Impersonation Question

Sep 8, 2008 at 9:21 PM
Hi
I need to solve the following scenario:

A trused AD User  DomainB\USERA must be impersonated to DomainA\USERA. this work perfectly if I use the managed WindowsIdentity(USERA@DomainA) for example in an ASP.NET page.
But now I have to do it using a ISAPI Filter.
Could this scenario somehow be solved with Filters.NET??

Concret LOGON_USER must be changed!

Thanks
René

Coordinator
Sep 8, 2008 at 11:11 PM
Hi,

When using Windows Authentication in IIS, impersonation takes effect (the thread identity is changed) when the ISAPI Extension starts executing. It does not occur when an ISAPI Filter executes. The LOGON_USER is infered by IIS depending on the credentials supplied and authentication method used.

Where does Filter.NET fit in your scenario?

Tiago Halm
Coordinator
Sep 9, 2008 at 1:48 AM
Edited Sep 9, 2008 at 1:50 AM

FYI,

David Wang has a really good post on this subject.
http://blogs.msdn.com/david.wang/archive/2005/08/23/Can-ISAPI-override-its-user-impersonation.aspx

Tiago Halm