Windows Server 2008中的冒充

我試圖模擬特定用戶在我們的服務器中執行一些sql操作。這不是一個ASP.Net應用程序。我之前使用了提供的代碼，它工作。但是，最近我們已經將我們的環境從Windows Server 2000升級到Windows Server 2008 R2。在升級之後，這段代碼不適合我。我需要一些幫助來理解這個問題並幫助解決它。任何和每一個幫助將不勝感激。謝謝。Windows Server 2008中的冒充

提供的代碼是一個僞代碼，試圖寫入文件並執行sql操作。

using System; 
using System.Collections; 
using System.ComponentModel; 
using System.Data; 
using System.Runtime.InteropServices; 
using System.Text; 
using System.IO; 
using System.Security.Principal; 
using System.Security.Permissions; 

[assembly: SecurityPermissionAttribute(SecurityAction.RequestMinimum, UnmanagedCode = true)] 
[assembly: PermissionSetAttribute(SecurityAction.RequestMinimum, Name = "FullTrust")] 
public class Test 
{ 
    const int LOGON32_LOGON_INTERACTIVE = 2; 
    const int LOGON32_LOGON_NETWORK = 3; 
    const int LOGON32_LOGON_BATCH = 4; 
    const int LOGON32_LOGON_SERVICE = 5; 
    const int LOGON32_LOGON_UNLOCK = 7; 
    const int LOGON32_LOGON_NETWORK_CLEARTEXT = 8; 
    const int LOGON32_LOGON_NEW_CREDENTIALS = 9; 
    const int LOGON32_PROVIDER_DEFAULT = 0; 
    const int SecurityImpersonation = 2; 

    [DllImport("advapi32.dll", SetLastError = true)] 
    public static extern int LogonUser(
     string lpszUsername, 
     string lpszDomain, 
     string lpszPassword, 
     int dwLogonType, 
     int dwLogonProvider, 
     out IntPtr phToken 
     ); 

    [DllImport("advapi32.dll", SetLastError = true)] 
    public static extern int ImpersonateLoggedOnUser(
     IntPtr hToken 
    ); 

    [DllImport("advapi32.dll", CharSet = CharSet.Auto, SetLastError = true)] 
    public extern static bool DuplicateToken(IntPtr ExistingTokenHandle, 
     int SECURITY_IMPERSONATION_LEVEL, ref IntPtr DuplicateTokenHandle); 

    [DllImport("advapi32.dll", SetLastError = true)] 
    static extern int RevertToSelf(); 

    [DllImport("kernel32.dll", SetLastError = true)] 
    static extern int CloseHandle(IntPtr hObject); 

    public void TestImpersonation() 
    {    
     IntPtr lnToken = new IntPtr(0); 
     IntPtr dupeTokenHandle = new IntPtr(0); 
     StringBuilder sb = new StringBuilder(); 

     int TResult = LogonUser("itservices", "DFC", "St4hls345t", LOGON32_LOGON_NETWORK, 
       LOGON32_PROVIDER_DEFAULT, out lnToken); 
     if (TResult > 0) 
     { 
      bool retVal = DuplicateToken(lnToken, SecurityImpersonation, ref dupeTokenHandle); 
      if (false == retVal) 
      { 
       CloseHandle(lnToken); 
       Console.WriteLine("Exception thrown in trying to duplicate token."); 
       return; 
      } 

      WindowsIdentity newId = new WindowsIdentity(dupeTokenHandle); 
      WindowsImpersonationContext impersonatedUser = newId.Impersonate(); 

      writeLog(DateTime.Now.ToString(@"MM-dd-yyyy HH:mm:ss") + " - Impersonation Applied" + Environment.NewLine); 
      runQuery(); 
      impersonatedUser.Undo(); 
      writeLog(DateTime.Now.ToString(@"MM-dd-yyyy HH:mm:ss") + " - Impersonation Reverted" + Environment.NewLine); 
      runQuery(); 
      CloseHandle(lnToken); 
     } 
     else 
     { 
      writeLog(DateTime.Now.ToString(@"MM-dd-yyyy HH:mm:ss") + " - Impersonation not Applied" + Environment.NewLine); 
     } 

     return; 
    } 

    void writeLog(string message) 
    { 
     try 
     { 
      string filePath = @"E:\Impersonate\Testlog.txt"; 
      File.AppendAllText(filePath, message); 
     } 
     catch 
     { 
      Console.WriteLine(); 
     } 
    } 

    void runQuery() 
    { 
     SQLOperations sqlUtill = new SQLOperations(); 
     string cmdTxt = "SELECT * FROM [tblChildOrder] where [StahlsWorkOrderID] = 'DREAMFUL0015799'"; 
     DataTable dt = sqlUtill.executeQuery(cmdTxt); 
     if (dt != null) 
     { 
      Console.WriteLine(); 
     } 
     else 
     { 
      Console.WriteLine(); 
     } 
    } 
}

來源

2012-11-29 Teja

有人有想法嗎？ – Teja

打破了我的代碼的大多數升級通常是由升級更改權限更改爲用戶造成的。仔細檢查用戶，他們的權限，你應該找到問題。

來源

2012-12-11 05:52:15 Rv3

Windows Server 2008中的冒充

回答

相關問題