I login to my website using Windows authentication, but index server
doesn't return the files from the secure folder in the results.  If I
query the catalog from the MMC, the files show up, so I know they are
indexed, and everything (index, web, and files) is on one server.

The secure folder has me, system, and admin account with full control.

What am I doing wrong?


Thanks for the help

[ Post a follow-up to this message ]

The account your users authenticate with on your web server needs read
access to these files as well.

--
Hilary Cotter
Director of Text Mining and Database Strategy
RelevantNOISE.Com - Dedicated to mining blogs for business intelligence.

This posting is my own and doesn't necessarily represent RelevantNoise's
positions, strategies or opinions.

Looking for a SQL Server replication book?
http://www.nwsu.com/0974973602.html

Looking for a FAQ on Indexing Services/SQL FTS
http://www.indexserverfaq.com



"HB" <no@no.com> wrote in message
news:uU0Xg7KSGHA.4264@TK2MSFTNGP11.phx.gbl...
>I login to my website using Windows authentication, but index server
>doesn't return the files from the secure folder in the results.  If I query
>the catalog from the MMC, the files show up, so I know they are indexed,
>and everything (index, web, and files) is on one server.
>
> The secure folder has me, system, and admin account with full control.
>
> What am I doing wrong?
>
>
> Thanks for the help

[ Post a follow-up to this message ]

Basically index server never shows you results (files) which you're not
allowed to see. Makes sense, it would be big security hole to see (some)
content of files which you have no access rights for.

Mirek

"Hilary Cotter" <hilary.cotter@gmail.com> wrote in message
news:untqXZPSGHA.5808@TK2MSFTNGP12.phx.gbl...
> The account your users authenticate with on your web server needs read
> access to these files as well.
>
> --
> Hilary Cotter
> Director of Text Mining and Database Strategy
> RelevantNOISE.Com - Dedicated to mining blogs for business intelligence.
>
> This posting is my own and doesn't necessarily represent RelevantNoise's
> positions, strategies or opinions.
>
> Looking for a SQL Server replication book?
> http://www.nwsu.com/0974973602.html
>
> Looking for a FAQ on Indexing Services/SQL FTS
> http://www.indexserverfaq.com
>
>
>
> "HB" <no@no.com> wrote in message
> news:uU0Xg7KSGHA.4264@TK2MSFTNGP11.phx.gbl... 
>
>

[ Post a follow-up to this message ]

I login with my account and my account has full rights to the folder and
index server doesn't show results.  If I use my account I can access the
file via a link or directly via url but index server still doesn't show
the result.  Logging in as someone else does not allow access to the
file via link, url, or by index.  So permissions are correct on the
server.  Do I have to do something in the metabase?  Any other ideas?

Hilary Cotter wrote:
> The account your users authenticate with on your web server needs read
> access to these files as well.
>

[ Post a follow-up to this message ]

I agree, but I have rights to see the file so index server should return
the results.

Miroslav Pragl wrote:
> Basically index server never shows you results (files) which you're not
> allowed to see. Makes sense, it would be big security hole to see (some)
> content of files which you have no access rights for.
>
> Mirek
>
> "Hilary Cotter" <hilary.cotter@gmail.com> wrote in message
> news:untqXZPSGHA.5808@TK2MSFTNGP12.phx.gbl... 
>

[ Post a follow-up to this message ]

add <% =request.servervariables("LOGON_USER") %> somewhere to the beginning
of your asp page to check "who-the-heck-am-i" 

MP

"HB" <no@no.com> wrote in message
news:%23didwiQSGHA.5908@TK2MSFTNGP14.phx.gbl...[vbcol=seagreen]
>I login with my account and my account has full rights to the folder and
>index server doesn't show results.  If I use my account I can access the
>file via a link or directly via url but index server still doesn't show the
>result.  Logging in as someone else does not allow access to the file via
>link, url, or by index.  So permissions are correct on the server.  Do I
>have to do something in the metabase?  Any other ideas?
>
> Hilary Cotter wrote: 

[ Post a follow-up to this message ]

sure. just please make sure it's YOU who's querying the catalogue as
suggested (using request.servervariables("LOGON_USER") ), not default
IUSR_... restricted default user in behalf!

Mirek


"HB" <no@noemail.com> wrote in message
news:%23DjMyTUSGHA.4600@TK2MSFTNGP11.phx.gbl...
>I agree, but I have rights to see the file so index server should return
>the results.

[ Post a follow-up to this message ]

<% =request.servervariables("LOGON_USER") %> produces my login id  and
my login id has full permissions to the secure folder.  Index server
will not show me the files in that secure folder.

Miroslav Pragl wrote:
> add <% =request.servervariables("LOGON_USER") %> somewhere to the beginnin
g
> of your asp page to check "who-the-heck-am-i" 
>
> MP
>
> "HB" <no@no.com> wrote in message
> news:%23didwiQSGHA.5908@TK2MSFTNGP14.phx.gbl... 
>
>

[ Post a follow-up to this message ]