Groups | Blog | Home
all groups > iis security > october 2005 >

iis security : Script only runs from Default webistec


Jody
10/12/2005 11:27:02 AM
RE: Windows 2003 Server SP1 / IIS 6.0

I can successfully run two a perl script files from my default website but I
can not run the same files from another website.

I have verified that the permissions for the wwwroot and cgi-bin sub folders
in both the ‘Default’ and ‘mywebsite’ are the same. I only get the following
browser error with ‘mywebsite’

One file returns: "You are not authorized to view this page"
The other file returns: "The page cannot be found"

Both files are in the same folder and it seems odd that they would return
different errors.

Here are my permissions settings for both website at the folder level and in
IIS.

Folder permissions were obtained by Right-clicking the folder, selecting
'Sharing & Security' and then the 'Security' tab.

---------------------------------------------------------------------
Account Root InetPub & cgi-bin sub-folder
---------------------------------------------------------------------
Administrator & System: Full
IIS_WPG & Users: R&E, L, R
Internet Guest Acct: None

-----------------------------------------------------
IIS Permissions Default & mywebsite
-----------------------------------------------------
Root InetPub folder: Same as Folders
cgi-bin sub-folder: Same as Folders
Perl Virtual Directory: Same as Folders
Internet Guest Account: Same as Folders + has R&E, L, R

---------------------------------------------------------------------------------------
IIS Properties Root InetPub folder cgi-bin & Perl Virtual Dir
---------------------------------------------------------------------------------------
Default & Mywebsite: Script source access -
Read Read
Write -
Scripts & Exe's Scripts &
Exe's

Any ideas?
Thanks - Jody
David Wang [Msft]
10/13/2005 4:15:00 AM
Are you saying that you can run the Perl script files from the commandline
but cannot run them from a website, or are you saying that you can run it
from one website but not another, yet both websites are supposedly
"identically" configured. In particular, you are also saying that both
websites are pointing to the exact same physical files, so execution should
be identical on both websites.

Please report the actual IIS Log entries corresponding to both of your
browser errors. The log files are in:
%systemroot%\system32\LogFiles\W3SVC#\*.log

I see lots of problems with the configuration you describe and several
pieces of missing information, but I do not know what you are trying to
accomplish, so I cannot suggest better.

--
//David
IIS
http://blogs.msdn.com/David.Wang
This posting is provided "AS IS" with no warranties, and confers no rights.
//
[quoted text, click to view]
RE: Windows 2003 Server SP1 / IIS 6.0

I can successfully run two a perl script files from my default website but I
can not run the same files from another website.

I have verified that the permissions for the wwwroot and cgi-bin sub folders
in both the 'Default' and 'mywebsite' are the same. I only get the
following
browser error with 'mywebsite'

One file returns: "You are not authorized to view this page"
The other file returns: "The page cannot be found"

Both files are in the same folder and it seems odd that they would return
different errors.

Here are my permissions settings for both website at the folder level and in
IIS.

Folder permissions were obtained by Right-clicking the folder, selecting
'Sharing & Security' and then the 'Security' tab.

---------------------------------------------------------------------
Account Root InetPub & cgi-bin sub-folder
---------------------------------------------------------------------
Administrator & System: Full
IIS_WPG & Users: R&E, L, R
Internet Guest Acct: None

-----------------------------------------------------
IIS Permissions Default & mywebsite
-----------------------------------------------------
Root InetPub folder: Same as Folders
cgi-bin sub-folder: Same as Folders
Perl Virtual Directory: Same as Folders
Internet Guest Account: Same as Folders + has R&E, L, R

----------------------------------------------------------------------------
-----------
IIS Properties Root InetPub folder cgi-bin & Perl Virtual Dir
----------------------------------------------------------------------------
-----------
Default & Mywebsite: Script source access -
Read Read
Write -
Scripts & Exe's Scripts &
Exe's

Any ideas?
Thanks - Jody

AddThis Social Bookmark Button