Have Geek Brain

What is impersonated in asp.net web.config?

Please help me. if i gave anonymous access to the site in iis and if i gave impersonate = true in its web.config then what should happen?

+2


a source to share


1 answer


If you provide anonymous access to your site in IIS, this means that IIS will process the request in the context of the user set in the site properties (right where you enabled anonymous access (at least in IIS 6)) ..

Now impersonation in ASP.NET means that the thread that handles the request (in the w3wp process) will use the ID used by IIS (instead of the application pool ID).



This configuration is unusual.

A common scenario is to use Integrated Windows Authentication in IIS, so the thread that handles the request in IIS will use the user authentication in the browser. Impersonation in ASP.NET would then mean that ASP.NET would reuse the same user ID when processing the request.

+3


a source






More articles:


All Articles