在godaddy上使用MySQL和Entity Framework的安全例外

时间:2009-09-27 17:33:19

标签: mysql entity shared-hosting securityexception

在godaddy上使用Entity框架时,我们得到SecurityException。该实体已针对MySQL存储进行配置。 (v.6.1.2)虽然有点奇怪但是...看看异常堆栈似乎暗示如果我们在站点的任何地方打开到MySQL的连接,那么我们应该得到相同的异常;但是,直接打开MySQL连接似乎在网站的另一部分工作......

以下是验证:

using (MySqlConnection connection = new MySqlConnection(ConnectionString))
{
  connection.Open();
  ...
}

有人遇到过类似的问题吗?

完整的错误堆栈跟踪如下:

[SecurityException: Request for the permission of type 'System.Security.Permissions.SecurityPermission, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089' failed.]
   System.Reflection.MethodBase.PerformSecurityCheck(Object obj, RuntimeMethodHandle method, IntPtr parent, UInt32 invocationFlags) +0
   System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) +470
   System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes) +1051
   System.Activator.CreateInstance(Type type, BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes) +111
   System.Resources.ResourceManager.CreateResourceSet(Stream store, Assembly assembly) +357
   System.Resources.ResourceManager.InternalGetResourceSet(CultureInfo culture, Boolean createIfNotExists, Boolean tryParents) +471
   System.Resources.ResourceManager.InternalGetResourceSet(CultureInfo culture, Boolean createIfNotExists, Boolean tryParents) +583
   System.Resources.ResourceManager.InternalGetResourceSet(CultureInfo culture, Boolean createIfNotExists, Boolean tryParents) +583
   System.Resources.ResourceManager.GetString(String name, CultureInfo culture) +74
   MySql.Data.MySqlClient.Resources.get_PerfMonCategoryName() +40
   MySql.Data.MySqlClient.PerformanceMonitor..ctor(MySqlConnection connection) +43
   MySql.Data.MySqlClient.MySqlConnection.Open() +434
   System.Data.EntityClient.EntityConnection.OpenStoreConnectionIf(Boolean openCondition, DbConnection storeConnectionToOpen, DbConnection originalConnection, String exceptionCode, String attemptedOperation, Boolean& closeStoreConnectionOnFailure) +173
   System.Data.EntityClient.EntityConnection.Open() +96
   System.Data.Objects.ObjectContext.EnsureConnection() +81
   System.Data.Objects.ObjectQuery`1.GetResults(Nullable`1 forMergeOption) +46
   System.Data.Objects.ObjectQuery`1.System.Collections.Generic.IEnumerable<T>.GetEnumerator() +44
   jet.Controllers.WorkOrder.WorkOrderView..ctor() +219
   jet.Controllers.WorkOrder.WorkOrderView.get_Instance() +29
   jet.Controllers.WorkItemController.Index() +11
   lambda_method(ExecutionScope , ControllerBase , Object[] ) +39
   System.Web.Mvc.ActionMethodDispatcher.Execute(ControllerBase controller, Object[] parameters) +17
   System.Web.Mvc.ReflectedActionDescriptor.Execute(ControllerContext controllerContext, IDictionary`2 parameters) +178
   System.Web.Mvc.ControllerActionInvoker.InvokeActionMethod(ControllerContext controllerContext, ActionDescriptor actionDescriptor, IDictionary`2 parameters) +24
   System.Web.Mvc.<>c__DisplayClassa.<InvokeActionMethodWithFilters>b__7() +53
   System.Web.Mvc.ControllerActionInvoker.InvokeActionMethodFilter(IActionFilter filter, ActionExecutingContext preContext, Func`1 continuation) +258
   System.Web.Mvc.<>c__DisplayClassc.<InvokeActionMethodWithFilters>b__9() +20
   System.Web.Mvc.ControllerActionInvoker.InvokeActionMethodWithFilters(ControllerContext controllerContext, IList`1 filters, ActionDescriptor actionDescriptor, IDictionary`2 parameters) +193
   System.Web.Mvc.ControllerActionInvoker.InvokeAction(ControllerContext controllerContext, String actionName) +382
   System.Web.Mvc.Controller.ExecuteCore() +123
   System.Web.Mvc.ControllerBase.Execute(RequestContext requestContext) +23
   System.Web.Mvc.ControllerBase.System.Web.Mvc.IController.Execute(RequestContext requestContext) +7
   System.Web.Mvc.MvcHandler.ProcessRequest(HttpContextBase httpContext) +144
   System.Web.Mvc.MvcHandler.ProcessRequest(HttpContext httpContext) +54
   System.Web.Mvc.MvcHandler.System.Web.IHttpHandler.ProcessRequest(HttpContext httpContext) +7
   System.Web.CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute() +181
   System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously) +75

3 个答案:

答案 0 :(得分:3)

奇怪的一个。 GoDaddy共享托管ASP.NET应用程序在Medium Trust下执行,并且perf计数器创建可能需要完全信任,但是perf计数器创建并不是这里失败的。 (如果它失败了,它就不会传播出去,因为我的SQL客户端代码会吞下perf coutner创建异常。)

相反,它在创建perf计数器之前尝试访问字符串资源失败了。失败的原因是MySQL客户端的Resources.Designer.cs中的这行代码:

return ResourceManager.GetString("PerfMonCategoryName", resourceCulture)

要尝试的一些事情,按难度递增顺序:

  1. 确保您的应用程序的BIN目录中有MySQL客户端DLL,并且您没有尝试从GoDaddy的GAC加载客户端DLL。如果可以避免,请不要依赖GoDaddy提供的二进制文件!

  2. 切换到EN-US文化,以便客户端不必寻找其他资源DLL,并查看问题是否消失。

  3. 从源代码构建.NET客户端,而不是将DLL从二进制分发版复制到应用程序的BIN目录中。这将使这样的问题更容易调试,因为mySQL代码不会是黑盒子。并且,在紧要关头,将让您更改有问题的资源获取调用(或硬编码区域设置)! : - )

  4. 顺便说一句,如果您想在连接字符串中设置“使用性能监视器=假”以试图逃避问题,请不要打扰。无论该设置如何,都会执行有问题的代码:

        public PerformanceMonitor(MySqlConnection connection)
        {
            this.connection = connection;
    
            //// this line is where it bombs
            string categoryName = Resources.PerfMonCategoryName;
    
            //// this line is affected by connection string setting
            if (connection.Settings.UsePerformanceMonitor && procedureHardQueries == null)
            {
                try
                {
                    procedureHardQueries = new PerformanceCounter(categoryName,
                                                                  "HardProcedureQueries", false);
                    procedureSoftQueries = new PerformanceCounter(categoryName,
                                                                  "SoftProcedureQueries", false);
                }
                catch (Exception ex)
                {
                    Logger.LogException(ex);
                }
            }
        }
    

答案 1 :(得分:2)

贾斯汀当场了。问题是godaddy在他们的gac中有一个旧版本的MySql dll,实体框架正在捡起它!

这是修复。 (将此应用于web.config)

<configuration>
  ...
  <runtime>
    <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
      <dependentAssembly>
        <assemblyIdentity name="MySql.Data" publicKeyToken="c5687fc88969c44d"/>
        <bindingRedirect oldVersion="5.0.7.0" newVersion="6.1.2.0"/>
      </dependentAssembly>
    </assemblyBinding>
  </runtime>
  ...
</configuration>

答案 2 :(得分:1)

我只是将trust level =“Full”添加到我的Web配置文件中,并且它可以正常工作