This project is read-only.

Impersonation Question

Sep 8, 2008 at 10:21 PM
I need to solve the following scenario:

A trused AD User  DomainB\USERA must be impersonated to DomainA\USERA. this work perfectly if I use the managed WindowsIdentity(USERA@DomainA) for example in an ASP.NET page.
But now I have to do it using a ISAPI Filter.
Could this scenario somehow be solved with Filters.NET??

Concret LOGON_USER must be changed!


Sep 9, 2008 at 12:11 AM

When using Windows Authentication in IIS, impersonation takes effect (the thread identity is changed) when the ISAPI Extension starts executing. It does not occur when an ISAPI Filter executes. The LOGON_USER is infered by IIS depending on the credentials supplied and authentication method used.

Where does Filter.NET fit in your scenario?

Tiago Halm
Sep 9, 2008 at 2:48 AM
Edited Sep 9, 2008 at 2:50 AM


David Wang has a really good post on this subject.

Tiago Halm