EndpointIdentity.CreateSpnIdentity(String) 方法

定义

使用指定名称创建服务器主体名称 (SPN) 标识。

public:
 static System::ServiceModel::EndpointIdentity ^ CreateSpnIdentity(System::String ^ spnName);
public static System.ServiceModel.EndpointIdentity CreateSpnIdentity (string spnName);
static member CreateSpnIdentity : string -> System.ServiceModel.EndpointIdentity
Public Shared Function CreateSpnIdentity (spnName As String) As EndpointIdentity

参数

spnName
String

SPN 标识的名称。

返回

EndpointIdentity

一个与特定的 EndpointIdentity 关联的 SPN spnName

例外

spnNamenull

示例

下面的代码演示如何调用此方法。

// Create the service host.
ServiceHost myServiceHost = new ServiceHost(typeof(Calculator));

// Create the binding.
WSHttpBinding binding = new WSHttpBinding();
binding.Security.Mode = SecurityMode.Message;
binding.Security.Message.ClientCredentialType =
     MessageCredentialType.Windows;

// Disable credential negotiation and establishment of the
// security context.
binding.Security.Message.NegotiateServiceCredential = false;
binding.Security.Message.EstablishSecurityContext = false;

// Create a URI for the endpoint address.
Uri httpUri = new Uri("http://localhost/Calculator");

// Create the EndpointAddress with the SPN for the Identity.
EndpointAddress ea = new EndpointAddress(httpUri,
    EndpointIdentity.CreateSpnIdentity("service_spn_name"));

// Get the contract from the ICalculator interface (not shown here).
// See the sample applications for an example of the ICalculator.
ContractDescription contract = ContractDescription.GetContract(
    typeof(ICalculator));

// Create a new ServiceEndpoint.
ServiceEndpoint se = new ServiceEndpoint(contract, binding, ea);

// Add the service endpoint to the service.
myServiceHost.Description.Endpoints.Add(se);

// Open the service.
myServiceHost.Open();
Console.WriteLine("Listening...");
Console.ReadLine();

// Close the service.
myServiceHost.Close();

注解

使用此标识连接到终结点的安全 WCF 客户端在对终结点执行 SSPI 身份验证时使用 SPN。

此静态方法通过调用其构造函数 SpnEndpointIdentity,并使用 SpnEndpointIdentity 作为输入参数创建 spnName 的实例。

如果使用空字符串指定 spnName,则一旦可能,身份验证将从 Kerberos 回退到 NTLM。 如果 AllowNtlmfalse,则身份验证失败。

适用于