[.net]程式碼如何寫入網芳、網路磁碟、網路硬碟

  • 10506
  • 0
  • 2015-08-12

摘要:[.net]程式碼如何寫入網芳、網路磁碟、網路硬碟

1.首先設定要分享的目錄的安全性以及共用性,先從安全性開始

要讓本機iis可用程式碼存取的話,就加入本機的IIS_IUSER,NETWORK,NETWORK_SERVICE的帳號,並給予完全控制權限

要讓外部主機可用程式碼存取的話,就在控制台開個帳號給他,並加入此帳號的完全控制權限,某某主機到時候就用這個帳號存取此資料夾

然後設定共用:剛剛在安全性加入哪個帳號,你就在這邊加入哪個帳號

加入成功之後顯示的結果如下:會顯示這個資料夾的完整共用路徑:\\網域\資料夾名稱

 

 

2.然後利用網路上寫好的impersonator.cs,傳入登入帳號密碼,就可以用這個class來登入網路磁碟

貼在程式碼文字編輯器裡面的話,格式會整個跑掉,所以純文字貼上

如果在上一步驟,只是要給本機iis存取資料夾,不是給某某主機存取的話,本步驟可省略

直接就可以在程式碼中用File.Copy,File.Delete去存取此網路硬碟

namespace MyProject

{

    #region Using directives.
    // ----------------------------------------------------------------------
 
    using System;
    using System.Security.Principal;
    using System.Runtime.InteropServices;
    using System.ComponentModel;
 
    // ----------------------------------------------------------------------
    #endregion
 
    /////////////////////////////////////////////////////////////////////////
 
    /// <summary>
    /// Impersonation of a user. Allows to execute code under another
    /// user context.
    /// Please note that the account that instantiates the Impersonator class
    /// needs to have the 'Act as part of operating system' privilege set.
    /// </summary>
    /// <remarks>
    /// This class is based on the information in the Microsoft knowledge base
    /// article http://support.microsoft.com/default.aspx?scid=kb;en-us;Q306158
    /// 
    /// Encapsulate an instance into a using-directive like e.g.:
    /// 
    /// ...
    /// using ( new Impersonator( "myUsername", "myDomainname", "myPassword" ) )
    /// {
    /// ...
    /// [code that executes under the new context]
    /// ...
    /// }
    /// ...
    /// 
    /// Please contact the author Uwe Keim (mailto:uwe.keim@zeta-software.de)
    /// for questions regarding this class.
    /// </remarks>
    public class Impersonator :
        IDisposable
    {
        #region Public methods.
        // ------------------------------------------------------------------
 
        /// <summary>
        /// Constructor. Starts the impersonation with the given credentials.
        /// Please note that the account that instantiates the Impersonator class
        /// needs to have the 'Act as part of operating system' privilege set.
        /// </summary>
        /// <param name="userName">The name of the user to act as.</param>
        /// <param name="domainName">The domain name of the user to act as.</param>
        /// <param name="password">The password of the user to act as.</param>
        public Impersonator(
            string userName,
            string domainName,
            string password)
        {
            ImpersonateValidUser(userName, domainName, password);
        }
 
        // ------------------------------------------------------------------
        #endregion
 
        #region IDisposable member.
        // ------------------------------------------------------------------
 
        public void Dispose()
        {
            UndoImpersonation();
        }
 
        // ------------------------------------------------------------------
        #endregion
 
        #region P/Invoke.
        // ------------------------------------------------------------------
 
        [DllImport("advapi32.dll", SetLastError = true)]
        private static extern int LogonUser(
            string lpszUserName,
            string lpszDomain,
            string lpszPassword,
            int dwLogonType,
            int dwLogonProvider,
            ref IntPtr phToken);
 
        [DllImport("advapi32.dll", CharSet = CharSet.Auto, SetLastError = true)]
        private static extern int DuplicateToken(
            IntPtr hToken,
            int impersonationLevel,
            ref IntPtr hNewToken);
 
        [DllImport("advapi32.dll", CharSet = CharSet.Auto, SetLastError = true)]
        private static extern bool RevertToSelf();
 
        [DllImport("kernel32.dll", CharSet = CharSet.Auto)]
        private static extern bool CloseHandle(
            IntPtr handle);
 
        private const int LOGON32_LOGON_INTERACTIVE = 2;
        private const int LOGON32_PROVIDER_DEFAULT = 0;
        private const int LOGON32_LOGON_NETWORK = 3;
        private const int LOGON32_LOGON_BATCH = 4;
        private const int LOGON32_LOGON_SERVICE = 5;
        private const int LOGON32_LOGON_UNLOCK = 7;
        private const int LOGON32_LOGON_NETWORK_CLEARTEXT = 8; // Only for Win2K or higher 
        private const int LOGON32_LOGON_NEW_CREDENTIALS = 9; // Only for Win2K or higher 
 
 
        // ------------------------------------------------------------------
        #endregion
 
        #region Private member.
        // ------------------------------------------------------------------
 
        /// <summary>
        /// Does the actual impersonation.
        /// </summary>
        /// <param name="userName">The name of the user to act as.</param>
        /// <param name="domainName">The domain name of the user to act as.</param>
        /// <param name="password">The password of the user to act as.</param>
        private void ImpersonateValidUser(
            string userName,
            string domain,
            string password)
        {
            WindowsIdentity tempWindowsIdentity = null;
            IntPtr token = IntPtr.Zero;
            IntPtr tokenDuplicate = IntPtr.Zero;
 
            try
            {
                if (RevertToSelf())
                {//LOGON32_LOGON_NETWORK_CLEARTEXT通常是在Server為了配合多平台的檔案寫入(例如:linux)
//才會用這個降低安全性的選項,讓server允許直接帳號密碼登入並且寫入檔案系統
//LOGON32_LOGON_NEW_CREDENTIALS才是一般server會採用的安全性作法,使用者需利用帳密取得一組credential
//再用credential去登入server, 方可寫入server的檔案系統
//完整的LogonType解釋詳見msdn
//https://msdn.microsoft.com/en-us/library/windows/desktop/aa378184(v=vs.85).aspx
//Server的這個設定在 程式集=>系統管理工具=>本機安全性原則裡面,此設定為進階設定,非mis人員通常很少設定他
                    if (LogonUser(
                        userName,
                        domain,
                        password,
                        LOGON32_LOGON_NEW_CREDENTIALS,
                        LOGON32_PROVIDER_DEFAULT,
                        ref token) != 0)
                    {
                        if (DuplicateToken(token, 2, ref tokenDuplicate) != 0)
                        {
                            tempWindowsIdentity = new WindowsIdentity(tokenDuplicate);
                            impersonationContext = tempWindowsIdentity.Impersonate();
                        }
                        else
                        {
                            throw new Win32Exception(Marshal.GetLastWin32Error());
                        }
                    }
                    else
                    {
                        throw new Win32Exception(Marshal.GetLastWin32Error());
                    }
                }
                else
                {
                    throw new Win32Exception(Marshal.GetLastWin32Error());
                }
            }
            finally
            {
                if (token != IntPtr.Zero)
                {
                    CloseHandle(token);
                }
                if (tokenDuplicate != IntPtr.Zero)
                {
                    CloseHandle(tokenDuplicate);
                }
            }
        }
 
        /// <summary>
        /// Reverts the impersonation.
        /// </summary>
        private void UndoImpersonation()
        {
            if (impersonationContext != null)
            {
                impersonationContext.Undo();
            }
        }
 
        private WindowsImpersonationContext impersonationContext = null;
 
        // ------------------------------------------------------------------
        #endregion
    }
 
    /////////////////////////////////////////////////////////////////////////
}
 

 

3.最後在程式碼中,只要利用using (Impersonator.....),就可以用程式碼直接存取此網路硬碟了

新增編輯刪除修改檔案等動作


using (new Impersonator("yourUserName", "yourDomainName","yourPassword"))
{

	if (!Directory.Exists(remotePath)) Directory.CreateDirectory(remotePath);

	File.Copy(localFile, remoteFile, true);
}