表单身份验证覆盖 IIS7 中的模拟
我一直在到处寻找解决这个问题的方法。
我有一个 ASP.NET 应用程序,它在 IIS6 上运行良好。在 IIS 7.5(集成管道)上,我遇到了一些问题。
在 web.config 中设置,因为应用程序需要访问 IIS IUSR 帐户下的某些资源。如果在用户未登录时工作正常(即应用程序模拟 IUSR 并正常访问资源)。
一旦您通过表单身份验证(由数据库支持)登录,模拟就会停止工作,并恢复为应用程序池用户身份(无法访问所需的资源,我已使用 procmon 验证了这一点)。我知道这可能是集成模式下表单身份验证的限制。
是否有任何解决方法可以让我在仍然使用表单身份验证的同时模拟 IUSR?
I have been searching all over the place for a solution to this.
I have an ASP.NET app which ran fine on IIS6. On IIS 7.5 (Integrated pipeline) I am running into some problems. <identity impersonate="true" />
is set in the web.config as the app needs to access some resources under the IIS IUSR account. If works fine as when a user isn't logged in (i.e. the app impersonates IUSR and accesses the resources fine).
As soon as you logon via Forms Authentication (backed by a DB) impersonation stops working and it reverts to the app pool user identity (which doesn't have access to the required resources, I have verified this with procmon). I understand this is probably a limitation of Forms Authentication in integrated mode.
Is there any workaround which would let me impersonate IUSR while still using Forms Authentication?
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论