Asp.Net and Webservice using Impersonation/App Pools

Jarred

Howdy All,

I've been having a bit of a problem that I can't seem to get a grip on
at the moment and I'm hoping someone may be able to give me a quick
hand :)

What I have is a Webservice that references an EXE file sitting in
c:\windows\syst em32\ . Now if I use a Windows App and access the
webservice everything goes smoothly.

If I just invoke the webservice by visiting the asmx file in my
browser it throws a SystemAccessDen ied error. The line it fails on is
where I instaniate the above mentioned object.

Now if I move the app in to its own App Pool in IIS set my account
(local admin) in the identity tab it works fine. If I leave this as
normal and put impersonation in the web.config file to run as myself
the webservice also works with out any problems.

What I want to do is create another local account (well actually it's
going to be a domain account when I'm finished) and I want to use this
account in the identity/impersonation section.

Obviously the main reason behind me trying to do this is I don't want
the service to run as an Administrator (even local one) and the
account will have integrated security for SQL most probably as a DBO
(requirement of other software we use).

The object itself does use other files in the system32 dir but I've
granted access to all of these files for said user. It also uses
other files in the progrm files\common\mi crosoft\vfp (I can tell this
because of FileMon) but I've given the user access to all these files
as well.

Originally I thought the problem was somewhere in admin tools --> .Net
config --> Runtime Security but I now believe it to be a Windows
Security problem.

I'm really stuck on this one so any help would be greatly appreciated
:)

Cheers,
Jarred :-)

Nov 21 '05 #1

Subscribe Reply

3189

Eric Cherng

I'm not sure what your problem is... you mentioned a lot of background, but
the question must be hidden in there somewhere. Are you saying that your
web service cannot access your EXE in System32? Have you given access to
the EXE to the user account that the web service will run as?

Does this EXE have to be in System32? If not, it's better to store the file
somewhere else. If only your web service will use the EXE, you should put
the file local to the web service files.

Also have you considered using a different approach? How about wrapping the
EXE call in an assembly and then having your web service use the assembly?

As I said, I'm not sure exactly what your question is, so not sure if the
mentioned suggestions help. If you post your question again, I'll see if I
can try again.

Eric

"Jarred" <sh******@westn et.com.au> wrote in message
news:4e******** *************** ***@posting.goo gle.com...

Howdy All,

I've been having a bit of a problem that I can't seem to get a grip on
at the moment and I'm hoping someone may be able to give me a quick
hand :)

What I have is a Webservice that references an EXE file sitting in
c:\windows\syst em32\ . Now if I use a Windows App and access the
webservice everything goes smoothly.

If I just invoke the webservice by visiting the asmx file in my
browser it throws a SystemAccessDen ied error. The line it fails on is
where I instaniate the above mentioned object.

Now if I move the app in to its own App Pool in IIS set my account
(local admin) in the identity tab it works fine. If I leave this as
normal and put impersonation in the web.config file to run as myself
the webservice also works with out any problems.

What I want to do is create another local account (well actually it's
going to be a domain account when I'm finished) and I want to use this
account in the identity/impersonation section.

Obviously the main reason behind me trying to do this is I don't want
the service to run as an Administrator (even local one) and the
account will have integrated security for SQL most probably as a DBO
(requirement of other software we use).

The object itself does use other files in the system32 dir but I've
granted access to all of these files for said user. It also uses
other files in the progrm files\common\mi crosoft\vfp (I can tell this
because of FileMon) but I've given the user access to all these files
as well.

Originally I thought the problem was somewhere in admin tools --> .Net
config --> Runtime Security but I now believe it to be a Windows
Security problem.

I'm really stuck on this one so any help would be greatly appreciated
:)

Cheers,
Jarred :-)

Nov 21 '05 #2

Similar topics

1944

Calling a webservice from my ASP.NET application

by: J-T | last post by:

I 'm calling a web service using this code: MyService service = new MyService(); service.Credentials = System.Net.CredentialCache.DefaultCredentials; I was getting an "Access Denied" everytime, but it works when I use this code : MyService service = new MyService(); service.Credentials = new

ASP.NET

4101

Call to webservice doesn't pass in credentials

by: elora_c | last post by:

I'm making a call to a webservice from my ASP.NET page. The web application has anonymous access turned off and Integrated Windows auth turned on. The web.config has <identity impersonate=true>. I set the credentials of the web service proxy to the DefaultCredentials. Right before I make the call, I print out the WindowsIdentity, and it is showing the right identity. So I know the web application is authenticating properly. However,...

ASP.NET

1054

Securing a webservice on a app-by-app basis?

by: Dave | last post by:

Hi, 1.) We have a central database of shared values that is maintained by an asp.net app. Only a few admins have access to the maintenance forms for this data which is secured by a simple web.config in forms folder for now. 2.) This application also exposes some webservices that allows client applications to consume the data that is maintained within it. How can I restrict which of our intranet applications consume the

.NET Framework

1122

How to make a Webservice accessing SQLServer using Integrated secu

by: HÃ¥kan Lundgren | last post by:

Hi! I'm trying to develop a WS that access a SQLServer2000. The WS shall use Integrated Security to access the database. The user of the WS is anonymous. I want THE WS to run as a specific user. Can anobody help me? I'm using .Net Framework 1.1 /Thanks

.NET Framework

1306

webservice call to Sql server sitting on a different machine fail

by: sameer | last post by:

Environment: OS of sql server 2000 server: windows 2003 standard server , .NEt framework 1.1 , sql server does not have any service pack, machine has the latest Windows service pack. Personal firewall is not enabled on this machine. All machine are within the same network. All i am dong is trying to open a connection from a .Net webservice (using ADO.NET which uses a connection string comming from web.config file) which is sitting on...

.NET Framework

2243

Help on deploying webservice

by: adi | last post by:

Hi I only have this situation at one of my client's site. I install the webservice setup prog. Usually, i may access the asmx file from an IE browser. Not this time. My webservice uses .NET Framework 1.1 The machine is an Windows Server 2003 Standard Edition. The IIS and WWW service is up & running; also run "aspnet_regiis -i" command to make sure IIS is registered with dotnet.

C# / C Sharp

1169

Autoupdating webservice

by: nano2k | last post by:

Hi I need to automatically update a webservice that is already deployed. That is, when I release a new version of webservice, I want the webservice to automatically update itself. To accomplish that, I use a webmethod to transfer a zipped file containing all the files needed (binary files + some xml files, etc). After the transfer is done, I try to launch a new process (console application) that will actually copy the files inside the...

.NET Framework

1202

VB.NET Calling Asynchronous Webservice

by: cataztrophe | last post by:

I have an ASP.NET/VB.NET program. There is a webservice does processing in a separate project which does not return any values. The webservice is executed upon clicking the run button on a certain page, however I would like the webservice to be executed in the background while the next line of code is processed on the client in concurently. I had seen the solution for a similar post that utilized the: <WebMethod(),...

.NET Framework

1654

Can not access remote files from WebService

by: Orit | last post by:

My solution has ASP.NET app , .NET dll and a Web Service . The ASP.NET application calls to WebService’s methods , which calls the dll’s methods . One of the functions of the dll is accessing files , which are located on different computer. The path is UNC path and it exists . It has the following code : If My.Computer.FileSystem.FileExists(Path) Then ‘ read the image End if

.NET Framework

9699

What is ONU?

by: marktang | last post by:

ONU (Optical Network Unit) is one of the key components for providing high-speed Internet services. Its primary function is to act as an endpoint device located at the user's premises. However, people are often confused as to whether an ONU can Work As a Router. In this blog post, we’ll explore What is ONU, What Is Router, ONU & Router’s main usage, and What is the difference between ONU and Router. Let’s take a closer look ! Part I. Meaning of...

General

10542

Problem With Comparison Operator <=> in G++

by: Oralloy | last post by:

Hello folks, I am unable to find appropriate documentation on the type promotion of bit-fields when using the generalised comparison operator "<=>". The problem is that using the GNU compilers, it seems that the internal comparison operator "<=>" tries to promote arguments from unsigned to signed. This is as boiled down as I can make it. Here is my compilation command: g++-12 -std=c++20 -Wnarrowing bit_field.cpp Here is the code in...

C / C++

10309

Maximizing Business Potential: The Nexus of Website Design and Digital Marketing

by: jinu1996 | last post by:

In today's digital age, having a compelling online presence is paramount for businesses aiming to thrive in a competitive landscape. At the heart of this digital strategy lies an intricately woven tapestry of website design and digital marketing. It's not merely about having a website; it's about crafting an immersive digital experience that captivates audiences and drives business growth. The Art of Business Website Design Your website is...

Online Marketing

10289

The easy way to turn off automatic updates for Windows 10/11

by: Hystou | last post by:

Overview: Windows 11 and 10 have less user interface control over operating system update behaviour than previous versions of Windows. In Windows 11 and 10, there is no way to turn off the Windows Update option using the Control Panel or Settings app; it automatically checks for updates and installs any it finds, whether you like it or not. For most users, this new feature is actually very convenient. If you want to control the update process,...

Windows Server

10068

Discussion: How does Zigbee compare with other wireless protocols in smart home applications?

by: tracyyun | last post by:

Dear forum friends, With the development of smart home technology, a variety of wireless communication protocols have appeared on the market, such as Zigbee, Z-Wave, Wi-Fi, Bluetooth, etc. Each protocol has its own unique characteristics and advantages, but as a user who is planning to build a smart home system, I am a bit confused by the choice of these technologies. I'm particularly interested in Zigbee because I've heard it does some...

General

7600

Access Europe - Using VBA to create a class based on a table - Wed 1 May

by: isladogs | last post by:

The next Access Europe User Group meeting will be on Wednesday 1 May 2024 starting at 18:00 UK time (6PM UTC+1) and finishing by 19:30 (7.30PM). In this session, we are pleased to welcome a new presenter, Adolph Dupré who will be discussing some powerful techniques for using class modules. He will explain when you may want to use classes instead of User Defined Types (UDT). For example, to manage the data in unbound forms. Adolph will...

Microsoft Access / VBA

5496

Trying to create a lan-to-lan vpn between two differents networks

by: TSSRALBI | last post by:

Hello I'm a network technician in training and I need your help. I am currently learning how to create and manage the different types of VPNs and I have a question about LAN-to-LAN VPNs. The last exercise I practiced was to create a LAN-to-LAN VPN between two Pfsense firewalls, by using IPSEC protocols. I succeeded, with both firewalls in the same network. But I'm wondering if it's possible to do the same thing, with 2 Pfsense firewalls...

Networking - Hardware / Configuration

4274

transfer the data from one system to another through ip address

by: 6302768590 | last post by:

Hai team i want code for transfer the data from one system to another through IP address by using C# our system has to for every 5mins then we have to update the data what the data is updated we have to send another system

C# / C Sharp

2968

Comprehensive Guide to Website Development in Toronto: Expert Insights from BSMN Consultancy

by: bsmnconsultancy | last post by:

In today's digital era, a well-designed website is crucial for businesses looking to succeed. Whether you're a small business owner or a large corporation in Toronto, having a strong online presence can significantly impact your brand's success. BSMN Consultancy, a leader in Website Development in Toronto offers valuable insights into creating effective websites that not only look great but also perform exceptionally well. In this comprehensive...

General