Re: Problem running local asp.net app with web site on network share

From: Steven Cheng[MSFT] (v-schang_at_online.microsoft.com)
Date: 04/27/04 

Date: Tue, 27 Apr 2004 01:38:15 GMT

Hi JR,

After some further analisis, I would like to explain the steps when running
the ASP.NET web application under our scenario. I believe this is helpful
for us to further understand the problem.

When we start the web application at the sub directory, it is attempting to
access the share because the configuration system is looking for a
web.config file at the root. When the process model is set to "machine",
then it tries to use the UNC account password to login, and it is failing.
I have also tried to grant "Everyone" with "Full Control" permission of the
shared folder. However, the same error message still appeared. When the
account is "system", it does not use the UNC account, and the machine has
access to the remote share.

We can find that ASP.NET has not tried to check the web.config in the sub
directory at this time. Therefore the Impersonate settings in the sub
directory will not take effect.

Actually, to access the remote shared root when starting the web
application, we need to make sure the ASP.NET work process has the
permission. This is the reason that we need to modify the <processModel> in
machine.config file.

I understand that it is hard to modify the machine.config on the production
server. However, if the root folder for the web site is one shared folder,
I am afraid that we still need to modify this file. Actually, the two
methods in my last reply both modify the machine.config file.

If there is any further concern, please don't hesitate to let me know.
Otherwise, I suggest that we backup and modify the machine.config according
to the steps in my last reply. Thanks!

Regards,

Steven Cheng
Microsoft Online Support

Get Secure! www.microsoft.com/security
(This posting is provided "AS IS", with no warranties, and confers no
rights.)

Get Preview at ASP.NET whidbey
http://msdn.microsoft.com/asp.net/whidbey/default.aspx

Relevant Pages

  • Re: getaffinity/setaffinity and cpu sets.
    ... The notion would be that you can create a new numbered cpuset with cpuset. ... You can modify or inspect its affinity with get/setaffinity above and the CPU_WHICH_SET argument. ... This set would not be modifiable by user processes or by processes in a jail. ... Another option would be to expel the offending thread from the set that is in violation and reparent it to the real system root along with a syslog message or similar. ...
    (freebsd-arch)
  • Re: NIS with local root
    ... Yes - root can still su to the user and then modify the files using the ... Our liability is limited to ... re-supplying any affected attachments. ...
    (Focus-Linux)
  • Re: Problem running local asp.net app with web site on network share
    ... I'll speak with our production team about ... > We can find that ASP.NET has not tried to check the web.config in the sub ... However, if the root folder for the web site is one shared folder, ... > I am afraid that we still need to modify this file. ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Why Ext2/3 needs immutable attribute?
    ... What I am curious is if an intruder has root access, ... > have many ways to turn off the immutable protection and modify files. ... send the line "unsubscribe linux-kernel" in ...
    (Linux-Kernel)
  • Re: File permissions problem
    ... Files not in /home usually belong to root (the administration account), ... From Nautilus ... modify or delete any files there, so use with caution if you do not know ...
    (Ubuntu)