Psst! Did you know DevelopmentNow is a mobile web site design agency?

Contact us for help mobilizing your site, or to sign up for our beta Mobile Web SDK!
all groups > iis security > january 2005 >

iis security : Virtual Directory mapped to Netware server in IIS6 fails


Tom Murphy
1/31/2005 10:21:02 AM
Having problems setting up a virtual directory on IIS6 server and accessing
remote files/folders on Netware Server (via UNC share). For background, this
Win2K3 server is a standalone IIS server in a Netware network... And I've
done this successfully in the past with no apparent issues with Win2K
server/IIS5 and Netware...

In IIS console, the folder/file icons are visible, so you would think all is
well. BUT... If you right click a file (jpg or pdf for example) and select
browse, OR type in the URL to that file in a browser, the server returns a
generic 500 error. After disabling friendly error messages', you get one of
the following errors:

The specified user does not exist.
The network name cannot be found.

IUSR account has been mirrored and given proper rights on Netware server.
IUSR is set up as the Virtual Directory 'Connect As' user and the IIS
Anonymous User, the 'always use local user to...' checkbox is Unchecked...
In all cases, the IUSR is apparently authenticating. When given login rights
and logging in as IUSR, the files are accessible, and the icons are visible
in IIS control panel.

Any ideas?

Thanks in advance,

Bill
3/17/2005 2:20:28 PM
Did you ever find a resolution to this problem? I am having the exact same
problem, but I'm trying to access data on a Win2k server. I can see the
folders and files in IIS, but they will not display just as you've noted.

Tom Murphy
3/17/2005 8:59:02 PM
Bill,

Yes and no. We also had this problem with a Win2k server, but after setting
up IUSR as app pool identity, anonymous user, and virt dir 'connect as' user,
the problem went away (apparently there has to be some sort of 'continuity'
of authentication, even though the different users that were configured had
proper permissions). No clue.

I did get a response in iis.general, but it didn't help resolve the problem
with a Netware server. I did find a workaround though. For this particular
IIS6 box, we were able to configure it to run in 'IIS 5.0 Isolation Mode'.
This changes the user contexts back to the way they were in IIS5 (IUSR/IWAM
instead of Network Service). No problems after that.

I'm pretty sure there's a bug somewhere in IIS6 regarding UNC authentication
for virtual directories as I'm pretty sure I had everything set up properly,
but no one in iis.general has responded in a month or so, so unfortunately we
may never know...

HTH.

Tom

[quoted text, click to view]
Bill
3/18/2005 3:15:03 AM
Would you mind linking to that post so that I might read it as well? Thanks
for the reply. I'll give those things you mentioned a shot today.
Seriously, I was considering going back to Win2k if necessary.

B

[quoted text, click to view]
Tom Murphy
3/18/2005 6:33:11 AM
Bill,

here ya go:

http://www.microsoft.com/communities/newsgroups/en-us/default.aspx?dg=microsoft.public.inetserver.iis&mid=b467bfc2-4a7f-4f34-bcb2-b5bf0cbcfc90

If that link doesn't work, its under Windows Server - IIS - IIS General
(search for 'Netware')

Tom

Bill
3/18/2005 9:17:08 AM
We got "read" working from the remote virtual directory. We did this by
creating a specific user account for this purpose. It's username/passwords
are synchronized. For whatever reason it won't work if you try to use an
account that exists on the remote computer, but not on the local computer.
Go figure. Anyway, I haven't tried "write" access yet so that ball is still
up in the air.

Thanks for the reply!

AddThis Social Bookmark Button