RE: Identity crisis on a WS
From: Luis (Luis_at_discussions.microsoft.com)
Date: 06/29/04
- Next message: Burak: "Generating classes from an .xsd file"
- Previous message: Chris: "Passing request to service"
- In reply to: Vishal: "RE: Identity crisis on a WS"
- Next in thread: Luis: "RE: Identity crisis on a WS"
- Messages sorted by: [ date ] [ thread ]
Date: Tue, 29 Jun 2004 07:52:01 -0700
Vishal:
As you see in my respose to Luke, changing the user from ASPNET to SYSTEM makes it work although I am no suer about what are the secutirty implications.
There is a note for the IIS 6 users (like you) :
=*=
When ASP.NET is running under IIS 6 in native mode, the IIS 6 process model is
used and settings in this section are ignored. Please use the IIS administrative
UI to configure things like process identity and cycling for the IIS
worker process for the desired application
=*=
Hope this worksw for you also
Luis
"Vishal" wrote:
> Hi Luis,
> I am having a similar problem with IIS 6.0 on a windows 2003 server.
>
> I have a ASP .NET applicaiton and a application pool configfured to run with a domain user credentials. This domain user is a also a local administrator.
> I have a piece of code that executes a Windows API fucntion (translatename)to get a fully qualified domain name of the user that logs on the web site.
>
> This function fails with a error code ERROR_ACCESS_DENIED when running from the ASP .NET application. However if I execute the same piece of code from a application on the command line it works. I log on as the above mentioned domain user before while running the app to validate that the domain user has priviliges to run the Win32 API fucnction
>
> It seems like that there is something going on in the security context when code executes as a ASP .NET application.
>
> Luis: Please share with us if you were you able to resolve your problem.
>
> MSFT: Is there some IIS traces that can be enabled to triouble shoot this?
>
> Thanks
>
>
>
>
> "[MSFT]" wrote:
>
> > Hi Luis,
> >
> > I perform a same test on a Windows 2000 server. However, I get correct
> > result from the AT process. You may check if you use System account in
> > machine.config <processModal> element, and impersonate set to true in
> > web.config <identity> element. Additionally, You need make if the "access
> > denied " error from the web service or from the process you created.
> >
> > Luke
> >
> >
- Next message: Burak: "Generating classes from an .xsd file"
- Previous message: Chris: "Passing request to service"
- In reply to: Vishal: "RE: Identity crisis on a WS"
- Next in thread: Luis: "RE: Identity crisis on a WS"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
