IIS Server Security - pb with application pools

This is Interesting: Free IT Magazines  
Home > Archive > IIS Server Security > September 2006 > pb with application pools





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author pb with application pools
Eric bouxirot

2006-09-28, 1:20 pm

hi,

i have created a simple webservice (Helloworld example from VS2005)
i have put this webservice on my server and i setup a virtual directory
on IIS 6 (i have SBS 2003)
i have set a new application pool for this vistual server, with
standard identity (Network service)
i have disabled anonymous connections.

all work good, from my browser, i have access to the webservice, from
my final application, i have access too. (i need to autenticate, but
it's normal because anonymous connection are disabled)

but, if i create a new user, set in IIS_WPG group, and i use this user
in the identity of my application pool...
from my browser, if i autenticate only with username (without
specifying the domain) and password of an user (even if it's an
administrator)
then i get correct access..
but if it set the username with domain (like DOMAIN\User or
User@domain)
then i get access denied..

if i try with my final application, then i always get access denied...

what i do wrong ??

thank for your help !


Roger Abell [MVP]

2006-09-30, 1:44 am

Well, you ask what you did wrong, but you really did not say
what you expected to happen when. If domain users have not
be granted access to the machine or the web interface, then what
you see would be normal.

"Eric bouxirot" <rickou@rickou.net> wrote in message
news:mn.e3db7d694d64b815.56407@rickou.net...
> hi,
>
> i have created a simple webservice (Helloworld example from VS2005)
> i have put this webservice on my server and i setup a virtual directory on
> IIS 6 (i have SBS 2003)
> i have set a new application pool for this vistual server, with standard
> identity (Network service)
> i have disabled anonymous connections.
>
> all work good, from my browser, i have access to the webservice, from my
> final application, i have access too. (i need to autenticate, but it's
> normal because anonymous connection are disabled)
>
> but, if i create a new user, set in IIS_WPG group, and i use this user in
> the identity of my application pool...
> from my browser, if i autenticate only with username (without specifying
> the domain) and password of an user (even if it's an administrator)
> then i get correct access..
> but if it set the username with domain (like DOMAIN\User or User@domain)
> then i get access denied..
>
> if i try with my final application, then i always get access denied...
>
> what i do wrong ??
>
> thank for your help !
>
>



Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com