求助：WCF 安全之自定义的用户名/密码身份验证 中的identity dns怎么设置

服务器端使用证书来做“自定义用户名密码”认证方式，

服务端代码

   < system.serviceModel >
     < bindings >
       < wsHttpBinding >
         < binding name = " NewBindingUName " >
           < security mode = " Message " >
             < transport clientCredentialType = " None "   />
             < message clientCredentialType = " UserName "   />
           </ security >
         </ binding >
       </ wsHttpBinding >
     </ bindings >
     < services >
       < service behaviorConfiguration = " WcfServiceApp.ServicesBehavior "
        name = " WcfServiceLib.Services " >
         < endpoint address = ""  binding = " wsHttpBinding "  bindingConfiguration = " NewBindingUName "
          contract = " WcfServiceLib.IServices " >
           < identity >
             < dns value = " 192.168.6.118 "   />
           </ identity >
         </ endpoint >
         < endpoint address = " mex "  binding = " mexHttpBinding "  contract = " IMetadataExchange "   />
         < host >
           < baseAddresses >
             < add baseAddress = " http://192.168.6.118/DotNet/OK/Test/WcfLibTest/WcfServiceApp/ "   />
           </ baseAddresses >
         </ host >
       </ service >
     </ services >
     < behaviors >
       < serviceBehaviors >
         < behavior name = " WcfServiceApp.ServicesBehavior " >
           < serviceMetadata httpGetEnabled = " true "   />
           < serviceDebug includeExceptionDetailInFaults = " false "   />
           < serviceCredentials >
             < serviceCertificate findValue = " WCFServerCert "  storeLocation = " LocalMachine "
              storeName = " My "  x509FindType = " FindBySubjectName "   />
             < userNameAuthentication userNamePasswordValidationMode = " Custom "
              customUserNamePasswordValidatorType = " WcfServiceLib.CustomUserPassword,WcfServiceLib "   />
             < clientCertificate >
               < authentication certificateValidationMode = " None " />
             </ clientCertificate >
           </ serviceCredentials >
         </ behavior >
       </ serviceBehaviors >
     </ behaviors >
   </ system.serviceModel >

 

 

 

 

客户端调用服务时，提示：

传出消息标识检查失败。所预期的远程终结点的 DNS 标识为“192.168.6.118”，但是远程终结点提供的 DNS 请求为“WCFServerCert”。如果此远程终结点合法，您可以通过在创建通道代理时明确地将 DNS 标识“WCFServerCert”指定为 EndpointAddress 的“标识”属性来解决此问题。 

客户端代码

     < system.serviceModel >
         < bindings >
             < wsHttpBinding >
                 < binding name = " WSHttpBinding_IServices "  closeTimeout = " 00:01:00 "
                    openTimeout = " 00:01:00 "  receiveTimeout = " 00:10:00 "  sendTimeout = " 00:01:00 "
                    bypassProxyOnLocal = " false "  transactionFlow = " false "  hostNameComparisonMode = " StrongWildcard "
                    maxBufferPoolSize = " 524288 "  maxReceivedMessageSize = " 65536 "
                    messageEncoding = " Text "  textEncoding = " utf-8 "  useDefaultWebProxy = " true "
                    allowCookies = " false " >
                     < readerQuotas maxDepth = " 32 "  maxStringContentLength = " 8192 "  maxArrayLength = " 16384 "
                        maxBytesPerRead = " 4096 "  maxNameTableCharCount = " 16384 "   />
                     < reliableSession ordered = " true "  inactivityTimeout = " 00:10:00 "
                        enabled = " false "   />
                     < security mode = " Message " >
                         < transport clientCredentialType = " Windows "  proxyCredentialType = " None "
                            realm = ""   />
                         < message clientCredentialType = " UserName "  negotiateServiceCredential = " true "
                            algorithmSuite = " Default "  establishSecurityContext = " true "   />
                     </ security >
                 </ binding >
             </ wsHttpBinding >
         </ bindings >
         < client >
             < endpoint address = " http://alex/DotNet/OK/Test/WcfLibTest/WcfServiceApp/Services.svc "
                binding = " wsHttpBinding "  bindingConfiguration = " WSHttpBinding_IServices "
                contract = " Services.IServices "  name = " WSHttpBinding_IServices " >
                 < identity >
                     < dns value = " 192.168.6.118 "   />
                 </ identity >
             </ endpoint >
         </ client >
     </ system.serviceModel >

 

 

 

---

 

如果把“服务端”的

<identity>

            <dns value="192.168.6.118" />

</identity> 

去掉，就正确了，但总感觉这不是正解，有没有其它的解决办法？

 

 

 

转载于:https://www.cnblogs.com/webhuahua/archive/2010/09/02/1816173.html