从Azure辅助角色访问文件共享

2 回答

• 1

  我认为这是一个安全问题：用户（运行工作角色的用户）无法在网络共享上进行身份验证 . 在Directory.GetFiles之前尝试“net use”

  来自C＃的"net use"：Access a Remote Directory from C#

  回复于 2024-05-15T00:20:02+08:00
• 0

  是的问题似乎是用户，在主机进程正在运行 . 要解决此问题，您可以使用管理员权限创建新用户（例如，在角色启动时借助启动任务）并模拟已执行的代码 . 您可以看到示例实现here .

  public class WorkerRole : RoleEntryPoint
  {
  
      public sealed class SafeTokenHandle : SafeHandleZeroOrMinusOneIsInvalid
      {
          private SafeTokenHandle() : base(true) { }
  
          [DllImport("kernel32.dll")]
          [ReliabilityContract(Consistency.WillNotCorruptState, Cer.Success)]
          [SuppressUnmanagedCodeSecurity]
          [return: MarshalAs(UnmanagedType.Bool)]
          private static extern bool CloseHandle(IntPtr handle);
  
          protected override bool ReleaseHandle()
          {
              return CloseHandle(handle);
          }
      }
  
      [DllImport("advapi32.dll", SetLastError = true, CharSet = CharSet.Unicode)]
      public static extern bool LogonUser(String lpszUsername, String lpszDomain, String lpszPassword, int dwLogonType, int dwLogonProvider, out SafeTokenHandle phToken);
  
      [DllImport("kernel32.dll", CharSet = CharSet.Auto)]
      public extern static bool CloseHandle(IntPtr handle);
  
      public override void Run()
      {
  
          // This is a sample worker implementation. Replace with your logic.
          Trace.WriteLine("TestWorkerRole entry point called", "Information");
  
          while (true)
          {
              try
              {
  
                  SafeTokenHandle safeTokenHandle;
                  var returnValue = LogonUser("username", Environment.MachineName, "password", 2, 0, out safeTokenHandle);
  
                  if (returnValue)
                  {
                      using (safeTokenHandle)
                      {
                          using (var impersonatedUser = WindowsIdentity.Impersonate(safeTokenHandle.DangerousGetHandle()))
                          {
                              const string networkSharePath = @"UNCPath";
                              Directory.GetFiles(networkSharePath).ToList().ForEach(file => Trace.TraceInformation(file));
                          }
                      }
  
                  }
  
                  Thread.Sleep(10000);
                  Trace.WriteLine("Working", "Information");
              }
              catch (Exception ex)
              {
                  Trace.TraceError(ex.ToString());
              }
          }
      }
  }
  

  回复于 2024-05-15T00:20:02+08:00