模拟登陆os

由于IIS的服务帐户往往没有权限，IO操作比较容易出问题，采用模拟登录


using System;


using System.Data;


using System.Configuration;


using System.Linq;


using System.Web;


using System.Web.Security;


using System.Web.UI;


using System.Web.UI.WebControls;


using System.Web.UI.WebControls.WebParts;


using System.Web.UI.HtmlControls;


using System.Xml.Linq;


using System.Security.Principal;


using System.Runtime.InteropServices;






using System.IO;




public partial class _Default : System.Web.UI.Page




...{


public const int LOGON32_LOGON_INTERACTIVE = 2;


public const int LOGON32_PROVIDER_DEFAULT = 0;


WindowsImpersonationContext impersonationContext;


[DllImport("advapi32.dll")]


public static extern int LogonUserA(String lpszUserName,


String lpszDomain,


String lpszPassword,


int dwLogonType,


int dwLogonProvider,


ref IntPtr phToken);


[DllImport("advapi32.dll", CharSet = CharSet.Auto, SetLastError = true)]


public static extern int DuplicateToken(IntPtr hToken,


int impersonationLevel,


ref IntPtr hNewToken);




[DllImport("advapi32.dll", CharSet = CharSet.Auto, SetLastError = true)]


public static extern bool RevertToSelf();


[DllImport("kernel32.dll", CharSet = CharSet.Auto)]


public static extern bool CloseHandle(IntPtr handle);






protected void Page_Load(object sender, EventArgs e)




...{






}


protected void button1_Click(object sender, EventArgs e)




...{


if (impersonateValidUser("test1", "contoso.local", "password01!"))




...{


//Insert your code that runs under the security context of a specific user here.


//button1.Text = "ok";




byte[] att = File.ReadAllBytes(@"/fileserver est1 est.txt");


string contentType = "application/octet-stream";


string filename = "test.txt";




Response.AppendHeader("Content-Disposition", "attachment;FileName=" + filename);


Response.AppendHeader("Content-Length", att.Length.ToString());




Response.BinaryWrite(att);


Response.Flush();




undoImpersonation();


}


else




...{


//Your impersonation failed. Therefore, include a fail-safe mechanism here.


}


}






private bool impersonateValidUser(String userName, String domain, String password)




...{


WindowsIdentity tempWindowsIdentity;


IntPtr token = IntPtr.Zero;


IntPtr tokenDuplicate = IntPtr.Zero;


if (RevertToSelf())




...{


if (LogonUserA(userName, domain, password, LOGON32_LOGON_INTERACTIVE,


LOGON32_PROVIDER_DEFAULT, ref token) != 0)




...{


if (DuplicateToken(token, 2, ref tokenDuplicate) != 0)




...{


tempWindowsIdentity = new WindowsIdentity(tokenDuplicate);


impersonationContext = tempWindowsIdentity.Impersonate();


if (impersonationContext != null)




...{


CloseHandle(token);


CloseHandle(tokenDuplicate);


return true;


}


}


}


}


if (token != IntPtr.Zero)


CloseHandle(token);


if (tokenDuplicate != IntPtr.Zero)


CloseHandle(tokenDuplicate);


return false;


}


private void undoImpersonation()




...{


impersonationContext.Undo();


}




}