How to turn off audit failure suppression

J.D. Meier, Jason Taylor, Prashant Bansode, Carlos Farre, Madhu Sundararajan, Steve Gregersen.

Set the suppressAuditFailure property to false to turn off audit failure suppression

By default, WCF will ignore the audit failures and allow the service to continue running by setting the SuppressAuditFailure property to true. You can set this property to false which will turn off audit failure suppression, thereby throwing an exception when there has been an auditing failure.
<configuration>
  <system.serviceModel>
    <behaviors>
      <behavior>
        <serviceSecurityAudit
                  auditLogLocation="Application"
*                  suppressAuditFailure="false"*
                  serviceAuthorizationAuditLevel="Failure"
                  messageAuthenticationAuditLevel="SuccessOrFailure" /> 
      </behavior>
    </behaviors>
  </system.serviceModel>
</configuration>

Last edited May 7, 2008 at 11:55 PM by prashantbansode, version 1

Comments

No comments yet.