Kuv colleague tau ua haujlwm rau ib qho web nyob hauv ib lub chaw kawm FBA. Cov yam, cov Web site qhov cia li nkaum kiag tej cov ntaub ntawv los ntawm cov neeg rau zaub mov SQL. Lub hom phiaj grand During dictates tias ib cov DBA configures ntawv theem ruaj ntseg hauv SQL (as opposed to embedding ib tug neeg ID rau ib SQL cov lus nug los yog ib txhia lwm mus kom ze).

Qhov teeb meem yog tias SQL neeg rau zaub mov tsis paub dab tsi txog peb lub chaw FBA ces nws yuav tsis ntseeg peb. Solved tej teeb meem no yog peb, for lack of muaj ib lo lus zoo, manually impersonating tus neeg siv AD uas peb muaj txuas rau SQL xws tias SQL cov theem tej hauj lwm ruaj ntseg.

Txawm tias FBA yog ib qho kev feature ASP.NET, peb teb chaws SharePoint neeg tau qhia ntau yam tshawb engines uas yog koj nyob nraum querying FBA, koj yuav tsum txhais hais tias koj xav paub yuav ua li cas rau configure FBA nyob SharePoint. Kuv ua tsis tau tejyam rau nrhiav tej ntaub ntawv thiaj li yuav pab tau ib FBA oriented ASP.NET daim ntawv thov mus sib tham nrog SQL nyob rau hauv txoj kev uas peb yuav tsum tau xyuas.

Nyuam qhuav pib researching no, peb rov nyeem no Tshooj: ASP.NET Impersonation

Tshawb fawb coj peb mus no codproject Tshooj: http://www.codeproject.com/KB/cs/cpimpersonation1.aspx

Uas pab peb sau ntawv peb kev cai, uas kuv twb muaj nyob hauv qab. Nws yuav tsis tau cov khoom feem ntau elegant, tab sis nws ua haujlwm. Kuv vam tias koj pom tias nws yuav pab tau.

Ntawm no yog cov chaws uas ua haujlwm rau peb:

kev tiv thaiv btnSearchCarrier_Click tsis muaj dabtsis(nruas sender, EventArgs e)
 {
 ua tiag
 {
 ImpersonateUser xyuas = tshiab ImpersonateUser();
 // TODO: Muab tau peev xwm iU.Impersonate("DomainName", "UserName", "Password");

//
 CHAWS
//

 iU.Undo();
 }
 ntes (Kos ex)
 {

 }
 }

// Siv Impersonation chav kawm ntawv raws li hais hauv qab no.

pej xeem hoob ImpersonateUser
 {
 [DllImport("advapi32.dll", SetLastError = tseeb)]
 pej xeem zoo li qub extern bool LogonUser(
 Txoj hlua lpszUsername,
 Txoj hlua lpszDomain,
 Txoj hlua lpszPassword,
 rau cov menyuam dwLogonType,
 rau cov menyuam dwLogonProvider,
 nyob IntPtr phToken);

 [DllImport("kernel32.dll", CharSet = CharSet.Auto)]
 lwm yam extern zoo li qub bool CloseHandle(IntPtr kov);

 lwm yam zoo li qub IntPtr tokenHandle = tshiab IntPtr(0);
 lwm yam zoo li qub WindowsImpersonationContext impersonatedUser;

 // Yog hais tias koj teeb cov code no rau ib DLL, Nco ntsoov demand ntawd nws
 // sau nrog FullTrust.
 [PermissionSetAttribute(SecurityAction.Demand, Lub npe = "FullTrust")]
 pej xeem Impersonate tsis muaj dabtsis(txoj hlua domainName, txoj hlua userName, txoj hlua password)
 {
 ua tiag
 {

 // Siv cov unmanaged LogonUser kev ua kom tau tus neeg siv token rau
 // tus neeg siv kev cai tswjhwm, sau, thiab lo lus zais.
 const rau cov menyuam LOGON32_PROVIDER_DEFAULT = 0;

 // Dua no parameter ua LogonUser los tsim tau ib cov thawj token.
 const rau cov menyuam LOGON32_LOGON_INTERACTIVE = 2;
 tokenHandle = IntPtr.Zero;

 // Kauj ruam -1 Hu rau LogonUser mus nrhiav ib tug kov rau qhov kev mus saib token.
 bool returnValue = LogonUser(
 userName,
 domainName,
 lo lus zais,
 LOGON32_LOGON_INTERACTIVE,
 LOGON32_PROVIDER_DEFAULT,
 nyob tokenHandle); // tokenHandle - ruaj ntseg token tshiab

 Yog hais tias (== returnValue tsis tseeb)
 {
 rau cov menyuam ret = Marshal.GetLastWin32Error();
 Console.WriteLine("LogonUser hu ua tsis tau tejyam uas yuam kev cai : " +
 ret);
 pov System.ComponentModel tshiab.Win32Exception(ret);
 }

 // Kauj ruam - 2
 WindowsIdentity newId = tshiab WindowsIdentity(tokenHandle);
 // Kauj ruam -3
 impersonatedUser = newId.Impersonate();

 }
 ntes (Kos ex)
 {
 Console.WriteLine("Kos tshwm sim. " + ex.Xov);
 }
 }


 /// <txoj kev>
 /// Nres impersonation
 /// </txoj kev>
 pej xeem Undo tsis muaj dabtsis()
 {
 impersonatedUser.Undo();
 // Dawb lub tokens.
 Yog hais tias (tokenHandle != IntPtr.Zero)
 CloseHandle(tokenHandle);
 }
 }

</kawg>

Subscribe rau kuv blog.

Ob peb lub lis piam rov qab, Kuv tau ua hauj lwm nrog kuv tsim tawm colleague rau ib qhov project uas muaj SQL neeg rau zaub mov uas qhia kev pab plug-in rau NTXHUAB. Nws tau tsim ib qho Web site uas muaj ib txoj kev zoo nkauj front-end qhia kom zoo (lub ntsiab feature yog ib lookup ntawm ib parameter nrog yaam tseem ceeb ntau nplooj koj nuav qab nws ntse).

Qhov no yog haujlwm great puag ncig txoj kev loj hlob tab sis nyob hauv cov neeg txaus sab kuaj (UAT) ib puag ncig, nws tsis ua hauj lwm. Firing li cov debugger, peb yuav pom kos lus zoo li no:

Tus permissions tso rau cov neeg siv 'UAT_domainmosssvc' yog tsis txaus rau ua qhov lag luam.(rsAccessDenied).

Yog koj ua ib tug tshawb nyob ntawm qhov yuam kev uas hais los saum toj, koj pom nws no heev. Hom scarily. Ua tus phem zoo heev vim nws muaj ntau hom neeg hauv paus thiab sawv daws tau tias kom hais haum "yim" txoj cai. Peb zaum sim lawv tag nrho.

Nyob rau hauv peb cov ntaub ntawv, qhov teeb meem yog tias peb yuav tsum ua ib thaub qab/restore cov DEV UAT. Qhov chaw ntawm cov ntaub ntawv, tej yam ntawd tseem referring rau "DEV_domain" (tsis txhob ua tus kho tshiab "UAT_Domain"). Peb tsim tau ib qhov chaw tshiab, ntxiv rau cov qhov web thiab uas solved peb cov teeb meem.

Hopefully no yuav cawm tus neeg teev los yog ob tug hauv txoj kab.

</kawg>

Subscribe rau kuv blog.