◆ ValidateCreateContext() [1/2]

void System.Net.Security.NegotiateStream.ValidateCreateContext	(	string	package,
		bool	isServer,
		NetworkCredential	credential,
		string	servicePrincipalName,
		ChannelBinding	channelBinding,
		ProtectionLevel	protectionLevel,
		TokenImpersonationLevel	impersonationLevel )

inlineprivate

Definition at line 699 of file NegotiateStream.cs.

    {
        if (!_canRetryAuthentication)
        {
            ThrowIfExceptional();
        }
        if (_context != null && _context.IsValidContext)
        {
            throw new InvalidOperationException(System.SR.net_auth_reauth);
        }
        if (credential == null)
        {
            throw new ArgumentNullException("credential");
        }
        if (servicePrincipalName == null)
        {
            throw new ArgumentNullException("servicePrincipalName");
        }
        NegotiateStreamPal.ValidateImpersonationLevel(impersonationLevel);
        if (_context != null && IsServer != isServer)
        {
            throw new InvalidOperationException(System.SR.net_auth_client_server);
        }
        _exception = null;
        _remoteOk = false;
        _framer = new StreamFramer();
        _framer.WriteHeader.MessageId = 22;
        _expectedProtectionLevel = protectionLevel;
        _expectedImpersonationLevel = (isServer ? impersonationLevel : TokenImpersonationLevel.None);
        _writeSequenceNumber = 0u;
        _readSequenceNumber = 0u;
        ContextFlagsPal contextFlagsPal = ContextFlagsPal.Connection;
        if (protectionLevel == ProtectionLevel.None && !isServer)
        {
            package = "NTLM";
        }
        else
        {
            switch (protectionLevel)
            {
            case ProtectionLevel.EncryptAndSign:
                contextFlagsPal |= ContextFlagsPal.Confidentiality;
                break;
            case ProtectionLevel.Sign:
                contextFlagsPal |= ContextFlagsPal.ReplayDetect | ContextFlagsPal.SequenceDetect | ContextFlagsPal.AcceptStream;
                break;
            }
        }
        if (isServer)
        {
            if (_extendedProtectionPolicy.PolicyEnforcement == PolicyEnforcement.WhenSupported)
            {
                contextFlagsPal |= ContextFlagsPal.AllowMissingBindings;
            }
            if (_extendedProtectionPolicy.PolicyEnforcement != 0 && _extendedProtectionPolicy.ProtectionScenario == ProtectionScenario.TrustedProxy)
            {
                contextFlagsPal |= ContextFlagsPal.ProxyBindings;
            }
        }
        else
        {
            if (protectionLevel != 0)
            {
                contextFlagsPal |= ContextFlagsPal.MutualAuth;
            }
            if (impersonationLevel == TokenImpersonationLevel.Identification)
            {
                contextFlagsPal |= ContextFlagsPal.AcceptIntegrity;
            }
            if (impersonationLevel == TokenImpersonationLevel.Delegation)
            {
                contextFlagsPal |= ContextFlagsPal.Delegate;
            }
        }
        _canRetryAuthentication = false;
        try
        {
            _context = new NTAuthentication(isServer, package, credential, servicePrincipalName, contextFlagsPal, channelBinding);
        }
        catch (Win32Exception innerException)
        {
            throw new AuthenticationException(System.SR.net_auth_SSPI, innerException);
        }
    }