为什么我的 Web 部件会抛出有关“NT 权限/匿名用户”的错误？
我的 Sharepoint 2007 Web 部件执行代码来启动 K2 工作流程。 工作流服务器驻留在另一台服务器上。
当我的代码执行时，出现以下错误： “24408 K2:NT AUTHORITY\ANONYMOUS LOGON from 172.172.172.172:1721 无权启动 Process MyProject\MyProcessName”
我确信这是一个一般的 IIS 委派问题（不是 K2 特有的），但我不确定如何解决去解决它。 为什么 Sharepoint 应该模拟当前域用户，却尝试以 AnonymousLogon 身份连接到其他服务器？
笔记： - 我的 Sharepoint AppPool 身份是域用户（不是网络服务）。 - 启用 ASP.NET 模拟。
My Sharepoint 2007 web part executes code to start a K2 workflow process. The workflow server resides on another server.
When my code executes, I get the following error:
"24408 K2:NT AUTHORITY\ANONYMOUS LOGON from 172.172.172.172:1721 does not have rights to Start Process MyProject\MyProcessName"
I'm sure this is a general IIS delegation problem (not K2 specific), but I'm not sure how to go about solving it. Why does Sharepoint try to connect to the other server as AnonymousLogon when it should be impersonating the current domain user?
Notes:
- My Sharepoint AppPool identity is a domain user (not Network Service).
- ASP.NET impersonation is enabled.
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（2）
您尝试做的事情称为委托，而不是模仿。 模拟仅在本地服务器上。 有很多事情必须正确才能让授权发挥作用。
可以从 Kerberos 身份验证和故障排除委派问题
David Wang 博客 是关于数千个问题的非常有用的资源。
What you are trying to do is called delegation and not impersonation. Impersonation is only on the local server. There are many thing that have to be right for delegation to work.
A place to start would be Kerberos authentication and troubleshooting delegation issues
David Wang blog is a very useful resource on thous issues.
您还应该前往 K2 Underground，这里有大量关于如何让 Kerberos 委派与其合作的信息产品。 K2 附带的安装指南还包含有关如何安装 K2 和 K2 的分步说明。 将其配置为与 Kerberos 一起使用。
You should also head over to K2 Underground, there is a plethora of information about how to get Kerberos delegation working with their product. The install guide that comes with K2 also has step by step instructions on how to install K2 & configure it to work with Kerberos.