Help with impersonation please - C# Discussion Boards

26-Feb-12 5:42

Hi,

I am trying to get some logged-on user details from a service running as LocalSystem.

After spending the weekend trying to find the best way of doing this, having found that the P/Invoke method is lengthy and arduous and that the get-owner-token-from-process method isn't suitable in this instance I am trying the following method but it won't compile giving non-useful errors.

The code:

ManagementObjectSearcher searcher = new ManagementObjectSearcher("root\\CIMV2", "SELECT * FROM Win32_ComputerSystem");
    foreach (ManagementObject queryObj in searcher.Get())
        {
           string LOU = (queryObj["UserName"].ToString());// returns domain\username - I found this to be the quickest solution
           WindowsIdentity wi = new WindowsIdentity(LOU);// ref http://msdn.microsoft.com/en-us/library/ms998351.aspx#paght000023_impersonatingbyusingwindowsidentity
// fails here with security exception - should I be passing a token instead?
           WindowsImpersonationContext ctx = null;
           ctx = wi.Impersonate();
           WindowsPrincipal wp = new WindowsPrincipal(wi);

           string LOU1 = wi.Name;
           string AuthType = wi.AuthenticationType;
           string Authd = wi.IsAuthenticated.ToString();
           string isGuest = wi.IsGuest.ToString();
           string SidNo = wi.Owner.ToString();
           string SidPlain = wi.Owner.Translate(typeof(System.Security.Principal.NTAccount)).ToString();
           string Token = wi.Token.ToString();

           Console.WriteLine(LOU1);
           Console.WriteLine(AuthType);
           Console.WriteLine(Authd);
           Console.WriteLine(isGuest);
           Console.WriteLine(SidNo);
           Console.WriteLine(SidPlain);
           Console.WriteLine(Token);

           foreach (System.Security.Principal.IdentityReference group in wi.Groups)
           {
               Console.WriteLine(group.Translate(typeof(System.Security.Principal.NTAccount)));
           }

Can anyone shed some light on this please?

Richard MacCutchan26-Feb-12 6:05

Richard MacCutchan

26-Feb-12 6:05

CCodeNewbie wrote:
it won't compile giving non-useful errors.

They may appear non-useful to you, but unless you tell us what they are then it's difficult to help.

Unrequited desire is character building. OriginalGriff
I'm sitting here giving you a standing ovation - Len Goodman

CCodeNewbie26-Feb-12 6:46

26-Feb-12 6:46

Errors are:

1) When deploying an office solution, check to make sure you have fulfilled all necessary security requirements"
- not deploying an office solution

2) Use a certificate to obtain the required permission/s
- haven't had to do this in other impersonations

3) If an assembly implementing the custom security object references other assemblies, add the reference assemblies to the full trust assembly list
- don't think this is accessing anything else as I am currently testing it as a standalone Console App running under the original user (i.e. not local system)

4) Get general help for this exception

Richard MacCutchan26-Feb-12 6:54

Richard MacCutchan

26-Feb-12 6:54

It would be much more useful if you used copy and paste from the output of the compiler so we can see the actual lines of code that the compiler is complaining about.

Unrequited desire is character building. OriginalGriff
I'm sitting here giving you a standing ovation - Len Goodman

CCodeNewbie26-Feb-12 7:41

26-Feb-12 7:41

Hi Richard,

The output fails after the first writeline with the pop-up box containing the list of errors in my previous post.

I have put the code into my service but now I am getting an error (catch exception sends the error to my eventlog)

"System.Security.SecurityException: Incorrect function.

at System.Security.Principal.WindowsIdentity.KerbS4ULogon(String upn)
at System.Security.Principal.WindowsIdentity..ctor(String sUserPrincipalName, String type)
at System.Security.Principal.WindowsIdentity..ctor(String sUserPrincipalName)
at Smith.Smith.OnTimedEvent(Object source, ElapsedEventArgs e)
The Zone of the assembly that failed was:
MyComputer"

I think the string from "string LOU = (queryObj["UserName"].ToString())" may not be the correct UPN although I am getting domain\username as the output.

Doing a bit of research now...

Luc Pattyn26-Feb-12 7:39

Luc Pattyn

26-Feb-12 7:39

Those aren't compiler errors, they might be run-time exception messages. And either way, they normally also provide file, class and line number information which you should work on. Have you learned nothing in the months you were coding and asking questions here?

Unsure | :~

Luc Pattyn [My Articles] Nil Volentibus Arduum

CCodeNewbie26-Feb-12 10:10

26-Feb-12 10:10

Hi Luc,

As mentioned in my post to Richard (believing that the errors were indeed of a run-time nature) I put the code back into the service which generated a more accurate description of what the cause of the error is - I think the error in the formatting of the UPN that is being passes to wi - the error is

UserInfo write failed for host 2. Reason System.Security.SecurityException: Incorrect function.

at System.Security.Principal.WindowsIdentity.KerbS4ULogon(String upn)
at System.Security.Principal.WindowsIdentity..ctor(String sUserPrincipalName, String type)
at System.Security.Principal.WindowsIdentity..ctor(String sUserPrincipalName)
at Smith.Smith.OnTimedEvent(Object source, ElapsedEventArgs e)
The Zone of the assembly that failed was:
MyComputer

from the line "WindowsIdentity wi = new WindowsIdentity(logonuser)"

string LOU = (queryObj["UserName"].ToString());
string[] LOUser = LOU.Split('\\');
string logonuser = (LOUser[1]+"@"+LOUser[0]);//have also tried (LOUser[1].Trim()) - (LOUser[1].Replace(" ","").Trim())- (LOUser[1].Trim().Replace(" ","")+"@"+LOUser[0])
WindowsIdentity wi = new WindowsIdentity(logonuser)

following the suggestions at http://forums.asp.net/p/1095241/1654338.aspx[^] and http://msdn.microsoft.com/en-us/library/windows/desktop/aa380525(v=vs.85).aspx[^]

From the error I gather that it is a constructor error but as the constructor is legal (or at least compiles in the service if not in the Console APP.) I am stuck.

I am sorry if my ignorance disappoints you, quote " Unsure | :~

" unquote.

Yes, I am learning but as stated above, when the compiler/execution throws me a curve-ball I do struggle sometimes, especially when after multiple hours of research, trial-and-error and throwing code at the problem leaves me back where I started.

I do not develop code as a profession, I try and grab a few hours a week where time allows to try and develop an app that would help me and others in the job that I do.

Out of curiosity, which of my previous posts refers to the issues I am encountering above?

Luc Pattyn26-Feb-12 6:14

Luc Pattyn

26-Feb-12 6:14

CCodeNewbie wrote:
giving non-useful errors.

that is a non-useful statement.
When YOU don't understand a message, it means you MUST provide it in your post so others could provide detailed help.

BTW: your code compiles just fine, when put in a file; inside a namespace, class, and method; with the right usings and references added.

Frown | :(

Luc Pattyn [My Articles] Nil Volentibus Arduum

CCodeNewbie26-Feb-12 6:53

Converting audio file into a binary display

26-Feb-12 6:53

using Microsoft.Win32;
using System;
using System.Collections;
using System.Collections.Generic;
using System.ComponentModel;
using System.Data;
using System.Data.SqlClient;
using System.Diagnostics;
using System.IO;
using System.Management;
using System.Net;
using System.Net.NetworkInformation;
using System.Runtime.InteropServices;
using System.Security.Principal;
using System.Text;
using System.Threading;
using System.Timers;
using System.Windows.Forms;

namespace MyProgram
{
    class Program
    {
        static void Main(string[] args)
        {
            try
            {
                ManagementObjectSearcher searcher = new ManagementObjectSearcher("root\\CIMV2", "SELECT * FROM Win32_ComputerSystem");
                foreach (ManagementObject queryObj in searcher.Get())
                {
                    string LOU = (queryObj["UserName"].ToString());// returns domain\username
                    Console.WriteLine(LOU);
                    Console.ReadLine();
                    WindowsIdentity wi = new WindowsIdentity(LOU);// ref http://msdn.microsoft.com/en-us/library/ms998351.aspx#paght000023_impersonatingbyusingwindowsidentity
                    WindowsImpersonationContext ctx = null;
                    ctx = wi.Impersonate();
                    WindowsPrincipal wp = new WindowsPrincipal(wi);

                    string AuthType = wi.AuthenticationType;
                    string Authd = wi.IsAuthenticated.ToString();
                    string isGuest = wi.IsGuest.ToString();
                    string SidNo = wi.Owner.ToString();
                    string SidPlain = wi.Owner.Translate(typeof(System.Security.Principal.NTAccount)).ToString();
                    string Token = wi.Token.ToString();

                    Console.WriteLine(AuthType);
                    Console.WriteLine(Authd);
                    Console.WriteLine(isGuest);
                    Console.WriteLine(SidNo);
                    Console.WriteLine(SidPlain);
                    Console.WriteLine(Token);

                    foreach (System.Security.Principal.IdentityReference group in wi.Groups)
                    {
                        Console.WriteLine(group.Translate(typeof(System.Security.Principal.NTAccount)));
                    }
                }
            }
            catch (Exception e)
            {
                Console.WriteLine(e.ToString());
            }
        }
    }
}

I know there are a lot of non-required references listed but I have just copied and pasted from the service into the Console App. while testing the code. Am I missing one?

kfir.alf26-Feb-12 3:20

kfir.alf

26-Feb-12 3:20

Hi there, I would like to convert an audio file into binary display (0000 1010 0001 1001 ..... ) and then to use in this display in my project in C#.
how can i do that ?

thank you, kfir.

OriginalGriff26-Feb-12 4:12

OriginalGriff

26-Feb-12 4:12

That's not really a question we can answer.

You can read the audio file as binary - but that probably won't do what you want, as it will get the packaging, levels, and loads of other file related info which isn't the "pure sound".

You don't say how you want to display it (or why, either) so we can't help there either. Single "tone"? Changing as the sound plays? Or what?

Ideological Purity is no substitute for being able to stick your thumb down a pipe to stop the water

kfir.alf26-Feb-12 4:56

kfir.alf

26-Feb-12 4:56

I'm sorry, I will try to explain myself:
my goal is to "light up" virtual LED's on the screen.
when the volume is high 8 LED's and when it's low 1 LED.
how can i do it ?
Thank you.

Eddy Vluggen26-Feb-12 11:11

Eddy Vluggen

26-Feb-12 11:11

Google for a VU-meter example? There's a CodeProject[^] article in the top results Smile | :)

Bastard Programmer from Hell Suspicious | :suss: