|
Home > Archive > IIS Server Security > May 2005 > IIS6 ASP Crystal DLL
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
IIS6 ASP Crystal DLL
|
|
| Sunil DHURVE 2005-05-02, 2:47 am |
| Hello, i am having a ASP application which uses crystal designer runtime
library to display crystal reports. it works perfectly fine with IIS5 under
dllhost.exe architecture as the IIS6 has got a worker processor model it IIS6
doesnt allow the crystal DLL to export the report to a directory, it creates
teh file but the file is of 0KB and it is locked so i think somehow i have to
let IIS6 know that let crystal dll export the report.
do you know where can i set this option or configuration please let me konw
thanks in advance
| |
| David Wang [Msft] 2005-05-03, 5:55 pm |
| You will need to obtain support for the Crystal designer runtime library as
to whether it supports IIS6 and if so, with what configuration.
If you are seeing a file of 0KB show up, it looks like an issue totally
withoun Crystal designer runtime library because IIS6 cannot prevent a
report from being exported. The fact that the 0kb file exists shows that the
user identity used by Crystal designer runtime allows the file to be written
to that directory -- why Crystal designer does not write the full report to
the file -- that is a question to ask of Crystal designer runtime support
team.
--
//David
IIS
http://blogs.msdn.com/David.Wang
This posting is provided "AS IS" with no warranties, and confers no rights.
//
"Sunil DHURVE" <Sunil DHURVE@discussions.microsoft.com> wrote in message
news:FD2AA17B-440F-4BE6-8BF7-C91A49D46FDA@microsoft.com...
Hello, i am having a ASP application which uses crystal designer runtime
library to display crystal reports. it works perfectly fine with IIS5 under
dllhost.exe architecture as the IIS6 has got a worker processor model it
IIS6
doesnt allow the crystal DLL to export the report to a directory, it creates
teh file but the file is of 0KB and it is locked so i think somehow i have
to
let IIS6 know that let crystal dll export the report.
do you know where can i set this option or configuration please let me konw
thanks in advance
| |
| Sunil DHURVE 2005-05-03, 8:48 pm |
| Hello David
Thanks for your reply,
you know what I already asked them and they say use Crystal Report 9 or 10
and I tried both of them but it still just creates the 0KB file and doesnt go
ahead!
when I use IIS5 everything works fine, David, I am thinking there should be
some way in IIS6 to tell him that please let this DLL export the report
because of tightened security.
I checked all the permission and IWPG_ user all the required permission,
IIS6 is able to write to text file using FSO because it is its own DLL, while
Crystal Designer Library is not by IIS6 so I am thinkikng more towards
solving it from IIS point of view.
Please let me know how can I use external DLL in IIS6 say for example the
DLL created in VB6.
Regards and many thanks!
Sunil
"David Wang [Msft]" wrote:
> You will need to obtain support for the Crystal designer runtime library as
> to whether it supports IIS6 and if so, with what configuration.
>
> If you are seeing a file of 0KB show up, it looks like an issue totally
> withoun Crystal designer runtime library because IIS6 cannot prevent a
> report from being exported. The fact that the 0kb file exists shows that the
> user identity used by Crystal designer runtime allows the file to be written
> to that directory -- why Crystal designer does not write the full report to
> the file -- that is a question to ask of Crystal designer runtime support
> team.
>
> --
> //David
> IIS
> http://blogs.msdn.com/David.Wang
> This posting is provided "AS IS" with no warranties, and confers no rights.
> //
> "Sunil DHURVE" <Sunil DHURVE@discussions.microsoft.com> wrote in message
> news:FD2AA17B-440F-4BE6-8BF7-C91A49D46FDA@microsoft.com...
> Hello, i am having a ASP application which uses crystal designer runtime
> library to display crystal reports. it works perfectly fine with IIS5 under
> dllhost.exe architecture as the IIS6 has got a worker processor model it
> IIS6
> doesnt allow the crystal DLL to export the report to a directory, it creates
> teh file but the file is of 0KB and it is locked so i think somehow i have
> to
> let IIS6 know that let crystal dll export the report.
> do you know where can i set this option or configuration please let me konw
> thanks in advance
>
>
>
| |
| David Wang [Msft] 2005-05-04, 6:01 pm |
| Sorry, but I think that you need to ask support staff for Crystal Report:
1. Whether they support running on IIS6
2. If yes to #1, what configuration is necessary
If you follow their steps and it does not work, then they need to show there
is an IIS6 bug for it to be an IIS6 issue. Otherwise, it is simply
misconfiguration of their own product -- and they are responsible for that.
IIS6 has no such lockdown that you are imagining. Neither the Crystal Report
DLL, nor FSO, nor your VB6 DLL are considered "part of IIS6" and given
special treatment to write to the filesystem - they are all considered COM
objects. If you configure them all to load in the same application and one
can write to the filesystem, then they can all write to the filesystem.
Bottom line: I think you are doing a whole bunch of work that Crystal
Designer support team is supposed to handle for you, and I do not see an IIS
issue here at all. Crystal Designer is obligated to make this work for you
or prove it is an IIS6 bug.
--
//David
IIS
http://blogs.msdn.com/David.Wang
This posting is provided "AS IS" with no warranties, and confers no rights.
//
"Sunil DHURVE" <Sunil DHURVE@discussions.microsoft.com> wrote in message
news:DFA20032-F753-460B-8202-AED20366B39D@microsoft.com...
Hello David
Thanks for your reply,
you know what I already asked them and they say use Crystal Report 9 or 10
and I tried both of them but it still just creates the 0KB file and doesnt
go
ahead!
when I use IIS5 everything works fine, David, I am thinking there should be
some way in IIS6 to tell him that please let this DLL export the report
because of tightened security.
I checked all the permission and IWPG_ user all the required permission,
IIS6 is able to write to text file using FSO because it is its own DLL,
while
Crystal Designer Library is not by IIS6 so I am thinkikng more towards
solving it from IIS point of view.
Please let me know how can I use external DLL in IIS6 say for example the
DLL created in VB6.
Regards and many thanks!
Sunil
"David Wang [Msft]" wrote:
> You will need to obtain support for the Crystal designer runtime library
as
> to whether it supports IIS6 and if so, with what configuration.
>
> If you are seeing a file of 0KB show up, it looks like an issue totally
> withoun Crystal designer runtime library because IIS6 cannot prevent a
> report from being exported. The fact that the 0kb file exists shows that
the
> user identity used by Crystal designer runtime allows the file to be
written
> to that directory -- why Crystal designer does not write the full report
to
> the file -- that is a question to ask of Crystal designer runtime support
> team.
>
> --
> //David
> IIS
> http://blogs.msdn.com/David.Wang
> This posting is provided "AS IS" with no warranties, and confers no
rights.
> //
> "Sunil DHURVE" <Sunil DHURVE@discussions.microsoft.com> wrote in message
> news:FD2AA17B-440F-4BE6-8BF7-C91A49D46FDA@microsoft.com...
> Hello, i am having a ASP application which uses crystal designer runtime
> library to display crystal reports. it works perfectly fine with IIS5
under
> dllhost.exe architecture as the IIS6 has got a worker processor model it
> IIS6
> doesnt allow the crystal DLL to export the report to a directory, it
creates
> teh file but the file is of 0KB and it is locked so i think somehow i have
> to
> let IIS6 know that let crystal dll export the report.
> do you know where can i set this option or configuration please let me
konw
> thanks in advance
>
>
>
| |
| Sunil DHURVE 2005-05-05, 2:47 am |
| Hello David,
thanks for your response,
Ok I tell you something when crystal exports the report it writes some temp
files into c:\windows\temp which it is doing successfully in IIS6 with IIS5
isolation mode,
when I turn on the IIS6 worker model, it somehow doesnt have permission to
write the temp files into the c:\windows\temp folder, do you know how can I
set the permission for the w3wp.exe process so that it can write temp files
into c:\windows\temp.
thanks for all your help!
regards
sunil
"David Wang [Msft]" wrote:
> Sorry, but I think that you need to ask support staff for Crystal Report:
> 1. Whether they support running on IIS6
> 2. If yes to #1, what configuration is necessary
>
> If you follow their steps and it does not work, then they need to show there
> is an IIS6 bug for it to be an IIS6 issue. Otherwise, it is simply
> misconfiguration of their own product -- and they are responsible for that.
>
>
> IIS6 has no such lockdown that you are imagining. Neither the Crystal Report
> DLL, nor FSO, nor your VB6 DLL are considered "part of IIS6" and given
> special treatment to write to the filesystem - they are all considered COM
> objects. If you configure them all to load in the same application and one
> can write to the filesystem, then they can all write to the filesystem.
>
> Bottom line: I think you are doing a whole bunch of work that Crystal
> Designer support team is supposed to handle for you, and I do not see an IIS
> issue here at all. Crystal Designer is obligated to make this work for you
> or prove it is an IIS6 bug.
>
> --
> //David
> IIS
> http://blogs.msdn.com/David.Wang
> This posting is provided "AS IS" with no warranties, and confers no rights.
> //
> "Sunil DHURVE" <Sunil DHURVE@discussions.microsoft.com> wrote in message
> news:DFA20032-F753-460B-8202-AED20366B39D@microsoft.com...
> Hello David
> Thanks for your reply,
> you know what I already asked them and they say use Crystal Report 9 or 10
> and I tried both of them but it still just creates the 0KB file and doesnt
> go
> ahead!
> when I use IIS5 everything works fine, David, I am thinking there should be
> some way in IIS6 to tell him that please let this DLL export the report
> because of tightened security.
> I checked all the permission and IWPG_ user all the required permission,
> IIS6 is able to write to text file using FSO because it is its own DLL,
> while
> Crystal Designer Library is not by IIS6 so I am thinkikng more towards
> solving it from IIS point of view.
> Please let me know how can I use external DLL in IIS6 say for example the
> DLL created in VB6.
> Regards and many thanks!
> Sunil
> "David Wang [Msft]" wrote:
>
> as
> the
> written
> to
> rights.
> under
> creates
> konw
>
>
>
| |
| David Wang [Msft] 2005-05-05, 6:03 pm |
| No, that's a bug in Crystal reports because it assumes it is running with a
user credential that can write to that folder. Crystal support should be
able to tell you which user identity it is using to do that work.
Your basic choices are:
1. Change ACL on the temp directory to allow access to the user account
Crystal runs with
2. Change process identity to have write access to the temp directory
3. Change Crystal to use a user identity that has write access to the temp
directory
None of the choices should be made by you. Crystal reports needs to tell you
what is the supported and secure way to configure for their software's
needs. My guess is that #1 should be preferred. #2 is a very poor choice,
and #3 potentially requires new code from Crystal to handle.
--
//David
IIS
http://blogs.msdn.com/David.Wang
This posting is provided "AS IS" with no warranties, and confers no rights.
//
"Sunil DHURVE" <SunilDHURVE@discussions.microsoft.com> wrote in message
news:87A1A994-F59F-4889-BD0C-320E90793663@microsoft.com...
Hello David,
thanks for your response,
Ok I tell you something when crystal exports the report it writes some temp
files into c:\windows\temp which it is doing successfully in IIS6 with IIS5
isolation mode,
when I turn on the IIS6 worker model, it somehow doesnt have permission to
write the temp files into the c:\windows\temp folder, do you know how can I
set the permission for the w3wp.exe process so that it can write temp files
into c:\windows\temp.
thanks for all your help!
regards
sunil
"David Wang [Msft]" wrote:
> Sorry, but I think that you need to ask support staff for Crystal Report:
> 1. Whether they support running on IIS6
> 2. If yes to #1, what configuration is necessary
>
> If you follow their steps and it does not work, then they need to show
there
> is an IIS6 bug for it to be an IIS6 issue. Otherwise, it is simply
> misconfiguration of their own product -- and they are responsible for
that.
>
>
> IIS6 has no such lockdown that you are imagining. Neither the Crystal
Report
> DLL, nor FSO, nor your VB6 DLL are considered "part of IIS6" and given
> special treatment to write to the filesystem - they are all considered COM
> objects. If you configure them all to load in the same application and one
> can write to the filesystem, then they can all write to the filesystem.
>
> Bottom line: I think you are doing a whole bunch of work that Crystal
> Designer support team is supposed to handle for you, and I do not see an
IIS
> issue here at all. Crystal Designer is obligated to make this work for you
> or prove it is an IIS6 bug.
>
> --
> //David
> IIS
> http://blogs.msdn.com/David.Wang
> This posting is provided "AS IS" with no warranties, and confers no
rights.
> //
> "Sunil DHURVE" <Sunil DHURVE@discussions.microsoft.com> wrote in message
> news:DFA20032-F753-460B-8202-AED20366B39D@microsoft.com...
> Hello David
> Thanks for your reply,
> you know what I already asked them and they say use Crystal Report 9 or 10
> and I tried both of them but it still just creates the 0KB file and doesnt
> go
> ahead!
> when I use IIS5 everything works fine, David, I am thinking there should
be
> some way in IIS6 to tell him that please let this DLL export the report
> because of tightened security.
> I checked all the permission and IWPG_ user all the required permission,
> IIS6 is able to write to text file using FSO because it is its own DLL,
> while
> Crystal Designer Library is not by IIS6 so I am thinkikng more towards
> solving it from IIS point of view.
> Please let me know how can I use external DLL in IIS6 say for example the
> DLL created in VB6.
> Regards and many thanks!
> Sunil
> "David Wang [Msft]" wrote:
>
> as
> the
> written
> to
support[vbcol=seagreen]
> rights.
> under
> creates
have[vbcol=seagreen]
> konw
>
>
>
| |
| Sunil DHURVE 2005-05-05, 6:03 pm |
| hello david,
thanks for all your support,
I hope I can get some answer from bloody Crystal people.
once again thanks and talk to you later
sunil
"David Wang [Msft]" wrote:
> No, that's a bug in Crystal reports because it assumes it is running with a
> user credential that can write to that folder. Crystal support should be
> able to tell you which user identity it is using to do that work.
>
> Your basic choices are:
> 1. Change ACL on the temp directory to allow access to the user account
> Crystal runs with
> 2. Change process identity to have write access to the temp directory
> 3. Change Crystal to use a user identity that has write access to the temp
> directory
>
> None of the choices should be made by you. Crystal reports needs to tell you
> what is the supported and secure way to configure for their software's
> needs. My guess is that #1 should be preferred. #2 is a very poor choice,
> and #3 potentially requires new code from Crystal to handle.
>
> --
> //David
> IIS
> http://blogs.msdn.com/David.Wang
> This posting is provided "AS IS" with no warranties, and confers no rights.
> //
> "Sunil DHURVE" <SunilDHURVE@discussions.microsoft.com> wrote in message
> news:87A1A994-F59F-4889-BD0C-320E90793663@microsoft.com...
> Hello David,
> thanks for your response,
> Ok I tell you something when crystal exports the report it writes some temp
> files into c:\windows\temp which it is doing successfully in IIS6 with IIS5
> isolation mode,
> when I turn on the IIS6 worker model, it somehow doesnt have permission to
> write the temp files into the c:\windows\temp folder, do you know how can I
> set the permission for the w3wp.exe process so that it can write temp files
> into c:\windows\temp.
> thanks for all your help!
> regards
> sunil
>
> "David Wang [Msft]" wrote:
>
> there
> that.
> Report
> IIS
> rights.
> be
> support
> have
>
>
>
| |
| MPadovani 2005-05-14, 1:22 pm |
| I've run into a similar situation a couple of times. In both cases the
solution was to unregister one of the Crystal DLLs and then reregister
it by using Component Services/COM+ Applications (instead of regsvr32),
specifying that it should run in the context of a user who has more
rights. The DLL that needs to be reregistered is either craxddrt or
craxdrt.
Sunil DHURVE wrote:[vbcol=seagreen]
> hello david,
> thanks for all your support,
> I hope I can get some answer from bloody Crystal people.
> once again thanks and talk to you later
> sunil
>
> "David Wang [Msft]" wrote:
>
running with a[vbcol=seagreen]
should be[vbcol=seagreen]
account[vbcol=seagreen]
directory[vbcol=seagreen]
the temp[vbcol=seagreen]
tell you[vbcol=seagreen]
software's[vbcol=seagreen]
choice,[vbcol=seagreen]
rights.[vbcol=seagreen]
message[vbcol=seagreen]
some temp[vbcol=seagreen]
with IIS5[vbcol=seagreen]
permission to[vbcol=seagreen]
how can I[vbcol=seagreen]
temp files[vbcol=seagreen]
Report:[vbcol=seagreen]
show[vbcol=seagreen]
simply[vbcol=seagreen]
for[vbcol=seagreen]
Crystal[vbcol=seagreen]
given[vbcol=seagreen]
considered COM[vbcol=seagreen]
application and one[vbcol=seagreen]
filesystem.[vbcol=seagreen]
Crystal[vbcol=seagreen]
see an[vbcol=seagreen]
work for you[vbcol=seagreen]
no[vbcol=seagreen]
message[vbcol=seagreen]
Report 9 or 10[vbcol=seagreen]
and doesnt[vbcol=seagreen]
should[vbcol=seagreen]
report[vbcol=seagreen]
permission,[vbcol=seagreen]
own DLL,[vbcol=seagreen]
towards[vbcol=seagreen]
example the[vbcol=seagreen]
runtime library[vbcol=seagreen]
totally[vbcol=seagreen]
prevent a[vbcol=seagreen]
shows that[vbcol=seagreen]
to be[vbcol=seagreen]
full report[vbcol=seagreen]
runtime[vbcol=seagreen]
confers no[vbcol=seagreen]
in message[vbcol=seagreen]
designer runtime[vbcol=seagreen]
with IIS5[vbcol=seagreen]
model it[vbcol=seagreen]
directory, it[vbcol=seagreen]
somehow i[vbcol=seagreen]
let me[vbcol=seagreen]
|
|
|
|
|