PDC Bloggers Clemens Vasters

What isToken in WS Security World?

Clemens Vasters — Thu, 03 Apr 2008 16:25:14 GMT

Clemens Vasters writes "....Bottom line: For a client application, a token is a collection of opaque (and mysterious) security stuff. The token may contain an assertion (saying "yep, that's actually true") about a claim or a set of claims that I am making. I shouldn't have to care about the further details unless I'm writing a service and I'm interested in some deeper inspection of the claims that have been asserted. I will get to that..."

Bloggers : Clemens Vasters
TechEdBloggers.net : Editors Picks
TechEdBloggers.net : TechEd2007 : Tracks : Security
TechEdBloggers.net : TechEd2008 : Tracks : Identity and Access
TechEdBloggers.net : TechEd2008 : Tracks : Security

Claims used in WS Security Space

Clemens Vasters — Wed, 02 Apr 2008 22:05:52 GMT

Clemens Vasters writes "Providing control over what claims are being sent to a service (I'm lumping websites, SOAP, and REST services all in the same bucket here) is one of the key reasons why Windows CardSpace exists, by the way. The service asks for a set of claims, you get to see what is being asked for, and it's ultimately your personal, interactive decision to provide or refuse to provide that information. The only problem with relying on simple statements (claims) of that sort is that people lie. When you go"

BizTalk R11 CTP has a Surprise

Clemens Vasters — Mon, 31 Mar 2008 19:26:20 GMT

Clemens Vasters writes "...As a goodie, I put some code into the Java sample that might be useful even if you don't even care about our services. Since configuring the Java certificate stores for standalone applications can be really painful, I added some simple code that's using a week-old feature of the latest Metro 1.2 bits that allows configuring the Truststores/Keystores dynamically and pull the stores from the client's .jar at runtime. The code also has an authorization utility class..."

Bloggers : Clemens Vasters
TechEdBloggers.net : Editors Picks
TechEdBloggers.net : TechEd2007 : Tracks : Business Intelligence
TechEdBloggers.net : TechEd2008 : Tracks : Business Intelligence

ASP.NET Membership Authentication and Role Authorization with WCF

Clemens Vasters — Thu, 23 Aug 2007 01:09:30 GMT

Clemens Vasters writes "....So here's a behavior (some C# 3.0 syntax, but easy to fix) that you can add to channel factories (client) and service endpoints (server).... If you care about confidentiality of credentials on the wire don't use it. For this to work, you need to put the behavior on both ends. The behavior will do nothing (as intended) when the binding isn't the BasicHttpBinding with BasicHttpSecurityMode.None). The header will not show up in WSDL. On the client, you simply add"

XML-RPC with WCF

Clemens Vasters — Tue, 21 Aug 2007 17:30:43 GMT

Clemens Vasters writes "My XML-RPC implementation is a binding with a special encoder and a set of behaviors. The Service Model programming experience is completely "normal" with no special extension attributes. That means you can also expose the XML-RPC contracts as SOAP endpoints with all the advanced WCF bindings and features if you like...."

Bloggers : Clemens Vasters
TechEdBloggers.net : Editors Picks
TechEdBloggers.net : TechEd2007 : Tracks : Web Development and Infrastructure
TechEdBloggers.net : TechEd2008 : Tracks : Web and User Experience

Some fun with the BizTalk Services ISB

Clemens Vasters — Mon, 07 May 2007 22:57:11 GMT

Clemens Vasters writes "I wrote a slightly Twitter-inspired, fun app over the weekend that's using the BizTalk Services Connectivity service and relay. In the spirit of Software+Services I'm going to give you half of it ...The server app, which I'm keeping to myself for the next few days as part of the experiment, is an extension (add-in) to Windows Live Messenger"

Bloggers : Clemens Vasters
TechEdBloggers.net : TechEd2007 : Tracks : SOA and Web Services
TechEdBloggers.net : TechEd2008 : Tracks : SOA and Business Processes

Why Internet Service Bus is attractive

Clemens Vasters — Thu, 26 Apr 2007 14:36:20 GMT

Clemens Vasters writes "....Two aspects that make the idea of a "service bus" generally very attractive are that the service bus enables identity federation and connectivity federation....key to achieve the agility that SOA strategies commonly promise is the ability to do the "E to I" scale-up whenever you need it in order to enable broader communication."

Bloggers : Clemens Vasters
TechNetEventsBloggers.net : Topics : Architecture
TechEdBloggers.net : TechEd2007 : Tracks : SOA and Web Services
TechEdBloggers.net : TechEd2008 : Tracks : SOA and Business Processes

P2P Made Easy

Clemens Vasters — Mon, 02 Apr 2007 14:06:20 GMT

Clemens Vasters writes "One of the "niche" features in WCF that deserves a lot more attention than it is getting is our P2P support. The NetPeerTcpBinding looks, from the developer perspective, mostly like any other binding. The main difference between P2P applications and "normal" client/server apps is"

Bloggers : Clemens Vasters
TechEdBloggers.net : TechEd2007 : Tracks : Windows Server Infrastructure
TechEdBloggers.net : TechEd2008 : Tracks : Windows Server Infrastructure

Poison Control and WCF

Clemens Vasters — Fri, 30 Mar 2007 17:38:08 GMT

Clemens Vasters writes "....I’ve built a little program that illustrates an alternate handling strategy for poisonous messages that WCF throws into the poison queue on Vista and Longhorn Server....Here’s the code"

Bloggers : Clemens Vasters
TechEdBloggers.net : TechEd2007 : Tracks : Windows Server Infrastructure
TechEdBloggers.net : TechEd2008 : Tracks : Windows Server Infrastructure

Indigo is live

Clemens Vasters — Sun, 03 Sep 2006 04:17:33 GMT

Clemens Vasters writes "The Windows Communication Foundation's RC1 bits are now live. RC means "Release Candidate" and our team is really, really serious about this release being as close to what we intend to ship as we can ever get. Our database view with unresolved code-defects is essentially empty (there is a not more of a handful of small fixes for very esoteric scenarios that we're still doing for RTM). The time of breaking changes is absolutely and finally over for "WCF Version 1""

Bloggers : Clemens Vasters
TechNetEventsBloggers.net : Topics : Technologies

WCF Goes To Hollywood.

Clemens Vasters — Thu, 22 Jun 2006 03:04:39 GMT

Clemens Vasters writes "Our technical evangelist Craig McMurtry posted the "Digital Fortress" demo, which is an implementation of the computer systems that play major roles in Dan Brown's novel "Digital Fortress". There are several reasons why I find this demo interesting and pretty amusing..."

Bloggers : Clemens Vasters
TechEdBloggers.net : TechEd2006 : Topics : WinFX

MSDN TV: WCF Bindings.

Clemens Vasters — Mon, 19 Jun 2006 12:41:20 GMT

Clemens Vasters writes "MSDN TV has a new episode featuring yours truly speaking about WCF bindings..."

Bloggers : Clemens Vasters
TechEdBloggers.net : TechEd2006 : Topics : WinFX

Code-Name WinFX vs .NET Framework 3.0

Clemens Vasters — Mon, 19 Jun 2006 12:40:33 GMT

Clemens Vasters writes "However, when I learned about the WinFX name going away (several weeks before the public announcement) and the new "Vista Wave" technologies (WPF/WF/WCF/WCS) being rolled up under the .NET Framework brand, I was quite happy..."

Bloggers : Clemens Vasters
TechEdBloggers.net : TechEd2006 : Topics : WinFX

WCF RSS Toolkit released

Clemens Vasters — Tue, 13 Jun 2006 18:42:50 GMT

Clemens Vasters writes "We've just released the "Windows Communication Foundation RSS Toolkit" on our new community site. This toolkit, which comes with complete source code, illustrates how to expose ATOM and RSS feeds through WCF endpoints. I will discuss the toolkit in my session CON339, Room 107ABC, Friday 10:45am here at TechEd... "

Bloggers : Clemens Vasters
TechEdBloggers.net : TechEd2006 : Topics : WinFX
TechEdBloggers.net : Editors Picks

A New Home on the Web for the .NET Framework 3.0

Clemens Vasters — Tue, 13 Jun 2006 17:02:22 GMT

Clemens Vasters writes "Late last night, my colleague James Conard, who has worked and worked and worked tirelessly on this for the past few months and has shown great patience with a big group of people pulling into all sorts of directions as we got this together has flipped the switch to turn on the new .NET Framework 3.0 community portal family at netfx3.com..."

Bloggers : Clemens Vasters
TechEdBloggers.net : TechEd2006 : Topics : WinFX

Inheritance/Encapsulation Not Needed

Clemens Vasters — Thu, 08 Jul 2004 03:41:47 GMT

Clemens Vasters writes "Simple question: Please show me a case where inheritance and/or full data encapsulation makes sense for business/domain objects on the implementation level. "

Bloggers : Clemens Vasters
TechEdBloggers.net : TechEd2004 : Topics : Architecture

TechEd Amsterdam Goodness

Clemens Vasters — Mon, 28 Jun 2004 10:18:39 GMT

Photos by Clemens Vasters

FABRIQ at TechEd Europe

Clemens Vasters — Wed, 23 Jun 2004 04:18:20 GMT

Clemens Vasters writes "We have one regular session...Architecture Overview Session (ARC405) with Arvindra Sehmi and myself: Wed, Jun 30 12:00 - 13:15 Room: 9b...along with a Hands-On-Lab and a Chalk-Talk... "

Bloggers : Clemens Vasters
TechEdBloggers.net : TechEd2004 : Topics : Web Services
TechEdBloggers.net : TechEd2004 : Topics : Architecture

An Industrial-Strength, Robust, Service Oriented Example

Clemens Vasters — Fri, 11 Jun 2004 04:56:31 GMT

Clemens Vasters writes "One of the three realy cool talks I'll do at TechEd Europe is called "Building Proseware" and explains the the scenario, architecture, and core implementation techniques of Proseware, an industrial-strength, robust, service-oriented example application that newtelligence has designed and implemented for Microsoft over the past 2 months. "

Bloggers : Clemens Vasters
TechEdBloggers.net : TechEd2004 : Tracks : CTS : CTS308
TechEdBloggers.net : TechEd2004 : Topics : SOA

Secure Deployment is Just Too Hard

Clemens Vasters — Tue, 08 Jun 2004 02:44:48 GMT

Clemens Vasters writes "The amount of knowledge you need to have and the number APIs you need to use in order to lock down a Web service or Enterprise Services application programmatically at installation time in order to have it run under an isolated user account (with a choice of local or domain account) that has the precise rights to do what it needs to do (but nothing else) is absolutely insane. "

Bloggers : Clemens Vasters
TechEdBloggers.net : TechEd2004 : Topics : Security