Re: IIS6 & ASP: accessing network files with FSO fails

From: Jeff Cochran (jeff.nospam_at_zina.com)
Date: 03/21/05


Date: Mon, 21 Mar 2005 21:40:17 GMT

On Mon, 21 Mar 2005 22:21:46 +0100, "Thomas" <me@alternize.com> wrote:

>> Does it have the same password as IUSR on the machine tatooine?
>
>yep
>
>> AHA! See, your credentials are not being passed. This means that this
>> page
>> is really not authenticating as you. What does this yield:
>>
>> Response.Write Request.ServerVariables("LOGON_USER")
>
>DOM\iistest
>
>my test account with admin rights. the credentials are passed. but that does
>unfortunately not proof asp is actually running in this context. if it
>would, it could access the files as the account is a domain admin (and yes,
>it does have the group policy set "allow logon as service")...

You're logging into server 1 fine, there's still something goofy about
permissions to the second server though. IISTest is a domain user,
correct? And it has permissions on server 2 for the
files/folders/share in question, correct? And remember, "Everyone: is
just a group. It isn't necessarily every account on the system.

This is using a UNC convention for the virtual directory pointing to
server 2's share, correct? As in \\server2\sharename? If you log
onto server 1 as the user, can they connect to the share with a NET
USE or just browsing in Windows Explorer?

I gotta say there's something we're missing here. This just isn't
that hard to do. Make sure you're hitting all the steps:

HOW TO: Create a Virtual Directory on an Existing Web Site to a Folder
That Resides on a Remote Computer:
http://support.microsoft.com/default.aspx?scid=kb;en-us;308150

Jeff



Relevant Pages

  • Re: "log on" form
    ... a user is logged onto the client computer with a different user account than ... give them a change to authenticate to the server. ... an access denied message and yes Windows XP can store credentials as shown ... > manually (by using the graphical form or net use command). ...
    (microsoft.public.windowsxp.security_admin)
  • Re: How does authentication work?
    ... The server is one the domain but we log into it with a local account. ... account to map those drives with alternate credentials. ... But it seems to me that the length of time the connection can remain valid ...
    (microsoft.public.windows.server.general)
  • Re: Services do not start automatically
    ... using said account and change the password there... ... Are you creating the credentials hours/days before ... "Meinolf Weber" wrote: ... when I reboot the server these services do not ...
    (microsoft.public.windows.server.active_directory)
  • Re: Account Identifier Pool
    ... when I add an account to Active Directory on our domain ... > No suitable default server credential exists on this system. ... Applications that manage their own credentials, ... > The account is able to be added and all seems well. ...
    (microsoft.public.win2000.active_directory)
  • Re: winnt vs. sql auth
    ... The biggest benefit of using Windows Authentication is the security of the ... account access, then somewhere that account information must be stored. ... the storage of this information is on the very server that is at ... login credentials are transmitted over the network in cleartext. ...
    (microsoft.public.sqlserver.server)