HTTP 请求未经客户端身份验证方案“匿名”授权；动态资产净值

Question

我有一个关于 .net core 应用程序 (3.1) 尝试从 Dynamics Nav Server 使用 WS (SOAP) 的问题。 （内部部署）。 当我处于调试模式时，一切正常，但是当我将应用程序部署到本地 IIS 服务器时，我不断收到 “HTTP 请求未经客户端身份验证方案‘匿名’的授权。从服务器收到的身份验证标头是‘oRswGaADCgEAoxIEEAEA=,Negotiate’。”

客户端初始化

private async Task<TXSiteUser_PortClient> GetInstanceAsync()
{
            EndpointAddress endpointAddress = new EndpointAddress(serviceUrl);
            BasicHttpBinding basicHttpBinding = new BasicHttpBinding()
            {
                MaxReceivedMessageSize = int.MaxValue,
                MaxBufferSize = int.MaxValue,
                OpenTimeout = TimeSpan.MaxValue,
                CloseTimeout = TimeSpan.MaxValue,
                ReceiveTimeout = TimeSpan.MaxValue,
                SendTimeout = TimeSpan.MaxValue
            };

            return await Task.Run(() => new TXSiteUser_PortClient(basicHttpBinding, endpointAddress));
        }

调用 WS 的示例

var client = await GetInstanceAsync();

var user = await client.ReadAsync(new Read { Id = id });

await client.CloseAsync();

return user.TXSiteUser;

Dynamics 服务器的凭据类型为“Windows”。 下面是 web.config

<configuration>
  <location path="." inheritInChildApplications="false">
    <system.webServer>
      <handlers>
        <add name="aspNetCore" path="*" verb="*" modules="AspNetCoreModuleV2" resourceType="Unspecified" />
      </handlers>
      <aspNetCore processPath=".\ArtoilPortal.exe" stdoutLogEnabled="false" stdoutLogFile=".\logs\stdout" hostingModel="inprocess" />
    </system.webServer>
  </location>
</configuration>

奇怪的是，当我处于调试模式并从 Swagger 测试端点时，一切正常。另外，每次我尝试使用邮递员时，无论身份验证类型如何（基本、NTML），我都会收到 401。 我也尝试过

basicHttpBinding.Security.Mode = BasicHttpSecurityMode.Transport;
basicHttpBinding.Security.Transport.ClientCredentialType = HttpClientCredentialType.Windows;
var username = _appSettings.NAVCredentials.UserName;
var password = _appSettings.NAVCredentials.Password;

像这样添加和扩展 PortClient 方法，

        public TXSiteUser_PortClient(System.ServiceModel.Channels.Binding binding, System.ServiceModel.EndpointAddress remoteAddress, string userName, string password) : 
                base(binding, remoteAddress)
        {

            this.ChannelFactory.Credentials.UserName.UserName = userName;
            this.ChannelFactory.Credentials.UserName.Password = password;
            ConfigureEndpoint(this.Endpoint, this.ClientCredentials);
        }

但没有成功

Answer 1

设法解决了错误。
首先，通过使用“TransportCredentialOnly”而不是“Transport”修复了客户端初始化代码。

 basicHttpBinding.Security.Mode = BasicHttpSecurityMode.TransportCredentialOnly;

当 Dynamics NAV 服务器上没有为 SOAP 服务配置 SSL 时，将使用 TransportCredentialOnly 模式。

对我有用的“PortClient”方法的版本如下所示：

public TXSiteUser_PortClient(System.ServiceModel.Channels.Binding binding, System.ServiceModel.EndpointAddress remoteAddress, string userName, string password) : 
            base(binding, remoteAddress)
    {
        this.ClientCredentials.Windows.ClientCredential.UserName = userName;
        this.ClientCredentials.Windows.ClientCredential.Password = password;
        this.ClientCredentials.Windows.ClientCredential.Domain = "";
        ConfigureEndpoint(this.Endpoint, this.ClientCredentials);
    }

在原来的帖子中，我正在设置

 this.ChannelFactory.Credentials.UserName.UserName = userName;

它应该在的位置

 this.ClientCredentials.Windows.ClientCredential.UserName = userName;

希望这会在某个时候对某人有所帮助