473,383 Members | 1,829 Online
Bytes | Software Development & Data Engineering Community
Post Job

Home Posts Topics Members FAQ

Join Bytes to post your question to a community of 473,383 software developers and data experts.

ASP / IIS Permissions Nightmare

I have a small ASP program that runs srvinfo.exe remotely on
whatever server you put into the form field. I'm utilizing the
aspexec.dll.

Here is the code:

<html>
<head><title>ASPExec Server Information (srvinfo) Realtime
Query</title><head>
<body>
<H3>ASPExec SrvInfo Realtime Query</H3>

<% if Request.QueryString("host") = "" then %>

<form action="/servers/aspping.asp" method=get>
Enter System Parameters in the form of "-ns \\servername" : <input
type=text size=45 name=host value="-ns \\wammonitor01">
<input type="Submit" VALUE="Submit form">
<input type="Reset" VALUE="Clear fields">
</form>

<%
else
Session.Timeout = 5
Set Executor = Server.CreateObject("ASPExec.Execute")
Executor.Application = "srvinfo.exe"
Executor.Parameters = Request.QueryString("host")
strResult = Executor.ExecuteDosApp
Response.Write "<pre>" & strResult & "</pre>"

end if
%>
</body>
</html>
The code runs fine - the problem is that srvinfo run against any
server besides the server that's running IIS (wammonitor01) will fail
with error 5 (access denied). I suspect that my code is running under
the context of the IWAM_computername account, although I have
Anonymous authentication unchecked for the properties of the site and
am using integrated Windows authentication. This tells me that IIS
should impersonate the credentials of the logged on user (me) which
has Domain Admin privileges. Unfortunately, in some form or another,
this doesnt appear to be happening.

I also tried playing with the IIS Out-of-process Pooled Applications
component and editing the "This application will run under the
following
context" field from "IWAM_computername" to the interactive user, but
then running the script bombs out with server errors.

There must be some way in which IIS can run an .exe that requires
certain privileges against remote servers.

Any help is greatly appreciated.

Thanks,

Chris Malone
Sr. Network Administrator
Westdale Asset Management
Email: cm*****@westdale.com
Jul 19 '05 #1
1 6099
"Chris Malone" <cm*****@westdale.com> wrote in message
news:6a**************************@posting.google.c om...
I have a small ASP program that runs srvinfo.exe remotely on
whatever server you put into the form field. I'm utilizing the
aspexec.dll.

Here is the code:

<html>
<head><title>ASPExec Server Information (srvinfo) Realtime
Query</title><head>
<body>
<H3>ASPExec SrvInfo Realtime Query</H3>

<% if Request.QueryString("host") = "" then %>

<form action="/servers/aspping.asp" method=get>
Enter System Parameters in the form of "-ns \\servername" : <input
type=text size=45 name=host value="-ns \\wammonitor01">
<input type="Submit" VALUE="Submit form">
<input type="Reset" VALUE="Clear fields">
</form>

<%
else
Session.Timeout = 5
Set Executor = Server.CreateObject("ASPExec.Execute")
Executor.Application = "srvinfo.exe"
Executor.Parameters = Request.QueryString("host")
strResult = Executor.ExecuteDosApp
Response.Write "<pre>" & strResult & "</pre>"

end if
%>
</body>
</html>
The code runs fine - the problem is that srvinfo run against any
server besides the server that's running IIS (wammonitor01) will fail
with error 5 (access denied). I suspect that my code is running under
the context of the IWAM_computername account, although I have
Anonymous authentication unchecked for the properties of the site and
am using integrated Windows authentication. This tells me that IIS
should impersonate the credentials of the logged on user (me) which
has Domain Admin privileges. Unfortunately, in some form or another,
this doesnt appear to be happening.


That's likely the problem right there, it's known as a delegation issue.
IIS doesn't actually get the password in Windows Integrated authentication
so there for it can't pass it to the remote server. Switch to Basic
authentication and see if it works.

--
Tom Kaminski IIS MVP
http://www.iistoolshed.com/ - tools, scripts, and utilities for running IIS
http://mvp.support.microsoft.com/
http://www.microsoft.com/windowsserv...y/centers/iis/

Jul 19 '05 #2

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

7
by: Kim Lots | last post by:
Hi Sorry to disturb you again but i really like to know what's the NTFS folder permissions on a "virtual directory" folder for a public webserver iis 5.x running ASP 3.0 with an Access DB on a...
1
by: Brad H McCollum | last post by:
I'm writing an application using VB 6.0 as the front-end GUI, and the MSDE version of SQL Server as the back-end (it's a program for a really small # of users --- less then 3-4). I'm trying to...
6
by: !!! Klutzo !!! | last post by:
I give permissions for ASPNET on a top level subdirectory. A windows program copies a file into the subdirectory, however, my web service cannot access the file because it does not have...
2
by: Jozef | last post by:
Hello, Is there a way to change table permissions in VB Code? I can't seem to find much that's concise in the help file. Here's the situation; I have a table in the "data" portion of a split...
7
by: none | last post by:
Hello: I had a nice php application running on my server here at home, and I uploaded it to a shared public type server and it started to break all over the place. It turns out that some...
27
by: Bob | last post by:
running access 2k; mdb w/ linked tables to another mdb (front/back-end); trying to run a query that updates a table FROM information from a crosstab query. I AM NOTT trying to update the...
13
by: MLH | last post by:
Invalid qualifier error displays at compile time on this A97 example from Permissions Property HELP. What's wrong with the strContainerName assignment line? (6th line) Sub...
8
by: jporter188 | last post by:
Hello, I am working on a project to manipulate XML files. All of the files, the code, and the output are on network drives. When I run my program I get an exception (see below). I tried giving...
6
by: Pep | last post by:
Firstly, I'm not sure if this is the right group for this query, so please forgive me if I am wrong. My problem is that most users I distribute my software to cannot install it on their systems...
6
by: DotNetNewbie | last post by:
Hello, in my web application, I have to create permissions for each user. So what I am doing is that for each role (using sqlmembership in .net) I am creating a column in the database to hold a...
0
isladogs
by: isladogs | last post by:
The next Access Europe User Group meeting will be on Wednesday 3 Apr 2024 starting at 18:00 UK time (6PM UTC+1) and finishing by 19:30 (7.30PM). In this session, we are pleased to welcome former...
0
by: ryjfgjl | last post by:
In our work, we often need to import Excel data into databases (such as MySQL, SQL Server, Oracle) for data analysis and processing. Usually, we use database tools like Navicat or the Excel import...
0
by: Charles Arthur | last post by:
How do i turn on java script on a villaon, callus and itel keypad mobile phone
0
by: ryjfgjl | last post by:
If we have dozens or hundreds of excel to import into the database, if we use the excel import function provided by database editors such as navicat, it will be extremely tedious and time-consuming...
0
by: ryjfgjl | last post by:
In our work, we often receive Excel tables with data in the same format. If we want to analyze these data, it can be difficult to analyze them because the data is spread across multiple Excel files...
0
by: emmanuelkatto | last post by:
Hi All, I am Emmanuel katto from Uganda. I want to ask what challenges you've faced while migrating a website to cloud. Please let me know. Thanks! Emmanuel
0
BarryA
by: BarryA | last post by:
What are the essential steps and strategies outlined in the Data Structures and Algorithms (DSA) roadmap for aspiring data scientists? How can individuals effectively utilize this roadmap to progress...
1
by: Sonnysonu | last post by:
This is the data of csv file 1 2 3 1 2 3 1 2 3 1 2 3 2 3 2 3 3 the lengths should be different i have to store the data by column-wise with in the specific length. suppose the i have to...
0
by: Hystou | last post by:
There are some requirements for setting up RAID: 1. The motherboard and BIOS support RAID configuration. 2. The motherboard has 2 or more available SATA protocol SSD/HDD slots (including MSATA, M.2...

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.