请注意以下文章：
特别是“模拟代码中的特定用户”位。
它利用advapi32.dll的LogonUserA()＆DuplicateToken()方法（Windows API？）。
如果我们在特定的aspx文件（函数）中使用此方法来模拟“ DOMAIN \ John Smith”以完成特定任务-我们可以肯定地说只有单个aspx请求可以模仿John，或者整个应用程序池都可以像John Smith一样运行直到在所述功能完成时调用undoImpersonation（）？
有问题的代码（以防上面的链接变暗）：
Dim LOGON32_LOGON_INTERACTIVE As Integer = 2
Dim LOGON32_PROVIDER_DEFAULT As Integer = 0
Dim impersonationContext As WindowsImpersonationContext
Declare Function LogonUserA Lib "advapi32.dll" (ByVal lpszUsername As String, _
ByVal lpszDomain As String, _
ByVal lpszPassword As String, _
ByVal dwLogonType As Integer, _
ByVal dwLogonProvider As Integer, _
ByRef phToken As IntPtr) As Integer
Declare Auto Function DuplicateToken Lib "advapi32.dll" ( _
ByVal ExistingTokenHandle As IntPtr, _
ByVal ImpersonationLevel As Integer, _
ByRef DuplicateTokenHandle As IntPtr) As Integer
Declare Auto Function RevertToSelf Lib "advapi32.dll" () As Long
Declare Auto Function CloseHandle Lib "kernel32.dll" (ByVal handle As IntPtr) As Long
Public Sub Page_Load(ByVal s As Object, ByVal e As EventArgs)
If impersonateValidUser("username", "domain", "password") Then
'Insert your code that runs under the security context of a specific user here.
undoImpersonation()
Else
'Your impersonation failed. Therefore, include a fail-safe mechanism here.
End If
End Sub
Private Function impersonateValidUser(ByVal userName As String, _
ByVal domain As String, ByVal password As String) As Boolean
Dim tempWindowsIdentity As WindowsIdentity
Dim token As IntPtr = IntPtr.Zero
Dim tokenDuplicate As IntPtr = IntPtr.Zero
impersonateValidUser = False
If RevertToSelf() Then
If LogonUserA(userName, domain, password, LOGON32_LOGON_INTERACTIVE,
LOGON32_PROVIDER_DEFAULT, token) <> 0 Then
If DuplicateToken(token, 2, tokenDuplicate) <> 0 Then
tempWindowsIdentity = New WindowsIdentity(tokenDuplicate)
impersonationContext = tempWindowsIdentity.Impersonate()
If Not impersonationContext Is Nothing Then
impersonateValidUser = True
End If
End If
End If
End If
If Not tokenDuplicate.Equals(IntPtr.Zero) Then
CloseHandle(tokenDuplicate)
End If
If Not token.Equals(IntPtr.Zero) Then
CloseHandle(token)
End If
End Function
Private Sub undoImpersonation()
impersonationContext.Undo()
End Sub
模拟是特定于线程的，而不是整个应用程序的模拟。我修改了您的page_load以包含一个简单的逻辑来证明这一事实。
示范
原始用户（应用程序池）和模拟用户都将以不同的时间间隔在调试控制台中写入。请注意，模拟用户正在从另一个线程运行，并且每秒将输出其用户名一次，而应用程序池用户（主线程）的输出仍保留在主线程上，并每100毫秒输出一次其名称。
Public Sub Page_Load(ByVal s As Object, ByVal e As EventArgs)
Dim Task As New System.Threading.Tasks.Task(Sub()
If impersonateValidUser("Username", "Domain", "Password") Then
Dim Watch As New Diagnostics.Stopwatch()
Watch.Start()
While Watch.ElapsedMilliseconds < 10000
System.Threading.Thread.Sleep(1000)
Diagnostics.Debug.WriteLine(WindowsIdentity.GetCurrent.Name)
End While
'Insert your code that runs under the security context of a specific user here.
undoImpersonation()
Else
'Your impersonation failed. Therefore, include a fail-safe mechanism here.
End If
End Sub)
Task.Start()
While Not Task.IsCompleted
System.Threading.Thread.Sleep(100)
Diagnostics.Debug.WriteLine("--" & WindowsIdentity.GetCurrent.Name)
End While
End Sub
本文收集自互联网，转载请注明来源。
如有侵权，请联系[email protected] 删除。
我来说两句