Programmatically accessing individual file security configuration -- iis security

David Miller
12/19/2003 9:31:44 AM

I should have been a bit more specific in my post. I'm
attempting to get this working using IIS 5.0 on a Win2k
machine. According to the documentation, I should be
able to use a IISWebFile ADSI object to get/set the
properties I need
(http://msdn.microsoft.com/library/default.asp?
url=/library/en-us/iissdk/iis/ref_prog_iaorefiwf.asp).
However, the following C# code fails:

DirectoryEntry objIIS = new DirectoryEntry
("IIS://localhost/W3SVC/1/ROOT/autobase/leadnote.asmx");
String user = (string) objIIS.Properties
["AnonymousUserName"].Value;

Here, autobase is a virtual directory and leadnote.asmx
is the file I'm interested in. This code will fail on an
exception that the path cannot be found. If I remove the
file and reference only the virtual directory, the code
works fine. I am certain that the file exists.

Any ideas on why this is not working?

Dave

[quoted text, click to view]

Jerry III
12/19/2003 3:33:14 PM

Since it may be useful to more people I'll post the answer here too:

You need to create the file key if it does not exist. IIS does not
automatically create metabase keys for everything that's in your web
directory. So if it doesn't exist you need to create it.

Jerry

[quoted text, click to view]

David Wang [Msft]
12/24/2003 12:26:57 AM

IIS does not create metabase nodes for you on access. If the node doesn't
exist, you need to create it first before setting/using any of its
properties. Also, you need to individually create intervening nodes instead
of all at once.

i.e. you want to set values on
"localhost/w3svc/1/root/vdir1/folder1/folder2/file.ext", and you have an
existing node at "localhost/w3svc/1/root/vdir1". You need to create
folder1, folder2, and file.ext nodes individually instead of creating
"/folder1/folder2/file.ext" at once in a creation call. IIS5 doesn't force
this, but IIS6 will. Why? Well, suppose you create
"/folder1/folder2/file.ext" as a IIsWebFile, and folder1 and folder2 are
autocreated -- can you tell me what the KeyType for /folder1 and /folder2
are supposed to be??

WebFile ADSI objects do not exist by default, so you'll need to first create
it using the path that you've been using in the code. Then, you can attempt
to access its inherited properties plus set overriding properties (for
example, AnonymousUserName property is likely INHERITED from the parent. As
soon as you set it, it forever overrides any parent properties for the node
until you delete it to re-engage value inheritance).

AuthFlags = 2 makes sure only Basic is checked.
AccessSSLFlags & 0xFFFFFFF7 will turn off "Require SSL".

--
//David
IIS
This posting is provided "AS IS" with no warranties, and confers no rights.
//
[quoted text, click to view]
I should have been a bit more specific in my post. I'm
attempting to get this working using IIS 5.0 on a Win2k
machine. According to the documentation, I should be
able to use a IISWebFile ADSI object to get/set the
properties I need
(http://msdn.microsoft.com/library/default.asp?
url=/library/en-us/iissdk/iis/ref_prog_iaorefiwf.asp).
However, the following C# code fails:

DirectoryEntry objIIS = new DirectoryEntry
("IIS://localhost/W3SVC/1/ROOT/autobase/leadnote.asmx");
String user = (string) objIIS.Properties
["AnonymousUserName"].Value;

Here, autobase is a virtual directory and leadnote.asmx
is the file I'm interested in. This code will fail on an
exception that the path cannot be found. If I remove the
file and reference only the virtual directory, the code
works fine. I am certain that the file exists.

Any ideas on why this is not working?

Dave

[quoted text, click to view]

Got something to say? Click here to post a reply to this thread.

Don't see what you're looking for? Try a search.

View other messages about iis security

iis security : Programmatically accessing individual file security configuration