IIS Server Security - IUSR permissions and sockets

This is Interesting: Free IT Magazines  
Home > Archive > IIS Server Security > April 2004 > IUSR permissions and sockets





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author IUSR permissions and sockets
Felipe

2004-04-23, 11:34 am

Hello,

Does anyone know what permissions the IUSR account needs to open UDP
and TCP sockets? I have an application that runs fine when IIS
executes as me (administrator-level), but obviously I need things to
be more secure than that. When I switch to the IUSR account, my
application logs tell me that the error comes with trying to open a
UDP connection with another server.

I'm using IIS6 on Win2k3. Any help is much appreciated. Thanks!
Ken Schaefer

2004-04-23, 11:34 am

What is the EventID, Event Source and Description? How are you attempting to
open the socket?

Cheers
Ken

"Felipe" <fgasper@uiuc.edu> wrote in message
news:b096cfe0.0404230645.182643a@posting.google.com...
: Hello,
:
: Does anyone know what permissions the IUSR account needs to open UDP
: and TCP sockets? I have an application that runs fine when IIS
: executes as me (administrator-level), but obviously I need things to
: be more secure than that. When I switch to the IUSR account, my
: application logs tell me that the error comes with trying to open a
: UDP connection with another server.
:
: I'm using IIS6 on Win2k3. Any help is much appreciated. Thanks!


Felipe

2004-04-23, 12:34 pm

It's a PERL CGI script that uses the socket() function. I'm not sure how
to find Event ID etc....

It fails with "Can't create TCP/IP socket (5)". I believe the error
number corresponds with a plain ol' permissions problem, but I can't
find where it would be.

*** Sent via Developersdex http://www.codecomments.com ***
Don't just participate in USENET...get rewarded for it!
Ken Schaefer

2004-04-23, 11:34 pm

Hi,

Where are you seeing this error? In your browser?

Before you mentioned an application log - there is an application log that
is part of the Windows Event Log, which is why I asked for EventID, etc. You
may be talking about some other event log.

Cheers
Ken

"Felipe" <fgasREMOVE-THIS-TEXTper@uiuc.edu> wrote in message
news:exQ3D1UKEHA.2380@TK2MSFTNGP09.phx.gbl...
: It's a PERL CGI script that uses the socket() function. I'm not sure how
: to find Event ID etc....
:
: It fails with "Can't create TCP/IP socket (5)". I believe the error
: number corresponds with a plain ol' permissions problem, but I can't
: find where it would be.
:
: *** Sent via Developersdex http://www.codecomments.com ***
: Don't just participate in USENET...get rewarded for it!


Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com