all groups > iis security > may 2004 >
You're in the

iis security

group:

Siteminder integeration problem with IIS


Siteminder integeration problem with IIS sumeet
5/31/2004 6:11:01 AM
iis security:
I configured Siteminder with IIS .When I am trying to run. I am getting the error

Unable to load SiteMinder host configuration object or host configuration file
C:\Program Files\Netegrity\SiteMinder Web Agent\Config\SmHost.conf

Re: Siteminder integeration problem with IIS John Alderson
5/31/2004 9:11:04 PM
[quoted text, click to view]

Sumeet,

First, uninstall SiteMinder and reinstall it on a non-OS partition (E:, F:,
etc). You should always serve web server content from a partition *other*
than the partition the OS is running from. That's really a general rule for
all application data/binaries. Keep the apps separated from the OS. You do
have a separate partition for your web content, right?

Ok, now that you have SiteMinder installed in a reasonable location, make
sure that the user account that you are running your web site under has read
access to that file.

You didn't mention version, on Windows 2000 with IIS 5.0, look at granting
either IUSR_<machine> and/or IWAM_<machine> READ access at the file system
level (NTFS) to the file in question. On Windows Server 2003, you are most
likely running as NETWORK SERVICE and to be safe you can grant the IIS_WPG
group READ permissions to the file/dir.

The easiest way to determine exactly who needs access where is to enable
Failure auditing on your Web Server volume.

-- In the Local Security Policy MMC snapin, enable Object Access Failure
auditing under Audit Policy.
--Then, go to Explorer (not IE), right click on the volume that holds your
web content - where you just moved SiteMinder - and choose Properties.
-- On the Security tab, click the Advanced button.
-- Select the Auditing tab
-- Add an entry for Everyone for all Object Access Failures.
-- Apply

Now, you can retry SiteMinder and then check the Security logs. If NTFS
access is your issue, you'll see Failure Audit entries that will detail
exactly the file, user and type of access requested that failed. This will
tell you precisely what you have to fix.

John Alderson
AddThis Social Bookmark Button