IIS里通过调用windows api通过身份模拟实现不同域名文件服务器的同步

Question

之前在csdn看到一位前辈分享的调用windows api 通过身份模拟实现在网站用户上传文件时，将文件同步到不同域名下的不同用户名的文件服务器上，但是因为频繁同步且每次同步之前都要进行身份模拟，非常麻烦，请教下有没有方法能够实现一次身份模拟后，以后无需再次模拟。身份模拟代码如下：
using System;
using System.Collections.Generic;
using System.Text;
using System.Runtime.InteropServices;
using System.Security.Principal;
using System.IO;

namespace Test
{
public class Test
{
// logon types
const int LOGON32_LOGON_INTERACTIVE = 2;
const int LOGON32_LOGON_NETWORK = 3;
const int LOGON32_LOGON_NEW_CREDENTIALS = 9;
// logon providers
const int LOGON32_PROVIDER_DEFAULT = 0;
const int LOGON32_PROVIDER_WINNT50 = 3;
const int LOGON32_PROVIDER_WINNT40 = 2;
const int LOGON32_PROVIDER_WINNT35 = 1;

    [DllImport("advapi32.dll", CharSet = CharSet.Auto, SetLastError = true)]
    public static extern int LogonUser(String lpszUserName,
        String lpszDomain,
        String lpszPassword,
        int dwLogonType,
        int dwLogonProvider,
        ref IntPtr phToken);

    [DllImport("advapi32.dll", CharSet = CharSet.Auto, SetLastError = true)]
    public static extern int DuplicateToken(IntPtr hToken,
        int impersonationLevel,
        ref IntPtr hNewToken);

    [DllImport("advapi32.dll", CharSet = CharSet.Auto, SetLastError = true)]
    public static extern bool RevertToSelf();

    [DllImport("kernel32.dll", CharSet = CharSet.Auto)]
    public static extern bool CloseHandle(IntPtr handle);

    private WindowsImpersonationContext impersonationContext;

    public bool impersonateValidUser(String userName, String domain, String password)
    {
        WindowsIdentity tempWindowsIdentity;
        IntPtr token = IntPtr.Zero;
        IntPtr tokenDuplicate = IntPtr.Zero;

        if (RevertToSelf())
        {
            // 这里使用LOGON32_LOGON_NEW_CREDENTIALS来访问远程资源。
            // 如果要（通过模拟用户获得权限）实现服务器程序，访问本地授权数据库可
            // 以用LOGON32_LOGON_INTERACTIVE
            if (LogonUser(userName, domain, password, LOGON32_LOGON_NEW_CREDENTIALS,
                LOGON32_PROVIDER_DEFAULT, ref token) != 0)
            {
                if (DuplicateToken(token, 2, ref tokenDuplicate) != 0)
                {
                    tempWindowsIdentity = new WindowsIdentity(tokenDuplicate);
                    impersonationContext = tempWindowsIdentity.Impersonate();
                    if (impersonationContext != null)
                    {
                        System.AppDomain.CurrentDomain.SetPrincipalPolicy(PrincipalPolicy.WindowsPrincipal);
                        IPrincipal pr = System.Threading.Thread.CurrentPrincipal;
                        IIdentity id = pr.Identity;
                        CloseHandle(token);
                        CloseHandle(tokenDuplicate);
                        return true;
                    }
                }
            }
        }

        if (token != IntPtr.Zero)
            CloseHandle(token);

        if (tokenDuplicate != IntPtr.Zero)
            CloseHandle(tokenDuplicate);

        return false;
    }

    public void undoImpersonation()
    {
        impersonationContext.Undo();
    }

    public void TestFunc()
    {
        bool isImpersonated = false;
        try
        {
            if (impersonateValidUser("UserName", "Domain", "Password"))
            {
                isImpersonated = true;
                //do what you want now, as the special user
                // ...
                File.Copy(@"\\192.168.1.48\generals\now.htm", "c:\\now.htm", true);
            }
        }
        finally
        {
            if (isImpersonated)
                undoImpersonation();
        }
    }
}

}

Answer 1

不知道你这个问题是否已经解决, 如果还没有解决的话:

• 看下这篇博客，也许你就懂了，链接：宝塔Windows面板使用IIS建站后的优化

如果你已经解决了该问题, 非常希望你能够分享一下解决方案, 写成博客, 将相关链接放在评论区, 以帮助更多的人 ^-^