为什么我收到错误“无法更新密码” 当给阿兹曼打电话时?
我正在 Enterprise Library 的 AzMan 授权提供程序的帮助下从 WinForms 应用程序进行授权检查,但收到以下错误:
无法更新密码。 作为当前密码提供的值不正确。 (HRESULT 异常:0x8007052B)(Microsoft.Practices.EnterpriseLibrary.Security.AzMan)
<小时>无法更新密码。 作为当前密码提供的值不正确。 (HRESULT 异常:0x8007052B)(Microsoft.Interop.Security.AzRoles)
AzMan 存储托管在同一域中另一台计算机上的 ADAM 中。 其他计算机和用户不存在此问题。 发出呼叫的用户具有对 ADAM 和 AzMan 存储的读取访问权限。 运行 WinForms 应用程序的计算机和运行 ADAM 的计算机都运行 Windows XP SP2。
之前我已经解决了 AzMan 的访问问题,但这是一个新问题...我错过了什么?
I'm doing a authorization check from a WinForms application with the help of the AzMan authorization provider from Enterprise Library and am receiving the the following error:
Unable to update the password. The value provided as the current password is incorrect. (Exception from HRESULT: 0x8007052B) (Microsoft.Practices.EnterpriseLibrary.Security.AzMan)
Unable to update the password. The value provided as the current password is incorrect. (Exception from HRESULT: 0x8007052B) (Microsoft.Interop.Security.AzRoles)
The AzMan store is hosted in ADAM on another computer in the same domain. Other computers and users do not have this problem. The user making the call has read access to both ADAM and the AzMan store. The computer running the WinForms app and the computer running ADAM are both on Windows XP SP2.
I've had access problems with AzMan before that I've resolved, but this is a new one... What am I missing?
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(2)
我从事件日志中发现,用户从远程计算机调用 AzMan 存在安全问题。 用户不属于运行 ADAM/AzMan 的计算机上的本地用户组。 当我纠正后,一切又恢复正常了。
I found out from the event log that there was a security issue with the user making the call to AzMan from a remote computer. The user did not belong the local Users group on the computer running ADAM/AzMan. When I corrected that everything worked again.
对于使用 ASP.NET 的 AzMan,请在
web.config
中启用模拟 (
),并向 AD 管理员确保模拟帐户对 AzMan 商店具有“读者”权限; 另外,向此帐户授予对Temporary ASP.NET Files
文件夹(位于C:\Windows\Microsoft.NET\
下)的写入权限。For AzMan with ASP.NET, turn on impersonation in
web.config
(<identity impersonate="true" username="xx" pasword="xx" />
), and make sure with an AD administrator that the impersonation account has "reader" permissions on the AzMan store; plus, give write permissions to this account on theTemporary ASP.NET Files
folder (underC:\Windows\Microsoft.NET\<framework>
).