ASP.NET假冒NT AUTHORITY \\ IUSR但模仿是禁用的。 ASP.NET错误？

本文介绍了ASP.NET假冒NT AUTHORITY \\ IUSR但模仿是禁用的。 ASP.NET错误？的处理方法，对大家解决问题具有一定的参考价值，需要的朋友们下面随着小编来一起学习吧！

问题描述

我在Windows 7上运行的ASP.NET 4.0应用程序/ IIS中的ASP.NET v4.0的经典之作应用程序池，它被配置为作为网络服务运行7.5。该应用程序有它连接到本地SQL Server实例的 Application_EndRequest 处理程序。在SQL连接字符串指定集成安全性= SSPI 。 Web.config中做的不的有＆LT;身份冒充=真/方式＆gt;

I have an ASP.NET 4.0 application running on Windows 7 / IIS 7.5 in the "ASP.NET v4.0 Classic" application pool, which is configured to run as Network Service. The application has an Application_EndRequest handler which connects to a local SQL Server instance. The SQL connection string specifies Integrated Security=SSPI. Web.config does not have <identity impersonate="true" />.

当我浏览到的http：//本地主机/测试网站/ ，以下抛出异常：

When I browse to http://localhost/TestSite/, the following exception is thrown:

System.Data.SqlClient.SqlException (0x80131904): Login failed for user 'NT AUTHORITY\IUSR'.
   ...
   at System.Data.SqlClient.SqlConnection.Open()
   at Global.Application_EndRequest(Object sender, EventArgs e)

这是例外的不的，当我浏览到 HTTP抛出：//localhost/TestSite/default.aspx （在IIS中配置默认文档）或任何其他.aspx页面中;在应用程序中正确地连接到SQL Server为NT AUTHORITY \\ NETWORK SERVICE，这是一个有效的登录这些情况。

This exception is not thrown when I browse to http://localhost/TestSite/default.aspx (the default document configured in IIS) or any other .aspx page; in those cases the application correctly connects to SQL Server as "NT AUTHORITY\NETWORK SERVICE", which is a valid login.

为什么会ASP.NET模拟NT AUTHORITY \\ IUSR在EndRequest即使模拟被禁用？这是在ASP.NET中的错误？

下面的Global.asax.cs文件演示了此问题：

The following Global.asax.cs file demonstrates the problem:

public class Global : HttpApplication
{
    public Global()
    {
        this.BeginRequest += delegate { Log("BeginRequest"); };
        this.PreRequestHandlerExecute += delegate { Log("PreRequestHandlerExecute"); };
        this.PostRequestHandlerExecute += delegate { Log("PostRequestHandlerExecute"); };
        this.EndRequest += delegate { Log("EndRequest"); };
    }

    protected void Application_EndRequest(Object sender, EventArgs e)
    {
        try
        {
            using (SqlConnection connection = new SqlConnection("Server=.;Integrated Security=SSPI"))
            {
                connection.Open();
            }
        }
        catch (Exception ex)
        {
            Trace.WriteLine(ex);
        }
    }

    private static void Log(string eventName)
    {
        HttpContext context = HttpContext.Current;
        Type impersonationContextType = typeof(HttpContext).Assembly.GetType("System.Web.ImpersonationContext", true);
        Trace.WriteLine(string.Format("ThreadId={0} {1} {2} Impersonating={3}",
            Thread.CurrentThread.ManagedThreadId,
            context.Request.Url,
            eventName,
            impersonationContextType.InvokeMember("CurrentThreadTokenExists", BindingFlags.NonPublic | BindingFlags.Static | BindingFlags.GetProperty, null, context, null)));
    }
}

下面是跟踪输出：

ThreadId=3 http://localhost/TestSite/ BeginRequest Impersonating=False
ThreadId=3 http://localhost/TestSite/ PreRequestHandlerExecute Impersonating=False
ThreadId=7 http://localhost/TestSite/default.aspx BeginRequest Impersonating=False
ThreadId=7 http://localhost/TestSite/default.aspx PreRequestHandlerExecute Impersonating=False
ThreadId=7 http://localhost/TestSite/default.aspx PostRequestHandlerExecute Impersonating=False
ThreadId=7 http://localhost/TestSite/default.aspx EndRequest Impersonating=False
ThreadId=7 http://localhost/TestSite/ PostRequestHandlerExecute Impersonating=True
ThreadId=7 http://localhost/TestSite/ EndRequest Impersonating=True
System.Data.SqlClient.SqlException (0x80131904): Login failed for user 'NT AUTHORITY\IUSR'.
   ...
   at System.Data.SqlClient.SqlConnection.Open()
   at Global.Application_EndRequest(Object sender, EventArgs e)

请注意，为测试网站/ 的请求（它被映射到 DefaultHttpHandler ）似乎酿出的嵌套的的请求测试网站/ Default.aspx的（它被映射到 ASP.default_aspx ）。 ASP.NET处理完之后测试网站/ Default.aspx的，冒充NT AUTHORITY \\ IUSR，当它恢复处理请求测试网站/ 。

Note that a request to TestSite/ (which is mapped to DefaultHttpHandler) seems to spawn a nested request to TestSite/default.aspx (which is mapped to ASP.default_aspx). After ASP.NET finishes processing TestSite/default.aspx, it impersonates "NT AUTHORITY\IUSR" when it resumes processing the request to TestSite/.

更新：我已经提交了这个问题Microsoft连接。

UPDATE: I've submitted this issue to Microsoft Connect.

NET假冒NT

ASP.NET假冒NT AUTHORITY \\ IUSR但模仿是禁用的。 ASP.NET错误？

问题描述

推荐答案