. Can i use it together with my STS and if yes does somebody know how to configure it?
推荐答案
没有,如果面向外,双结合通常是一个坏主意。 的http://blog.gdssecurity.com/labs/2010/2/12/abusing-wcf-to-perform-remote-port-scans.html 知道风险......
No, and if outward facing, dual binding is generally a bad idea. http://blog.gdssecurity.com/labs/2010/2/12/abusing-wcf-to-perform-remote-port-scans.html Know the risks...
这篇关于DualChannel结合了联邦安全的文章就介绍到这了,希望我们推荐的答案对大家有所帮助,也希望大家多多支持IT屋!