c# - ServiceBus 抛出 401 未授权错误

Question

我正在使用 Windows Service Bus 1.0 Brokered 消息传递的简单实现来跟踪用户与特定 Web 应用程序的交互。

每次将某些内容保存到数据库中的“敏感”表时，我都会设置存储库层发送一条消息，如下所示:

ServiceBus.MessageQueue<T>.PushAsync(entity);

然后它将序列化实体并从中创建一条消息。

我的 MessageQueue 类是这样的。

public static class MessageQueue<T>
{
    static string ServerFQDN;
    static int HttpPort = 9355;
    static int TcpPort = 9354;
    static string ServiceNamespace = "ServiceBusDefaultNamespace";

    public static void PushAsync(T msg)
    {
        ServerFQDN = System.Net.Dns.GetHostEntry(string.Empty).HostName;

        //Service Bus connection string
        var connBuilder = new ServiceBusConnectionStringBuilder { ManagementPort = HttpPort, RuntimePort = TcpPort };
        connBuilder.Endpoints.Add(new UriBuilder() { Scheme = "sb", Host = ServerFQDN, Path = ServiceNamespace }.Uri);
        connBuilder.StsEndpoints.Add(new UriBuilder() { Scheme = "https", Host = ServerFQDN, Port = HttpPort, Path = ServiceNamespace}.Uri);

        //Create a NamespaceManager instance (for management operations) and a MessagingFactory instance (for sending and receiving messages)
        MessagingFactory messageFactory = MessagingFactory.CreateFromConnectionString(connBuilder.ToString());
        NamespaceManager namespaceManager = NamespaceManager.CreateFromConnectionString(connBuilder.ToString());

        if (namespaceManager == null)
        {
            Console.WriteLine("\nUnexpected Error");
            return;
        }

        //create a new queue
        string QueueName = "ServiceBusQueueSample";
        if (!namespaceManager.QueueExists(QueueName))
        {
            namespaceManager.CreateQueue(QueueName);
        }

        try
        {            
            QueueClient myQueueClient = messageFactory.CreateQueueClient(QueueName);

            string aaa = JsonConvert.SerializeObject(msg, Formatting.Indented,
                            new JsonSerializerSettings()
                            {
                                ReferenceLoopHandling = ReferenceLoopHandling.Ignore,
                                ContractResolver = new NHibernateContractResolver()
                            });

            BrokeredMessage sendMessage1 = new BrokeredMessage(aaa);
            sendMessage1.Properties.Add("UserName",Thread.CurrentPrincipal.Identity.Name); 
            sendMessage1.Properties.Add("TimeStamp", ApplicationDateTime.Now);
            sendMessage1.Properties.Add("Type", msg.GetType().Name);


            myQueueClient.Send(sendMessage1);

        }
        catch (Exception e)
        {
            var l = new Logger();
            l.Log(LogEventEnum.WebrequestFailure, e.Message);
            Console.WriteLine("Unexpected exception {0}", e.ToString());
            throw;
        }

    }
}

当我在本地调试它时，它可以完美地工作。但是，当我在 IIS 中发布站点并运行时，namespaceManager.QueueExists(QueueName) 调用失败并出现异常，显示“401 Unauthorized error”。

当我将应用程序池标识(在 IIS 中)更改为管理员帐户时，不会发生此错误。但是，当我们投入生产时，我绝对没有可以做到这一点。

我错过了什么吗？如果是这样，它是什么？任何帮助是极大的赞赏。

Answer 1

Chameera，您是否阅读了文档中的安全部分？ http://msdn.microsoft.com/en-us/library/windowsazure/jj193003(v=azure.10).aspx

您似乎在使用默认安全设置运行，这意味着您只有管理员帐户被授权。查看文档部分并向您要在产品中使用的帐户授予必要的权限。