异常 = HTTP 请求未经授权，客户端身份验证方案'Anonymous'

Question

请参阅下面的应用：

public Form1()
        {
            try
            {
                InitializeComponent();
                ServiceReference1.Service1Client s1 = new ServiceReference1.Service1Client();
                s1.ClientCredentials.UserName.UserName = "testuser";
                s1.ClientCredentials.UserName.Password = "testpass";
                string str = s1.GetData(1);
            }
            catch (System.ServiceModel.Security.MessageSecurityException e)
            {
                //Handle an authentication failure
                using (System.IO.StreamWriter file =
                   new System.IO.StreamWriter(@"C:LogFilelog.txt"))
                {
                    file.WriteLine("User Authentication Failed");
                }
            }
        }

和下面的app.config：

<system.serviceModel>
        <bindings>
            <wsHttpBinding>
                <binding name="WSHttpBinding_IService1">
                    <security mode="TransportWithMessageCredential">
                        <message clientCredentialType="UserName" />
                    </security>
                </binding>
            </wsHttpBinding>
        </bindings>
        <client>
            <endpoint address="https://hq-wk-is/WCFSSL/Service1.svc" binding="wsHttpBinding"
                bindingConfiguration="WSHttpBinding_IService1" contract="ServiceReference1.IService1"
                name="WSHttpBinding_IService1" />
        </client>
    </system.serviceModel>

这是服务的web.config：

 <system.serviceModel>
    <services>
      <service name="WcfService1.Service1">
        <endpoint contract="WcfService1.IService1" binding="wsHttpBinding" bindingConfiguration="wsHttpBindingConfiguration"/>
      </service>
    </services>
    <behaviors>
      <serviceBehaviors>      
        <!--added-->
        <behavior>
          <serviceMetadata httpGetEnabled="true" httpsGetEnabled="true"/>
          <serviceDebug includeExceptionDetailInFaults="false"/>
          <serviceCredentials>
            <userNameAuthentication  userNamePasswordValidationMode="Custom" customUserNamePasswordValidatorType="WcfService1.CustomUserNameValidator, WcfService1" />
          </serviceCredentials>
        </behavior>
        <!--<behavior>
          <serviceMetadata httpGetEnabled="true" httpsGetEnabled="true"/>
          <serviceDebug includeExceptionDetailInFaults="false"/>
        </behavior>-->
      </serviceBehaviors>
    </behaviors>
    <protocolMapping>
        <add binding="basicHttpsBinding" scheme="https" />
    </protocolMapping>
    <!--added-->
    <bindings>
      <wsHttpBinding>
        <binding name="wsHttpBindingConfiguration" >
          <security mode="TransportWithMessageCredential" >
            <message clientCredentialType="UserName" />
          </security>
        </binding>
      </wsHttpBinding>
    </bindings>
    <serviceHostingEnvironment aspNetCompatibilityEnabled="true" multipleSiteBindingsEnabled="true" />
  </system.serviceModel>

和CustomValidator：

namespace WcfService1
{
    public class CustomUserNameValidator : UserNamePasswordValidator
    {
        public override void Validate(string userName, string password)
        {
            using (System.IO.StreamWriter file =
            new System.IO.StreamWriter(@"C:loglog.txt"))
            {
                file.WriteLine("Hola");
            }

            if (null == userName || null == password)
            {
                throw new ArgumentNullException();
            }
            if (!(userName == "testuser" && password == "testpass"))
            {
                // This throws an informative fault to the client.
                throw new FaultException("Unknown Username or Incorrect Password");
                // When you do not want to throw an infomative fault to the client,
                // throw the following exception.
                // throw new SecurityTokenException("Unknown Username or Incorrect Password");
            }
        }
    }
}

我仅在IIS中启用了此Web应用程序的基本身份验证。

我遇到的错误是： The HTTP request is unauthorized with client authentication scheme 'Anonymous'. The authentication header received from the server was 'Basic realm="MyPC"'

有什么问题？为什么要匿名发送凭证？我相信在这种情况下，应在肥皂标头中通过凭证。

Answer 1

我遵循以下步骤：

1）转到Web应用程序的身份验证设置2）右键单击匿名身份验证，然后选择编辑3）更改指定用户的密码

密码最近发生了变化。我认为更改应用程序池上的密码会对其进行整理。但是，您也必须在这里做。

这是我使用的网页：http：//windows.vexedlogic.com/2013/08/03/401-2---unauthorized-invalid-authentication-headers-headers-when-when-phen-when-using-susis-usis-usis-usis-ranymon-sonymon--authentication/