- 使用者有無 windows identity (ex:有無登入domain?)
- IIS 上有無勾選 anonymous?有無勾選windows intergration?
- application pool 上的 identity 是跑哪一個?(network service? local system? domain user?)
- web.config 上設的authentication mode (None, Winows, Forms)
- web.config 上有無設
? 是否有指定 username, password?
2007年6月8日 星期五
Identity in asp.net 2.0
It's realy complicated.
Please make sure the difference between the Application_BeginRequest event and duration page excution
//operation system thread identity (win32)
System.Security.Principal.WindowsIdentity.GetCurrent();
//managed thread identity
System.Threading.Thread.CurrentPrincipal.Identity;
//asp.net user identity (may be GenericPricipal)
HttpContext.Current.User.Identity;
// consider the client user windows identity that logon to iis
Request.LogonUserIdentity;
再加上多種變化
訂閱:
張貼留言 (Atom)
沒有留言:
張貼留言