● ● ● ● ● ● ● ● ● ● ● How to access your CD files The print edition of this book includes a CD. To access the CD files, go to http://aka.ms/625655/files, and look for the Downloads tab. Note: Use a desktop web browser, as files may not be accessible from all ereader devices. Questions? Please contact: [email protected] Microsoft Press PUBLISHED BY Microsoft Press A Division of Microsoft Corporation One Microsoft Way Redmond, Washington 98052-6399 Copyright © 2009 by GrandMasters and Microsoft Corporation All rights reserved. No part of the contents of this book may be reproduced or transmitted in any form or by any means without the written permission of the publisher. Library of Congress Control Number: 2008929790 Printed and bound in the United States of America. 1 2 3 4 5 6 7 8 9 QWT 3 2 1 0 9 8 Distributed in Canada by H.B. Fenn and Company Ltd. A CIP catalogue record for this book is available from the British Library. Microsoft Press books are available through booksellers and distributors worldwide. For further information about international editions, contact your local Microsoft Corporation office or contact Microsoft Press International directly at fax (425) 936-7329. Visit our Web site at www.microsoft.com/mspress. Send comments to [email protected]. Microsoft, Microsoft Press, Active Directory, ActiveX, BizTalk, Excel, Internet Explorer, MapPoint, MSDN, SharePoint, SQL Server, Virtual Earth, Visio, Visual Basic, Visual Studio, Windows, Windows Live, Windows NT, Windows Server, and Windows Vista are either registered trademarks or trademarks of the Microsoft group of companies. Other product and company names mentioned herein may be the trademarks of their respective owners. The example companies, organizations, products, domain names, e-mail addresses, logos, people, places, and events depicted herein are fictitious. No association with any real company, organization, product, domain name, e-mail address, logo, person, place, or event is intended or should be inferred. This book expresses the author’s views and opinions. The information contained in this book is provided without any express, statutory, or implied warranties. Neither the authors, Microsoft Corporation, nor its resellers, or distributors will be held liable for any damages caused or alleged to be caused either directly or indirectly by this book. Acquisitions Editor: Ken Jones Developmental Editor: Laura Sackerman Project Editor: Valerie Woolley Editorial Production: nSight, Inc. Technical Reviewer: Kurt Meyer; Technical Review services provided by Content Master, a member of CM Group, Ltd. Cover: Tom Draper Design Body Part No. X14-15149 Microsoft Press CONFIDENTIAL 11/28/2007 1:16:00 PM Page 1 of 30 About the Authors Bruce Johnson Bruce Johnson is a partner at ObjectSharp Consulting in Toronto, Canada. For over 25 years, he has been involved in various parts of the computer industry, starting with UNIX and PL/1, through C++ and Microsoft Visual Basic (pre .NET), and, finally, all manner of Microsoft Windows applications and .NET technologies. His posi- tion as a consultant has allowed him to implement consumer-facing Web applications, Windows applications, and the whole gamut of service-based applications (Web Services, .NET remoting, and Win- dows Communication Foundation [WCF]). As well as having fun working just behind the bleeding edge of technology (you know, the place where stuff actually has to be delivered), he has given more than 200 presentations at conferences and user groups across North America. His writings include magazine columns and articles, a blog (found at http:// www.objectsharp.com/blogs/bruce), and a number of Microsoft Press training kit books. Peter Madziak Peter Madziak is a senior consultant and instructor with Object- Sharp Consulting—a Microsoft Gold Partner based in Toronto, Can- ada. He is a technical leader with more than 10 years' experience helping development teams plan, design, and develop large software projects. Peter's primary focus over the past few years has been on helping customers understand service-oriented architecture (SOA), Workflow and Business Process Management (BPM), Web Services (both RESTful and WS-*), event-driven architecture (EDA), and, more important, how all these technologies and architectural styles can be reconciled into an architecture that aligns well with business needs. As an SOA and BPM expert, Peter helps customers implement solutions, using technologies such as WCF, Windows Workflow, Microsoft BizTalk Server 2006, SQL Service Broker, and ASP.NET Web applications. You can visit his blog at http://www.objectsharp.com/cs/blogs /pmadziak/default.aspx. iii iv About the Authors Sara Morgan Sara Morgan is a robotics software engineer with CoroWare, Inc., (http://www.coroware.com) and author of the newly released Pro- gramming Microsoft Robotics Studio (Microsoft Press, 2008). In addition to robotics, she has extensive experience with Microsoft SQL Server and Microsoft Visual Studio .NET and has been develop- ing database-driven Web applications since the earliest days of Inter- net development. Prior to joining CoroWare, she was an independent author and developer, and her main client was Microsoft. During that time, she co-wrote four training kits for Microsoft Press. Developers use these training kits to study for certification exam; the kits cover topics such as distributed develop- ment, Web application development, SQL Server query optimization, and SQL Server busi- ness intelligence. Sara has also written several articles for the online development journal, DevX.com, concerning Speech Server and the newly released Microsoft Robotics Studio. In early 2007, she was named a Microsoft Most Valuable Professional (MVP) for the Office Com- munications Server (OCS) group. Contents at a Glance 1 Contracts . 1 2 Exposing the Services . 77 3 Deploying Services . 103 4 Consuming Services. 129 5 Configuring WCF . 197 6 Instrumentation . 247 7 Infrastructure Security. 323 8 User-Level Security. 357 9 When Simple Isn’t Sufficient . 411 10 Sessions and Instancing . 441 11 Transactional Services . 483 12 Concurrency . 521 v Table of Contents Introduction Hardware Requirements . xix Software Requirements . xix Using the CD and DVD . xx How to Install the Practice Tests. xxi How to Use the Practice Tests . xxi How to Uninstall the Practice Tests . xxiii Microsoft Certified Professional Program . xxiii Technical Support. xxiii Evaluation Edition Software . xxiv 1 Contracts . 1 Before You Begin . .2 Lesson 1: Defining Behavioral Contracts . .4 Service Contracts and Service Types . .4 Message Exchange Patterns . .13 Duplex Channels and Client-Side Proxies. .17 Lab: Defining a Service . .18 Lesson Summary. .28 Lesson Review . .28 Lesson 2: Defining Structural Contracts. .31 Data Contracts . .31 Message Contracts . .40 Versioning of Data Contracts . .47 Controlling Serialization . .49 What do you think of this book? We want to hear from you! Microsoft is interested in hearing your feedback so we can continually improve our books and learning resources for you. To participate in a brief online survey, please visit: www.microsoft.com/learning/booksurvey/ vii viii Table of Contents Lab: Defining Data Contracts and Controlling Serialization. 54 Lesson Summary . 66 Lesson Review . 67 Chapter Review . 72 Chapter Summary. 72 Key Terms . 72 Case Scenarios. 73 Case Scenario 1: First Identifying a Service . 73 Case Scenario 2: Working with Legacy Systems . 73 Suggested Practices . 74 Build on an Existing Service . 74 Define a New Service Contract. 74 Take a Practice Test. 75 2 Exposing the Services. 77 Before You Begin . 77 Lesson 1: Service Endpoint Basics . 78 ABCs of Endpoints . 78 Creating an Endpoint by Using a Configuration File . 81 Creating an Endpoint by Using Code . 84 Publishing Metadata Through Endpoints . ..