Across Domain Impersonation RSS

• • Reply
  

  muhammad_sam...

  Member

  13 Points

  27 Posts

  Across Domain Impersonation

  Jan 09, 2013 09:48 PM|LINK

  Hi all,

  There are two domains, domain1 and domain2. My application is deployed at domain1, developed in ASP.Net & C# and uses Windows Authentication.

  I am using the code from http://support.microsoft.com/kb/306158 to impersonate a user to create a directory on a ‘server S’ at domain2 but it fails. I have tried: Giving all rights to Everyone, Authenticated Users, Network Services of the parent directory on ‘server S’ but it doesn’t work

  Network administrator can’t create TRUST between two domains. Any idea please.

• • Reply
  

  Chen Yu - MS...

  All-Star

  21584 Points

  2493 Posts

  Microsoft

  Re: Across Domain Impersonation

  Jan 10, 2013 09:03 AM|LINK

  Hi,

  You could follow below blog to authenticate cross domain,  it use NewCredentials LogonType in the code to authenticate cross domain. It will help you to solve your problem.

  http://www.cstruter.com/blog/270

  Reference on: http://stackoverflow.com/questions/5023607/how-to-use-logonuser-properly-to-impersonate-domain-user-from-workgroup-client

  Hope it helps.

  Best Regards,

  Please mark the replies as answers if they help or unmark if not.
  Feedback to us
  
  Develop and promote your apps in Windows Store
  
  
  • Edited by Chen Yu - MSFT on Jan 10, 2013 09:03 AM
• • Reply
  

  muhammad_sam...

  Member

  13 Points

  27 Posts

  Re: Across Domain Impersonation

  Jan 11, 2013 08:30 AM|LINK

  Hi Chen, thanks for your answer. I treid follownig but it didn't worked (It will workd if the two domains have mutual trust which is not allowed in my situation):

  enum LogonType
          {
              Interactive = 2,
              Network = 3,
              Batch = 4,
              Service = 5,
              Unlock = 7,
              NetworkClearText = 8,
              NewCredentials = 9
          }
   
          enum LogonProvider
          {
              Default = 0,
              WinNT35 = 1,
              WinNT40 = 2,
              WinNT50 = 3
          }
   
          [DllImport("advapi32.dll", SetLastError = true)]
          public static extern bool LogonUser(string lpszUsername, string lpszDomain, string lpszPassword, int dwLogonType, int dwLogonProvider, ref IntPtr phToken);
   
          [DllImport("kernel32.dll")]
          public static extern bool CloseHandle(IntPtr token);
   
          public bool Impersonate(string username, string domain, string password)
          {
              IntPtr token = IntPtr.Zero;
              bool valid = LogonUser(username,
                          domain,
                          password,
                          (int)LogonType.Interactive,
                          (int)LogonProvider.Default,
                          ref token);
              if (valid)
              {
                  using (WindowsImpersonationContext context = WindowsIdentity.Impersonate(token))
                  {
                      CloseHandle(token);
                      Directory.CreateDirectory(@"\\192.168.14.10\PrintLibrary\Impersonation");                    
                  }
              }
              return valid;
          }

  Thanks