1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
|
//----------------------------------------------------------------------------
// Copyright (c) Microsoft Corporation. All rights reserved.
//-----------------------------------------------------------------------------
namespace System.ServiceModel.Security
{
using System;
using System.Net;
using System.Security.Principal;
using System.ServiceModel;
public sealed class WindowsClientCredential
{
internal const TokenImpersonationLevel DefaultImpersonationLevel = TokenImpersonationLevel.Identification;
TokenImpersonationLevel allowedImpersonationLevel = DefaultImpersonationLevel;
NetworkCredential windowsCredentials;
bool allowNtlm = SspiSecurityTokenProvider.DefaultAllowNtlm;
bool isReadOnly;
internal WindowsClientCredential()
{
}
internal WindowsClientCredential(WindowsClientCredential other)
{
if (other.windowsCredentials != null)
this.windowsCredentials = SecurityUtils.GetNetworkCredentialsCopy(other.windowsCredentials);
this.allowedImpersonationLevel = other.allowedImpersonationLevel;
this.allowNtlm = other.allowNtlm;
this.isReadOnly = other.isReadOnly;
}
public TokenImpersonationLevel AllowedImpersonationLevel
{
get
{
return this.allowedImpersonationLevel;
}
set
{
ThrowIfImmutable();
if (((value == TokenImpersonationLevel.None) || (value == TokenImpersonationLevel.Anonymous)) && System.ServiceModel.Channels.UnsafeNativeMethods.IsTailoredApplication.Value)
{
throw DiagnosticUtility.ExceptionUtility.ThrowHelperError(new ArgumentException(SR.GetString(SR.UnsupportedTokenImpersonationLevel, "AllowedImpersonationLevel", value.ToString())));
}
this.allowedImpersonationLevel = value;
}
}
public NetworkCredential ClientCredential
{
get
{
if (this.windowsCredentials == null)
this.windowsCredentials = new NetworkCredential();
return this.windowsCredentials;
}
set
{
ThrowIfImmutable();
this.windowsCredentials = value;
}
}
[ObsoleteAttribute("This property is deprecated and is maintained for backward compatibility only. The local machine policy will be used to determine if NTLM should be used.")]
public bool AllowNtlm
{
get
{
return this.allowNtlm;
}
set
{
ThrowIfImmutable();
this.allowNtlm = value;
}
}
internal void MakeReadOnly()
{
this.isReadOnly = true;
}
void ThrowIfImmutable()
{
if (this.isReadOnly)
{
throw DiagnosticUtility.ExceptionUtility.ThrowHelperError(new InvalidOperationException(SR.GetString(SR.ObjectIsReadOnly)));
}
}
}
}
|
