C# - How to Authenticate with server dinamically

Question

I need to check if service "Advice" has its status running on said server. I made a method that does just that:

public static bool CheckServicesFromServer(string pServicos)
        {
        ServiceController service = new ServiceController();
        List<string> Servicos = pServicos.Split(',').Select(p => p.Trim()).ToList();

        if (Config.BaseLogin == BasesSistema.QualityLogin)
            service.MachineName = "quality";
        if (Config.BaseLogin == BasesSistema.TS02Login)
            service.MachineName = "ts02";
        if (Config.BaseLogin == BasesSistema.TS03Login)
            service.MachineName = "ts03";
        if (Config.BaseLogin == BasesSistema.LocalHost)
            service.MachineName = Environment.MachineName;

        try
        {
            foreach (var item in Servicos)
            {
                service.ServiceName = item;

                if ((service.Status.Equals(ServiceControllerStatus.Stopped)) || (service.Status.Equals(ServiceControllerStatus.StopPending)))
                {
                    File.AppendAllText(StatusLog.StatusLocation, "O servico " + service.ServiceName + " está parado. a Regra não será gerada.");
                    throw new Exception();
                }

                if (service.Status.Equals(ServiceControllerStatus.Running))
                {
                    File.AppendAllText(StatusLog.StatusLocation, "O serviço " + service.ServiceName + "está rodando perfeitamente.");
                }
            }
        }

        catch (Exception e)
        {
            Log.WriteErrorLog(e.Message);
            throw new Exception(e.Message);
        }

        return true;
    }

The thing is, when I run the test, it says "Access Denied", and throws an exception. When I add my user (The user from the computer which is running the application) as an Adm at the server, it runs fine.

Is there a way to authenticate my computer so it can have permission to access the server and check its service status?

You would need credentials to the servers you are trying to access. You would then impersonate the user with a piece of code... see this [link](https://stackoverflow.com/questions/125341/how-do-you-do-impersonation-in-net) — Krik, Nov 08 '18 at 18:46

score 0 · Answer 1 · answered Nov 09 '18 at 12:51

Thanks to Krik, I found the solution. It's as simple as addind this class:

using System;
using System.Security.Principal;
using System.Runtime.InteropServices;
using System.Security.Permissions;

public class ImpersonateUser
{
    [DllImport("advapi32.dll", SetLastError = true)]
    public static extern bool LogonUser(
    String lpszUsername,
    String lpszDomain,
    String lpszPassword,
    int dwLogonType,
    int dwLogonProvider,
    ref IntPtr phToken);
    [DllImport("kernel32.dll", CharSet = CharSet.Auto)]
    public extern static bool CloseHandle(IntPtr handle);
    private static IntPtr tokenHandle = new IntPtr(0);
    private static WindowsImpersonationContext impersonatedUser;
    // If you incorporate this code into a DLL, be sure to demand that it
    // runs with FullTrust.
    [PermissionSetAttribute(SecurityAction.Demand, Name = "FullTrust")]
    public void Impersonate(string domainName, string userName, string password)
    {
        //try
        {
            // Use the unmanaged LogonUser function to get the user token for
            // the specified user, domain, and password.
            const int LOGON32_PROVIDER_DEFAULT = 0;
            // Passing this parameter causes LogonUser to create a primary token.
            const int LOGON32_LOGON_INTERACTIVE = 2;
            tokenHandle = IntPtr.Zero;
            // ---- Step - 1
            // Call LogonUser to obtain a handle to an access token.
            bool returnValue = LogonUser(
            userName,
            domainName,
            password,
            LOGON32_LOGON_INTERACTIVE,
            LOGON32_PROVIDER_DEFAULT,
            ref tokenHandle); // tokenHandle - new security token
            if (false == returnValue)
            {
                int ret = Marshal.GetLastWin32Error();
                throw new System.ComponentModel.Win32Exception(ret);
            }
            // ---- Step - 2
            WindowsIdentity newId = new WindowsIdentity(tokenHandle);
            // ---- Step - 3
            {
                impersonatedUser = newId.Impersonate();
            }
        }
    }
    // Stops impersonation
    public void Undo()
    {
        impersonatedUser.Undo();
        // Free the tokens.
        if (tokenHandle != IntPtr.Zero)
        {
            CloseHandle(tokenHandle);
        }
    }

    internal void Impersonate()
    {
        throw new NotImplementedException();
    }
}

And I Just had to call it like this:

public static bool CheckServicesFromServer(string pServicos)
        {
            ImpersonateUser Iu = new ImpersonateUser();
            ServiceController service = new ServiceController();
            List<string> Servicos = pServicos.Split(',').Select(p => p.Trim()).ToList();

            if (Config.BaseLogin == BasesSistema.QualityLogin)
                service.MachineName = "quality";
            if (Config.BaseLogin == BasesSistema.TS02Login)
                service.MachineName = "ts02";
            if (Config.BaseLogin == BasesSistema.TS03Login)
                service.MachineName = "ts03";
            if (Config.BaseLogin == BasesSistema.LocalHost)
                service.MachineName = Environment.MachineName;

            Iu.Impersonate(Config.Dominio, Config.LoginMaster, Config.SenhaMaster);

            try
            {
                foreach (var item in Servicos)
                {
                    service.ServiceName = item;

                    if ((service.Status.Equals(ServiceControllerStatus.Stopped)) || (service.Status.Equals(ServiceControllerStatus.StopPending)))
                    {
                        Flag = true;
                        File.AppendAllText(StatusLog.StatusLocation, "O servico " + service.ServiceName + " está parado. a Regra não será gerada. <br />");
                        throw new Exception();
                    }

                    if (service.Status.Equals(ServiceControllerStatus.Running))
                    {
                        File.AppendAllText(StatusLog.StatusLocation, "O serviço " + service.ServiceName + " está rodando perfeitamente. <br />");
                    }
                }
                Iu.Undo();
            }

            catch
            {
                Iu.Undo();
                Log.WriteErrorLog("Não é possível abrir o Gerenciador de Controle de Serviços no Computador '" + service.MachineName + "'. <br />");
                return false;
            }
            return true;
        }

My Config Class holds the information of the Domain, User and PassWord, and it worked perfectly.

C# - How to Authenticate with server dinamically

1 Answers1