While troubleshooting another SharePoint WSS issue (related to DCOM permissions) I had to test calling the List Service against an Instance of SharePoint that was running over SSL.  I was using WCF as the client and the biggest pain was the configuration (which is usually the case with WCF).  Based on several other posts, here is what I tried.

1. Added Service Reference which generated configuration info for the service

2. Changed the config and set the security model to “Transport” and clientCredentialType to “Ntlm”.  “Transport” is required when calling over SSL.

    <system.serviceModel>
        <bindings>
            <basicHttpBinding>
                <binding name="ListsSoap" closeTimeout="00:01:00" openTimeout="00:01:00"
                    receiveTimeout="00:10:00" sendTimeout="00:01:00" allowCookies="false"
                    bypassProxyOnLocal="false" hostNameComparisonMode="StrongWildcard"
                    maxBufferSize="65536" maxBufferPoolSize="524288" maxReceivedMessageSize="65536"
                    messageEncoding="Text" textEncoding="utf-8" transferMode="Buffered"
                    useDefaultWebProxy="true">
                    <readerQuotas maxDepth="32" maxStringContentLength="8192" maxArrayLength="16384"
                        maxBytesPerRead="4096" maxNameTableCharCount="16384" />
                    <security mode="Transport">
                      <transport clientCredentialType="Ntlm"/>
                    </security>
                </binding>

            </basicHttpBinding>
        </bindings>
        <client>
            <endpoint address="https://someserver/somesite/_vti_bin/lists.asmx"
                binding="basicHttpBinding" bindingConfiguration="ListsSoap"
                contract="SharePointServices.ListsSoap" name="ListsSoap" />
        </client>
    </system.serviceModel>

3. In code, the only trick I had to use was to AllowNtlm by setting the property on the ClientCredential object.


            using (var client = new SharePointServices.ListsSoapClient())
            {
                try
                {
                    client.ClientCredentials.Windows.ClientCredential 

                 = new NetworkCredential("username", "password", "domain");
                    client.ClientCredentials.Windows.AllowNtlm = true;
                    var lists = client.GetListCollection();
                    var listsXElement = XElement.Parse(lists.OuterXml);
                    Console.WriteLine(listsXElement);
                }
                catch (Exception ex)
                {
                    client.Abort();
                    Console.WriteLine(ex.ToString());
                }
            }