IIS
 
Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
User Name:
Password:
Remember me

The Shed is going Social! Join us on FaceBook and Twitter and chime in on the conversation.

Go Back   Dev Shed ForumsSystem AdministrationIIS

Reply
Add This Thread To:
  Del.icio.us   Digg   Google   Spurl   Blink   Furl   Simpy   Y! MyWeb 
Thread Tools Search this Thread Rate Thread Display Modes
 
Unread Dev Shed Forums Sponsor:
  #1  
Old March 8th, 2012, 09:02 AM
dsvick dsvick is offline
Registered User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Mar 2012
Posts: 2 dsvick User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: 2 m 46 sec
Reputation Power: 0
Basic auth and object permissions

I've got an issue and it is one of those where I'm not even sure how to ask the question.

We have a web site the uses basic authentication through IIS 7 (Windows 2007 server SP2) and everything works fine except for a com object. The object is "easyPDF.PDFProcessor.7" in case anyone knows of it.

The problem is that when I authenticate using regular user credentials this object throws an error 2147155963 and fails with the message "unable to open output file". I'm sure the message and error are specific to the object but it points to a permissions issue.

However, if I login using my admin credentials there is no problem and the process runs perfectly. I can't even seem to phrase a search correctly to find out how the login credentials affect the permissions of the object.

I have the directory in question set so that "everyone", "authenticated users", the user created for the object itself (which is also in the admin group), "users", and "IIS_IUSRS" all have full control.

I really have no idea what to even look at from here. IF anyone can shed any light on it or point me in the right direction I'd appreciate it.

thanks

Dave

Reply With Quote
  #2  
Old March 8th, 2012, 09:06 PM
Doug G Doug G is offline
Grumpier Old Moderator
Dev Shed God 19th Plane (14000 - 14499 posts)
 
Join Date: Jun 2003
Posts: 14,239 Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level) 
Time spent in forums: 1 Month 4 Weeks 15 h 20 m 7 sec
Reputation Power: 4445
IIS should be using your pdf object as either the anonymous IIS user, or if before calling the object your user authenticated to IIS, then IIS should use that authenticated user account.

Two more possible permissions gotcha's: My first try would be to make sure the IIS user account(s) have write permissions on the windows %TEMP% directory. It seems likely that a pdf creator would need to write temp files.

Another unlikely culprit could be some missing permissions inside the system registry pertaining to the pdf object.
__________________
======
Doug G
======
It is a truism of American politics that no man who can win an election deserves to. --Trevanian, from the novel Shibumi

Reply With Quote
  #3  
Old March 9th, 2012, 09:39 AM
dsvick dsvick is offline
Registered User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Mar 2012
Posts: 2 dsvick User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: 2 m 46 sec
Reputation Power: 0
temp directory did it

Quote:
Originally Posted by Doug G
...

Two more possible permissions gotcha's: My first try would be to make sure the IIS user account(s) have write permissions on the windows %TEMP% directory. It seems likely that a pdf creator would need to write temp files.


It was the temp directory!! I thought I'd checked it previously, but it might have been my user temp, either way, I added authenticated users to it and it works!

Thanks Doug!!

Reply With Quote
  #4  
Old March 9th, 2012, 06:01 PM
Doug G Doug G is offline
Grumpier Old Moderator
Dev Shed God 19th Plane (14000 - 14499 posts)
 
Join Date: Jun 2003
Posts: 14,239 Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level)Doug G User rank is General 52nd Grade (Above 100000 Reputation Level) 
Time spent in forums: 1 Month 4 Weeks 15 h 20 m 7 sec
Reputation Power: 4445
I'm glad you got it going ..

Reply With Quote
Reply

Viewing: Dev Shed ForumsSystem AdministrationIIS > Basic auth and object permissions

Developer Shed Advertisers and Affiliates



Thread Tools  Search this Thread 
Search this Thread:

Advanced Search
Display Modes  Rate This Thread 
Rate This Thread:


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
View Your Warnings | New Posts | Latest News | Latest Threads | Shoutbox
Forum Jump

Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
  
 


Powered by: vBulletin Version 3.0.5
Copyright ©2000 - 2013, Jelsoft Enterprises Ltd.

© 2003-2013 by Developer Shed. All rights reserved. DS Cluster - Follow our Sitemap