IIS Server Security - Opening VSS database from ASP

This is Interesting: Free IT Magazines  
Home > Archive > IIS Server Security > October 2004 > Opening VSS database from ASP





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author Opening VSS database from ASP
vs0562

2004-10-20, 5:50 pm

We have 2 VSS databases. First is located on the same server as IIS and
second is on another machine. While I can open the first one from the ASP
using the following script:
oVSSDb.Open <srcinipath>, <UID>, <password>
trying the same thing on the second throws the following error:

Error Type:
SourceSafe (0x8004D117)
The SourceSafe database path <UID> does not exist. Please select another
database.

The request uses NTLM authentication.
There is no restrictions on the target VSS database directory (everyone.)

Does anybody now what might be the problem and how to deal with it?

Thanks,
VS
Ken Schaefer

2004-10-21, 2:47 am

You are running into a double-hop authentication issue.

The token IIS has does not have permission to access network resources. You
will need to use Kerberos + Delegation -or- use Basic Authentication (which
allows a different type of logon: Network Cleartext IIRC) + SSL

Cheers
Ken

"vs0562" <vs0562@discussions.microsoft.com> wrote in message
news:6A8F6867-E44F-4B89-96D8-E618B3095768@microsoft.com...
> We have 2 VSS databases. First is located on the same server as IIS and
> second is on another machine. While I can open the first one from the ASP
> using the following script:
> oVSSDb.Open <srcinipath>, <UID>, <password>
> trying the same thing on the second throws the following error:
>
> Error Type:
> SourceSafe (0x8004D117)
> The SourceSafe database path <UID> does not exist. Please select another
> database.
>
> The request uses NTLM authentication.
> There is no restrictions on the target VSS database directory (everyone.)
>
> Does anybody now what might be the problem and how to deal with it?
>
> Thanks,
> VS



vs0562

2004-10-21, 5:56 pm

Thanks a lot - the Basic Authentication solved the problem.

"Ken Schaefer" wrote:

> You are running into a double-hop authentication issue.
>
> The token IIS has does not have permission to access network resources. You
> will need to use Kerberos + Delegation -or- use Basic Authentication (which
> allows a different type of logon: Network Cleartext IIRC) + SSL
>
> Cheers
> Ken
>
> "vs0562" <vs0562@discussions.microsoft.com> wrote in message
> news:6A8F6867-E44F-4B89-96D8-E618B3095768@microsoft.com...
>
>
>

Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com