SecurityBindingElement.CreateKerberosOverTransportBindingElement Method

Definition

Namespace:

System.ServiceModel.Channels

Assembly:

System.ServiceModel.dll

Creates a security binding element that is configured to require SOAP-security based client authentication using the client's Kerberos token. This binding element requires the transport to provide server authentication and message protection (for example, HTTPS).

public:
 static System::ServiceModel::Channels::TransportSecurityBindingElement ^ CreateKerberosOverTransportBindingElement();

public static System.ServiceModel.Channels.TransportSecurityBindingElement CreateKerberosOverTransportBindingElement ();

static member CreateKerberosOverTransportBindingElement : unit -> System.ServiceModel.Channels.TransportSecurityBindingElement

Public Shared Function CreateKerberosOverTransportBindingElement () As TransportSecurityBindingElement

Returns

TransportSecurityBindingElement

A TransportSecurityBindingElement object.

Remarks

To do Kerberos authentication, the server must run in an account that has a service principal name registered with Active Directory. NetworkService is such an account.

The created binding has IncludeTimestamp set to true. The LocalClientSecuritySettings object returned from LocalClientSettings has its DetectReplays property set to false.

The LocalServiceSecuritySettings object returned from LocalServiceSettings has its DetectReplays property set to false.