IIS Index Server - IS does not return results from secured folders.

This is Interesting: Free IT Magazines  
Home > Archive > IIS Index Server > March 2006 > IS does not return results from secured folders.





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author IS does not return results from secured folders.
HB

2006-03-16, 7:49 am

I login to my website using Windows authentication, but index server
doesn't return the files from the secure folder in the results. If I
query the catalog from the MMC, the files show up, so I know they are
indexed, and everything (index, web, and files) is on one server.

The secure folder has me, system, and admin account with full control.

What am I doing wrong?


Thanks for the help
Hilary Cotter

2006-03-16, 7:49 am

The account your users authenticate with on your web server needs read
access to these files as well.

--
Hilary Cotter
Director of Text Mining and Database Strategy
RelevantNOISE.Com - Dedicated to mining blogs for business intelligence.

This posting is my own and doesn't necessarily represent RelevantNoise's
positions, strategies or opinions.

Looking for a SQL Server replication book?
http://www.nwsu.com/0974973602.html

Looking for a FAQ on Indexing Services/SQL FTS
http://www.indexserverfaq.com



"HB" <no@no.com> wrote in message
news:uU0Xg7KSGHA.4264@TK2MSFTNGP11.phx.gbl...
>I login to my website using Windows authentication, but index server
>doesn't return the files from the secure folder in the results. If I query
>the catalog from the MMC, the files show up, so I know they are indexed,
>and everything (index, web, and files) is on one server.
>
> The secure folder has me, system, and admin account with full control.
>
> What am I doing wrong?
>
>
> Thanks for the help



Miroslav Pragl

2006-03-16, 5:52 pm

Basically index server never shows you results (files) which you're not
allowed to see. Makes sense, it would be big security hole to see (some)
content of files which you have no access rights for.

Mirek

"Hilary Cotter" <hilary.cotter@gmail.com> wrote in message
news:untqXZPSGHA.5808@TK2MSFTNGP12.phx.gbl...
> The account your users authenticate with on your web server needs read
> access to these files as well.
>
> --
> Hilary Cotter
> Director of Text Mining and Database Strategy
> RelevantNOISE.Com - Dedicated to mining blogs for business intelligence.
>
> This posting is my own and doesn't necessarily represent RelevantNoise's
> positions, strategies or opinions.
>
> Looking for a SQL Server replication book?
> http://www.nwsu.com/0974973602.html
>
> Looking for a FAQ on Indexing Services/SQL FTS
> http://www.indexserverfaq.com
>
>
>
> "HB" <no@no.com> wrote in message
> news:uU0Xg7KSGHA.4264@TK2MSFTNGP11.phx.gbl...
>
>


HB

2006-03-16, 5:52 pm

I login with my account and my account has full rights to the folder and
index server doesn't show results. If I use my account I can access the
file via a link or directly via url but index server still doesn't show
the result. Logging in as someone else does not allow access to the
file via link, url, or by index. So permissions are correct on the
server. Do I have to do something in the metabase? Any other ideas?

Hilary Cotter wrote:
> The account your users authenticate with on your web server needs read
> access to these files as well.
>

HB

2006-03-16, 5:52 pm

I agree, but I have rights to see the file so index server should return
the results.

Miroslav Pragl wrote:
> Basically index server never shows you results (files) which you're not
> allowed to see. Makes sense, it would be big security hole to see (some)
> content of files which you have no access rights for.
>
> Mirek
>
> "Hilary Cotter" <hilary.cotter@gmail.com> wrote in message
> news:untqXZPSGHA.5808@TK2MSFTNGP12.phx.gbl...
>

Miroslav Pragl

2006-03-16, 5:52 pm

add <% =request.servervariables("LOGON_USER") %> somewhere to the beginning
of your asp page to check "who-the-heck-am-i"

MP

"HB" <no@no.com> wrote in message
news:%23didwiQSGHA.5908@TK2MSFTNGP14.phx.gbl...[vbcol=seagreen]
>I login with my account and my account has full rights to the folder and
>index server doesn't show results. If I use my account I can access the
>file via a link or directly via url but index server still doesn't show the
>result. Logging in as someone else does not allow access to the file via
>link, url, or by index. So permissions are correct on the server. Do I
>have to do something in the metabase? Any other ideas?
>
> Hilary Cotter wrote:


Miroslav Pragl

2006-03-17, 5:54 pm

sure. just please make sure it's YOU who's querying the catalogue as
suggested (using request.servervariables("LOGON_USER") ), not default
IUSR_... restricted default user in behalf!

Mirek


"HB" <no@noemail.com> wrote in message
news:%23DjMyTUSGHA.4600@TK2MSFTNGP11.phx.gbl...
>I agree, but I have rights to see the file so index server should return
>the results.


HB

2006-03-19, 12:02 pm

<% =request.servervariables("LOGON_USER") %> produces my login id and
my login id has full permissions to the secure folder. Index server
will not show me the files in that secure folder.

Miroslav Pragl wrote:
> add <% =request.servervariables("LOGON_USER") %> somewhere to the beginning
> of your asp page to check "who-the-heck-am-i"
>
> MP
>
> "HB" <no@no.com> wrote in message
> news:%23didwiQSGHA.5908@TK2MSFTNGP14.phx.gbl...
>
>

Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com