INSSUserAuthentication::Impersonate

Used to allow the server to impersonate the authentication context of the client.

Syntax

HRESULT Impersonate ( );

Parameters

This method has no parameters.

Return Values

This method must return S_OK upon successful completion, or an HRESULT error code.

Remarks

Impersonation uses a valid user account on the server. The user is assumed to have an account on the server. This method is only called by the bundled access control checker plug-in. If the server does not use the bundled ACL checker plug-in, this method does not do anything.

This method is only called after authentication is complete, and only if the result is NS_AUTH_SUCCESS. The results of authentication can be determined by calling the INSSUserAuthentication::GetAuthenticationResult method.

While the server thread is impersonating the client, it is subject to the same access controls as the client.

Authenticators typically implement this method by calling the following functions:

• For HTTP-Basic authentication, call the Microsoft® Win32® function ImpersonateLoggedOnUser.
• For NTLM authentication, call the SSPI function ImpersonateSecurityContext.

See Also

INSSUserAuthentication::Revert, INSSUserAuthentication::GetAuthenticationResult