|
security
newsgroups
|
|||||||||||||||||||||||
|
|||||||||||||||||||||||
Writing to a Virtual DirectoryI have a web app that receives XML, parses it, runs it against a
database, then sends this data back as XML. When the file is received, a corresponding text file that contains the data being received is created in a virtual directory. This configuration runs fine in IIS 5.1 on XP Pro. But in the production environment (Windows 2003 and IIS 6.0) the text files are not getting created. I have gone so far as to grant IUSR_machinename administrative permissions on this Virtual directory (full control), but still no text files are being written. What permissions are needed to allow these text files to be created in the Virtual directory? Do you get any error msgs ? do a file auditing and see whether it failed.
-- Show quoteHide quoteRegards, Bernard Cheah http://www.microsoft.com/iis/ http://www.iiswebcastseries.com/ http://www.msmvps.com/bernard/ "GregP" <peterso***@mindspring.com> wrote in message news:ZGGDe.1309$Uk3.1017@newsread1.news.pas.earthlink.net... >I have a web app that receives XML, parses it, runs it against a database, >then sends this data back as XML. > > When the file is received, a corresponding text file that contains the > data being received is created in a virtual directory. > > This configuration runs fine in IIS 5.1 on XP Pro. But in the production > environment (Windows 2003 and IIS 6.0) the text files are not getting > created. > > I have gone so far as to grant IUSR_machinename administrative permissions > on this Virtual directory (full control), but still no text files are > being written. > > What permissions are needed to allow these text files to be created in the > Virtual directory? Bernard Cheah [MVP] wrote:
> Do you get any error msgs ? do a file auditing and see whether it failed. No error messages. Nothing in the event logs either. I'll audit.> Bernard Cheah [MVP] wrote:
> Do you get any error msgs ? do a file auditing and see whether it failed. Set up aduting on this folder. Nothing shows up in the security event > viewer. Could there be an Active Directory issue preventing this app from even attempting to write to the folder? Nope. should be not related to AD. I suspect is permission setting that the
web application user does not has the privileges to do write the file. So, get filemon (sysinternals.com) and see if you can trace what user is be use to create the file and whether there's any problem with it. Run it on the server, then simulate your web request again, then checkout the filemon log. -- Show quoteHide quoteRegards, Bernard Cheah http://www.microsoft.com/iis/ http://www.iiswebcastseries.com/ http://www.msmvps.com/bernard/ "GregP" <peterso***@mindspring.com> wrote in message news:u_wEe.2874$Uk3.1791@newsread1.news.pas.earthlink.net... > Bernard Cheah [MVP] wrote: >> Do you get any error msgs ? do a file auditing and see whether it failed. >> > Set up aduting on this folder. Nothing shows up in the security event > viewer. > > Could there be an Active Directory issue preventing this app from even > attempting to write to the folder? Bernard Cheah [MVP] wrote:
> Nope. should be not related to AD. I suspect is permission setting that the The FileMon revealed that when the app was installed, it was installed > web application user does not has the privileges to do write the file. So, > get filemon (sysinternals.com) and see if you can trace what user is be use > to create the file and whether there's any problem with it. > > Run it on the server, then simulate your web request again, then checkout > the filemon log. > in a different directory than the directory we have set IIS up to use. I don't know how it has been able to work at all. FileMon reported that the app was trying to write the log files to a directory that didn't exist. Great little tool. Thanks for the help. Now to figure out why this app is even able to run. Ok. so did filemon tell you the user that is trying to write the file?
-- Show quoteHide quoteRegards, Bernard Cheah http://www.microsoft.com/iis/ http://www.iiswebcastseries.com/ http://www.msmvps.com/bernard/ "GregP" <peterso***@mindspring.com> wrote in message news:xRiFe.4954$Uk3.556@newsread1.news.pas.earthlink.net... > Bernard Cheah [MVP] wrote: >> Nope. should be not related to AD. I suspect is permission setting that >> the web application user does not has the privileges to do write the >> file. So, get filemon (sysinternals.com) and see if you can trace what >> user is be use to create the file and whether there's any problem with >> it. >> >> Run it on the server, then simulate your web request again, then checkout >> the filemon log. >> > > The FileMon revealed that when the app was installed, it was installed in > a different directory than the directory we have set IIS up to use. I > don't know how it has been able to work at all. FileMon reported that the > app was trying to write the log files to a directory that didn't exist. > > Great little tool. Thanks for the help. > > Now to figure out why this app is even able to run. GregP wrote:
Show quoteHide quote > I have a web app that receives XML, parses it, runs it against a Make sure the ASPNET account has write access to the directory if you're > database, then sends this data back as XML. > > When the file is received, a corresponding text file that contains the > data being received is created in a virtual directory. > > This configuration runs fine in IIS 5.1 on XP Pro. But in the > production environment (Windows 2003 and IIS 6.0) the text files are > not getting created. > > I have gone so far as to grant IUSR_machinename administrative > permissions on this Virtual directory (full control), but still no > text files are being written. > > What permissions are needed to allow these text files to be created in > the Virtual directory? using ASP.NET. Leon Mayne [MVP] wrote:
Show quoteHide quote > GregP wrote: > >>I have a web app that receives XML, parses it, runs it against a >>database, then sends this data back as XML. >> >>When the file is received, a corresponding text file that contains the >>data being received is created in a virtual directory. >> >>This configuration runs fine in IIS 5.1 on XP Pro. But in the >>production environment (Windows 2003 and IIS 6.0) the text files are >>not getting created. >> >>I have gone so far as to grant IUSR_machinename administrative >>permissions on this Virtual directory (full control), but still no >>text files are being written. >> >>What permissions are needed to allow these text files to be created in >>the Virtual directory? > > > Make sure the ASPNET account has write access to the directory if you're > using ASP.NET. > >
Other interesting topics
IIS6.0 prompting for logon
Authentication is not wanted. Integrated Authenticatoin - Default to the main domain IIS authentification with a ASP Application on a SAMBA host secure ftp Basic auth without dialog - no database Why is login requesting domain for some users? certificates and sub-webs of Default Web Site 401.1 - Integrated Security Error when using VB application Not authorized to view page IIS5 |
|||||||||||||||||||||||