Re: Asp.Net and Webservice using Impersonation/App Pools

From: Eric Cherng (ericch1_at_remove_the_dot-hotmai.l.com)
Date: 07/07/04 

Date: Wed, 7 Jul 2004 15:24:39 -0700

I'm not sure what your problem is... you mentioned a lot of background, but
the question must be hidden in there somewhere. Are you saying that your
web service cannot access your EXE in System32? Have you given access to
the EXE to the user account that the web service will run as?

Does this EXE have to be in System32? If not, it's better to store the file
somewhere else. If only your web service will use the EXE, you should put
the file local to the web service files.

Also have you considered using a different approach? How about wrapping the
EXE call in an assembly and then having your web service use the assembly?

As I said, I'm not sure exactly what your question is, so not sure if the
mentioned suggestions help. If you post your question again, I'll see if I
can try again.

Eric

"Jarred" <showdown@westnet.com.au> wrote in message
news:4ee24562.0407062342.602e3f38@posting.google.com...
> Howdy All,
>
> I've been having a bit of a problem that I can't seem to get a grip on
> at the moment and I'm hoping someone may be able to give me a quick
> hand :)
>
> What I have is a Webservice that references an EXE file sitting in
> c:\windows\system32\ . Now if I use a Windows App and access the
> webservice everything goes smoothly.
>
> If I just invoke the webservice by visiting the asmx file in my
> browser it throws a SystemAccessDenied error. The line it fails on is
> where I instaniate the above mentioned object.
>
> Now if I move the app in to its own App Pool in IIS set my account
> (local admin) in the identity tab it works fine. If I leave this as
> normal and put impersonation in the web.config file to run as myself
> the webservice also works with out any problems.
>
> What I want to do is create another local account (well actually it's
> going to be a domain account when I'm finished) and I want to use this
> account in the identity/impersonation section.
>
> Obviously the main reason behind me trying to do this is I don't want
> the service to run as an Administrator (even local one) and the
> account will have integrated security for SQL most probably as a DBO
> (requirement of other software we use).
>
> The object itself does use other files in the system32 dir but I've
> granted access to all of these files for said user. It also uses
> other files in the progrm files\common\microsoft\vfp (I can tell this
> because of FileMon) but I've given the user access to all these files
> as well.
>
> Originally I thought the problem was somewhere in admin tools --> .Net
> config --> Runtime Security but I now believe it to be a Windows
> Security problem.
>
> I'm really stuck on this one so any help would be greatly appreciated
> :)
>
> Cheers,
> Jarred :-)

Relevant Pages

  • Re: About Webservice access Sharepoint site?
    ... The account your webservice is running as doesn't have the required ... to run your webservice as a specified account, with permissions. ... > I am developing a web service to do something with share point. ...
    (microsoft.public.sharepoint.portalserver)
  • Re: Calling a webservice which needs authentication through orchestration
    ... Make sure that the account your host is running with has access to the ... > I have a scenario where I need to access a webservice through my ... However the web service needs authentication. ...
    (microsoft.public.biztalk.general)
  • Re: Using SMPTMail, MailAttachment corrupts the attachment when called from a web service
    ... Does the ASP.NET account (or whatever account your WebService is using) ... > I creating a very simple email, and attaching an excel file and trying ... > When I include it as part of a web service, ...
    (microsoft.public.dotnet.framework.aspnet.webservices)
  • Re: has my sendmail been compromised?
    ... I believe the sloppily masqueraded exe ... >I host my website with hostingplex and they use sendmail, my account ... Submitting invalid information during the initial sign up process. ... >See the attached details to reactivate your Adamandevedreamdates account. ...
    (comp.mail.sendmail)
  • RE: Using kerberosSecurity Throws Security Exception
    ... Account with a Custom Principal Name using SetSPN.exe utility. ... I tried turning on identity impersonation for my web app. ... >> turned on for the web app (the client of my web service). ... >> Non nobis Domine non nobis sed nomini Tuo da gloriam. ...
    (microsoft.public.dotnet.framework.webservices.enhancements)