Trouble setting security for new thread in web app.

[Bo Campbell via .NET 247]

Hello,

I have a web app that is being used to restore sql databases. Iam using a new thread to do the sql restores so I can keep theweb page from timing out (it checks a database to see thestatus, etc.) My problem is that I have tried just abouteverything to give that thread the domain username and passwordthat is setup for it on the network. As soon as the threadstarts, it goes straight to the machine name for the login.

I have read things that are very close to what I need on here butnothing that really pinpoints it. I thought about making thefunction into a service but feel i'm very close. Here is my codewhere I call the thread:

tDBRestore = New Thread(AddressOf RestoreDB)
tDBRestore.Name = "tRestoreDB"
tDBRestore.Start()

.NET is impersonating the logged in user, which is great, untilit hits the new thread.

Thanks,
Bo

--------------------------------
From: Bo Campbell

-----------------------
Posted by a user from .NET 247 ([url]http://www.dotnet247.com/[/url])

<Id>L3FjwIaSUEGkXsto7LXw/Q==</Id>

[Hernan de Lahitte]

Unfortunately v1.1 does not transmit the security context (i.e. , principal,
thread token, etc) to the newly created thread. If you don't want to use a
thread from the .NET thread pool (as I guess is your scenario), you would
have to pass the security context (principal object might be suffice) to
your callback method like any other parameter that might receive your
method. On your callback method, you may impersonate with
yourprincipal.Identity.Impresonate() (and don't forget to "Undo" on your
finally section) or just attach this principal to the thread's principal
with Thread.CurrentPrincipal = yourprincipal.

--
Hernan de Lahitte
Lagash Systems S.A.
[url]http://weblogs.asp.net/hernandl[/url]


This posting is provided "AS IS" with no warranties, and confers no rights.

"Bo Campbell via .NET 247" <anonymous@dotnet247.com> wrote in message
news:ui9k9FieEHA.732@tk2msftngp13.phx.gbl...
Hello,

I have a web app that is being used to restore sql databases. I am using a
new thread to do the sql restores so I can keep the web page from timing out
(it checks a database to see the status, etc.) My problem is that I have
tried just about everything to give that thread the domain username and
password that is setup for it on the network. As soon as the thread starts,
it goes straight to the machine name for the login.

I have read things that are very close to what I need on here but nothing
that really pinpoints it. I thought about making the function into a service
but feel i'm very close. Here is my code where I call the thread:

tDBRestore = New Thread(AddressOf RestoreDB)
tDBRestore.Name = "tRestoreDB"
tDBRestore.Start()

..NET is impersonating the logged in user, which is great, until it hits the
new thread.

Thanks,
Bo

--------------------------------
From: Bo Campbell

-----------------------
Posted by a user from .NET 247 ([url]http://www.dotnet247.com/[/url])

<Id>L3FjwIaSUEGkXsto7LXw/Q==</Id>