C
CN
Platform: Windows 2000 Server, ASP.NET 1.1
I have changed the processModel's userName & password in
machine.config to use, let say, devUser, as ASP.NET identity,
according to article
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnnetsec/html/SecNetHT01.asp
In the file web.config of the application, I removed <identity.../>
and <authentication...> tags.
I'm able to look at (from the server)
http://hostname/appName/serviceName.asmx page, but from the service, I
failed to make connect to SQLServer.
I added 4 webmethods into the service:
[WebMethod]
public string GetDotNetThreadIdentity()
{
return Thread.CurrentPrincipal.Identity.Name;
}
[WebMethod]
public string GetWindowsThreadIdentity()
{
return WindowsIdentity.GetCurrent().Name;
}
[WebMethod]
public string GetUserIdentity()
{
return User.Identity.Name;
}
[WebMethod]
public string GetHttpContextUserIdentity()
{
return HttpContext.Current.User.Identity.Name;
}
Invoking GetDotNetThreadIdentity() yielded this:
<string xmlns="http://tempuri.org/" />
Invoking the other 3 yielded "page cannot be displayed".
Any idea how to get this going? Look like the worker threads run as
nobody or anonymous.
Thanks for your help!
I have changed the processModel's userName & password in
machine.config to use, let say, devUser, as ASP.NET identity,
according to article
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnnetsec/html/SecNetHT01.asp
In the file web.config of the application, I removed <identity.../>
and <authentication...> tags.
I'm able to look at (from the server)
http://hostname/appName/serviceName.asmx page, but from the service, I
failed to make connect to SQLServer.
I added 4 webmethods into the service:
[WebMethod]
public string GetDotNetThreadIdentity()
{
return Thread.CurrentPrincipal.Identity.Name;
}
[WebMethod]
public string GetWindowsThreadIdentity()
{
return WindowsIdentity.GetCurrent().Name;
}
[WebMethod]
public string GetUserIdentity()
{
return User.Identity.Name;
}
[WebMethod]
public string GetHttpContextUserIdentity()
{
return HttpContext.Current.User.Identity.Name;
}
Invoking GetDotNetThreadIdentity() yielded this:
<string xmlns="http://tempuri.org/" />
Invoking the other 3 yielded "page cannot be displayed".
Any idea how to get this going? Look like the worker threads run as
nobody or anonymous.
Thanks for your help!