Re: IIS 6 & Server Permisions

From: Joe Milli (Milli_at_discussions.microsoft.com)
Date: 11/10/04 

Date: Tue, 9 Nov 2004 16:07:02 -0800

Waite a minute, I'm having similar problems also and enjoy the banter on this
thread probably because I have little experience W/IIS6.
 I am running a simple java applet hitcounter that works great when browsed
to from the directory, but in IIS6 2003 Server it doesn’t count. I have
opened security as much as I can with no results. I was wondering if it had
something to do with Web Server Extensions. No extensions were listed for
java or class. I'm bewildered.

"David Wang [Msft]" wrote:

> Hanging does not sound like a permissions problem. If code doesn't have
> permissions to do something, it is an immediate "access denied" sort of
> failure. The OS isn't going to ponder about it.
>
> It sounds like maybe the Java component has retry logic on failures, so when
> it is failing now (possibly due to permissions), it is infinitely
> retrying -- thus looking like a hang. Can you figure out if the hang
> happens when trying to instantiate the wrapper or when invoking a method (so
> that you can narrow down the problem and hopefully you have source code to
> this component).
>
> If you wrote this component, I suggest debugging its sources. If this
> component comes from someone else, I suggest obtaining support for it. I
> have no idea what permissions this component requires, so it is not clear
> what needs to be added.
>
> ASP uses the impersonated identity to execute pages, so if you say that your
> user identity can make it work from vbscript on this server, then you should
> try disabling Anonymous authentication and enabling Basic Authentication on
> the vdir containing this ASP page, browse to it using your user identity (so
> request should be authenticated using your user identity -- very similar to
> when you execute the code from vbscript), and see what happens.
>
> If Basic auth still fails, then I suspect it is because the token obtained
> by IIS is not exactly the same token you have -- in particular, your user
> token is "Interactive Logon" (i.e. you hit Ctrl-Alt-Del and logged yourself
> onto the machine) while the IIS-obtained token is "Network Logon". Some
> files on the system are distinguish between these logon types -- maybe they
> are causing your issues. For example, CMD.EXE is accessible to "Interactive
> Logon" users but NOT "Network Logon" users -- thus it is normally
> inaccessible from IIS. This is a by-design security feature on Windows
> Server 2003.
>
> --
> //David
> IIS
> This posting is provided "AS IS" with no warranties, and confers no rights.
> //
> "Aubrey" <Aubrey@discussions.microsoft.com> wrote in message
> news:9768BC6B-39E2-450D-B5B3-DEADE93AD504@microsoft.com...
> Hi there,
>
> I'm having the same problem, maybe some else could contribute to a solution.
>
> I'm using ASP pages on Windows 2003, previously on Windows 2000 where i was
> instantiating a java component with an ActiveX wrapper. I have tested this
> by
> using a vbs script to call the component and it works as expected, but
> unfortunately not when called from within the ASP page served by IIS6.
> Noting
> happens the pages, it just hangs.
>
> If it's a permission setting how will i change it, since the component isn't
> registered in COM+? Or do i have to add read and execute to the entire JRE
> folder?
>
> Thanks
> Aubrey
>
>
>
> "GingerNinja" wrote:
>
> > > I'm sorry, but I cannot just tell you the answer. I'd rather
> > > people take information, learn, and figure it out.
> >
> > Who do you think you are Yoda?!?!?
> >
> > >I'm sorry if you think it was a waste of your time because
> > >you simply expected direct answers to your questions.
> >
> > WHAT!!! Why would I ask a question if I didnt want a direct answer its
> > not:
> > microsoft.public.iwantvagueanswerstomyquestions.nothelpfullsoltuions
> >
> > Seriously I think this thread is in danger of becomming a slanging
> > match... I'm sure your a nice guy David and I'm sure your just trying to
> > help, and for what its worth I DO appreciate you responding to my
> > thread, afterall you dont have to, right?
> >
> > But I personally think that if you know the answer to a question you
> > should give it, tell them the caveats (if there are any) and let them
> > deal with the consequences, its THEIR choice.
> >
> > For me personally I needed a solution as quickly as possible. For now,
> > at least we have a solution and I will be considering removing that
> > section completely and finding an alternative, I never liked it to begin
> > with and now I have the breathing room to find a more "elegant" secure
> > solution.
> >
> > *** Sent via Developersdex http://www.developersdex.com ***
> > Don't just participate in USENET...get rewarded for it!
> >
>
>
>

Relevant Pages

  • Re: File Upload - Security Issues
    ... uploaded and the user could upload any or all of these in theory. ... There is no one product that can give you 100% security, ... > Code doesn't execute in local memory space unless remote user has rights ... > You don't have MS Office installed on the server. ...
    (microsoft.public.scripting.vbscript)
  • Re: System.Security.SecurityException was unhandled
    ... Is it a must that I need to register the COM server to the machine using ... CAS permissions on the client machine, and the COM issue is a new problem. ... assembly actually has the permission in question. ... When I execute the application I received and error message. ...
    (microsoft.public.dotnet.security)
  • 2nd Post - Trouble Getting VS.Net 2003 WalkThrough working
    ... the server. ... MSDE either from the Setup or from the SQL2KDeskSP3 execute. ... it does look like some of the sample databases have been ... >> and they directed me to install MSDE and they attached a ConfigSamples ...
    (microsoft.public.sqlserver.msde)
  • Re: IIS 6.0 on Windows Server 2003
    ... If PHP insists on using CMD.EXE to execute the shellcommand on the ... server, then no, you have no choice -- you must give read permissions to the ... this would be a security vulnerability caused by PHP. ...
    (microsoft.public.inetserver.misc)
  • Re: HTTP Download of EXE
    ... that's what you configured the server to do... ... Given a request, IIS has to determine whether to serve the file (i.e. ... Execute Permissions of "None" means everything is treated as a static file ...
    (microsoft.public.inetserver.iis)