identity impersonate

[Guest]

just wondering what could cause identity impersonate = true to not work on a
server? It works on my development machine but when I try it on a server
that has the framework installed it does not seem to work. the setup is
client------>server (should use user password and name)---->webfile gets
file listing from server 3. Server 3 is another server with a shared folder
with the file listing I need to get.

This seem to work where I have the client and Server2 on the same machine,
my development machine. Just wondering if there are any ideas. thanks.

 

[cbDevelopment]

Is the root problem that you can't access a file or database from the code?
Have you confirmed that the server/Virtual Directory is using Basic or NTLM
authentication? Otherwise, you'll be impersonating IUSR_ and that won't do
you any good.

--

 

[Guest]

Hi thanks for the response. I ended up just moving the files over to the
source machine but would still like to figure out what is going on. Just
wondering how to confirm if the server/Virtual Directory is using Basic or
NTLM authentication?
Thanks, Paul.

 

[cbDevelopment]

You would use the IIS manager. Get properties of the virtual directory (or
server if you've set up a Web Site for the code). Go to Directory
Security>Anonymous Access and Authentication Control>Edit and see which
checkboxes are checked.

That's only part of the problem. Let's say all three are enabled. The
normal order is NTLM, Basic, Anonymous. So you would think that your users
would be impersonated using their logins. But if the user does not have
access to a file being requested (ASPX, GIF, CSS, whatever), IIS will fall
back to Anonymous access for the request. Then you're impersonating IUSR
again.

So you need to make sure that the folder you've deployed to on the server
has the proper permissions (that doesn't mean Everyone - Full Access,
either). Make a user group, put the designated users in the group and
assign the group to the application folder. Test by removing Anonymous
access to the virtual directory/web site.

Hope this helps.

--

 

[Guest]

Ok thanks for the information. will impliment it when I get a chance.