We have a wcf service that will connect with a console app client but will not allow an IIS hosted website to connect to the service. If you have experience with WCF services and connecting using net.tcp from a web application, contact me so we can get you to work on solving this bug and working on other tasks...
2013-03-08 22:48:57,210  ERROR ServiceLogging - Error calling connect on DMSServiceAgent:
Message:The server did not provide a meaningful reply; this might be caused by a contract mismatch, a premature session shutdown or an internal server error.
Server stack trace:
at System.ServiceModel.Channels.ServiceChannel.Call(String action, Boolean oneway, ProxyOperationRuntime operation, Object ins, Object outs, TimeSpan timeout)
at System.ServiceModel.Channels.ServiceChannelProxy.InvokeService(IMethodCallMessage methodCall, ProxyOperationRuntime operation)
at System.ServiceModel.Channels.ServiceChannelProxy.Invoke(IMessage message)
Exception rethrown at :
at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage reqMsg, IMessage retMsg)
at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData& msgData, Int32 type)
at JukeWeb.DN.Services.WCF.DMS.IDMSService.Connect(String username, String password, String parms)
at JukeWeb.DN.Web.MVC3.Code.Infrastructure.DMSServiceAgent.Connect(String parms)
1.) There is one domain with two servers involved: PROD (DC) and PROD-VMIIS (IIS)
2.) Domain is juke.corp.com
3.) The WCF is hosted in window services running as local system on the SVRPROD
4.) IIS is client connecting to the WCF and its hosted on PROD-VMIIS - the app pool for this site is running as appoolidentity
5.) Both configurations have the same setting for binding and identity which is windows and using the spn idendity - "HOST/domain.com:8005"
WHAT WE DISCOVERED:
> Using visual studio development environment, we can connect to the service and call connect successfully - no errors. The development machine is also on the same domain so I am not sure what is different about the local IIS server and the live IIS server. But on the live IIS server the connect method generates the above error.
> Kerberos user "krbtgt" was disabled. I enabled it but it does make me wonder is kerberos is generating the ticket properly since it seems that kerberos has be disabled. And if it was disabled, the development test would also fail right?
> The local IIS configuration is set the NTLM - this I confirmed, so this means it is not using kerberos? The live server is using windows security and I am not sure if it is kerberos or NTLM.
Skills: mvc, test