Run COM+ app from asp.net

[Guest]

Hi all,

I hope this is the correct group to post this to. If not, I apologize. I
have an asp.net (c#) project that needs to talk to a COM object. the COM
object is actually an .exe that requires elevated permissions to execute.

I have tried to set the ASPNET account permissions for the .exe via
dcomcnfg, but that doesn't work. I would guess that the program itself must
be run from an account with higher permission than the ASPNET process.

So my question is, how can I run just the piece of c# code that interacts
with the COM object as a privileged user. I'd like to maintain my forms
authentication with my web app, if possible.

Thanks for any guidance with this

Jim

 

[Mark Rae]

So my question is, how can I run just the piece of c# code that interacts
with the COM object as a privileged user. I'd like to maintain my forms
authentication with my web app, if possible.

http://west-wind.com/weblog/posts/1572.aspx

 

[Guest]

Thanks Mark... I'll give it a shot and let you know if I run into problems

 

[Guest]

Awesome... worked like a charm. For anyone reading this, this is what fixed
it:

const int LOGON32_LOGON_INTERACTIVE = 2;
const int LOGON32_LOGON_NETWORK = 3;
const int LOGON32_LOGON_BATCH = 4;
const int LOGON32_LOGON_SERVICE = 5;
const int LOGON32_LOGON_UNLOCK = 7;
const int LOGON32_LOGON_NETWORK_CLEARTEXT = 8;
const int LOGON32_LOGON_NEW_CREDENTIALS = 9;
const int LOGON32_PROVIDER_DEFAULT = 0;

[DllImport("advapi32.dll", SetLastError=true)]
public static extern int LogonUser(
string lpszUsername,
string lpszDomain,
string lpszPassword,
int dwLogonType,
int dwLogonProvider,
out IntPtr phToken
);
[DllImport("advapi32.dll", SetLastError=true)]
public static extern int ImpersonateLoggedOnUser(
IntPtr hToken
);

[DllImport("advapi32.dll", SetLastError=true)]
static extern int RevertToSelf();

[DllImport("kernel32.dll", SetLastError=true)]
static extern int CloseHandle(IntPtr hObject);

private void TestButton_Click(object sender, EventArgs e)
{
IntPtr lnToken;
int TResult = LogonUser(Username,".",Password,
LOGON32_LOGON_NETWORK,LOGON32_PROVIDER_DEFAULT, out lnToken);
if ( TResult > 0 )
{
ImpersonateLoggedOnUser(lnToken);

// TODO: Make call to COM object

RevertToSelf();

CloseHandle(lnToken);
}

}

 

[Nicholas Paldino [.NET/C# MVP]]

James,

Are you actually running this in COM+? If so, the COM+ component should
really be running with the appropriate user account, and you should modify
the roles that can access the component to include the ASPNET user, or
another low-privledge user (I don't know if local users can be added to
Roles in COM+).

It would make all of this a lot easier.

--
- Nicholas Paldino [.NET/C# MVP]
- (e-mail address removed)

Awesome... worked like a charm. For anyone reading this, this is what
fixed
it:

const int LOGON32_LOGON_INTERACTIVE = 2;
const int LOGON32_LOGON_NETWORK = 3;
const int LOGON32_LOGON_BATCH = 4;
const int LOGON32_LOGON_SERVICE = 5;
const int LOGON32_LOGON_UNLOCK = 7;
const int LOGON32_LOGON_NETWORK_CLEARTEXT = 8;
const int LOGON32_LOGON_NEW_CREDENTIALS = 9;
const int LOGON32_PROVIDER_DEFAULT = 0;

[DllImport("advapi32.dll", SetLastError=true)]
public static extern int LogonUser(
string lpszUsername,
string lpszDomain,
string lpszPassword,
int dwLogonType,
int dwLogonProvider,
out IntPtr phToken
);
[DllImport("advapi32.dll", SetLastError=true)]
public static extern int ImpersonateLoggedOnUser(
IntPtr hToken
);

[DllImport("advapi32.dll", SetLastError=true)]
static extern int RevertToSelf();

[DllImport("kernel32.dll", SetLastError=true)]
static extern int CloseHandle(IntPtr hObject);

private void TestButton_Click(object sender, EventArgs e)
{
IntPtr lnToken;
int TResult = LogonUser(Username,".",Password,
LOGON32_LOGON_NETWORK,LOGON32_PROVIDER_DEFAULT, out lnToken);
if ( TResult > 0 )
{
ImpersonateLoggedOnUser(lnToken);

// TODO: Make call to COM object

RevertToSelf();

CloseHandle(lnToken);
}

}

Thanks Mark... I'll give it a shot and let you know if I run into
problems

 

[Guest]

Hi Nicholas,

I have to admit that my knowledge of the differences between COM+ and COM is
pretty poor. As I understand it, the 3rd party exe that I'm trying to use is
a COM+ app. I tried to do as you mentioned via the dcomcnfg tool, but that
didn't work it because I'm thinking that the program requires an account with
more privledges.

In any case, using temporary impersonation worked for me.

James,

Are you actually running this in COM+? If so, the COM+ component should
really be running with the appropriate user account, and you should modify
the roles that can access the component to include the ASPNET user, or
another low-privledge user (I don't know if local users can be added to
Roles in COM+).

It would make all of this a lot easier.

--
- Nicholas Paldino [.NET/C# MVP]
- (e-mail address removed)

Awesome... worked like a charm. For anyone reading this, this is what
fixed
it:

const int LOGON32_LOGON_INTERACTIVE = 2;
const int LOGON32_LOGON_NETWORK = 3;
const int LOGON32_LOGON_BATCH = 4;
const int LOGON32_LOGON_SERVICE = 5;
const int LOGON32_LOGON_UNLOCK = 7;
const int LOGON32_LOGON_NETWORK_CLEARTEXT = 8;
const int LOGON32_LOGON_NEW_CREDENTIALS = 9;
const int LOGON32_PROVIDER_DEFAULT = 0;

[DllImport("advapi32.dll", SetLastError=true)]
public static extern int LogonUser(
string lpszUsername,
string lpszDomain,
string lpszPassword,
int dwLogonType,
int dwLogonProvider,
out IntPtr phToken
);
[DllImport("advapi32.dll", SetLastError=true)]
public static extern int ImpersonateLoggedOnUser(
IntPtr hToken
);

[DllImport("advapi32.dll", SetLastError=true)]
static extern int RevertToSelf();

[DllImport("kernel32.dll", SetLastError=true)]
static extern int CloseHandle(IntPtr hObject);

private void TestButton_Click(object sender, EventArgs e)
{
IntPtr lnToken;
int TResult = LogonUser(Username,".",Password,
LOGON32_LOGON_NETWORK,LOGON32_PROVIDER_DEFAULT, out lnToken);
if ( TResult > 0 )
{
ImpersonateLoggedOnUser(lnToken);

// TODO: Make call to COM object

RevertToSelf();

CloseHandle(lnToken);
}

}

Thanks Mark... I'll give it a shot and let you know if I run into
problems

:


So my question is, how can I run just the piece of c# code that
interacts
with the COM object as a privileged user. I'd like to maintain my
forms
authentication with my web app, if possible.

http://west-wind.com/weblog/posts/1572.aspx

 

[Mark Rae]

Awesome... worked like a charm.

Yes, it's an awesome article - I've used it many times and never had a
problem with it.

I have an encryption class that I use to encrypt / decrypt the userid and
password for added security. Alternatively, you could store them in a secure
database.