ASP.net Ajax Enabled WCF Service - Security issue -
i've got problem ajax enabled wcf service.
the service configured follows:
<system.servicemodel> <bindings> <webhttpbinding> <binding name="securewebhttpbinding"> <security mode="transportcredentialonly"> <transport clientcredentialtype="ntlm"></transport> </security> </binding> </webhttpbinding> </bindings> <behaviors> <endpointbehaviors> <behavior name="shared.services.ajaxserviceaspnetajaxbehavior"> <enablewebscript/> </behavior> </endpointbehaviors> <servicebehaviors> <behavior name="shared.services.ajaxserviceservicebehaviour"> <servicedebug includeexceptiondetailinfaults="true"/> </behavior> </servicebehaviors> </behaviors> <servicehostingenvironment aspnetcompatibilityenabled="true"/> <services> <service name="shared.services.ajaxservice" behaviorconfiguration="shared.services.ajaxserviceservicebehaviour"> <endpoint address="" behaviorconfiguration="shared.services.ajaxserviceaspnetajaxbehavior" bindingconfiguration="securewebhttpbinding" binding="webhttpbinding" contract="shared.services.ajaxservice"> </endpoint> </service> </services> </system.servicemodel>
the security problem occurs when application deployed on production environment (iis 7).
when request url ajax service "servicename.svc/js" windows credential prompt appears. though when request "servicename.svc" service description page displayed properly. iis recognized .../js sub directory doesn't physically exists , due doesn't know security setting should applied? enabled authentication types directory , service in iis administration page. plus enabled anonymous access location via web.config. whole application intranet app , protected windows authentication btw.
thanks in advance
Comments
Post a Comment